Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/41edddd0-897c-4908-95f3-f91fe83f3035.roa
File:                     41edddd0-897c-4908-95f3-f91fe83f3035.roa (raw, json)
Hash identifier:          Uy/a6TA3AONNQggnnQiYmnwl5x1YArkRvGUzanMxEAY=
Subject key identifier:   53:4A:B3:8A:08:AF:33:60:42:25:25:38:BB:5A:68:F8:44:5F:DF:AA
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       68F57B3837D8A79717055C39154076AD699B2D06
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/41edddd0-897c-4908-95f3-f91fe83f3035.roa
Signing time:             Tue 13 Jun 2023 00:00:00 +0000
ROA not before:           Tue 13 Jun 2023 00:00:00 +0000
ROA not after:            Fri 16 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f5:7b:38:37:d8:a7:97:17:05:5c:39:15:40:76:ad:69:9b:2d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 13 00:00:00 2023 GMT
            Not After : Jun 16 23:59:59 2023 GMT
        Subject: serialNumber=53f02b8b683c1995c089ae839f1ce0d7d0506e0b9731e8a89f654d887bd37733, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:ef:40:af:d5:ac:72:0c:18:9d:e2:04:f1:
                    15:3a:0c:6d:8c:d8:48:55:75:6e:af:86:cc:65:38:
                    e3:8c:11:ac:7d:9b:dd:f6:61:03:ac:0c:fe:1d:47:
                    c0:d5:1e:43:e0:06:4f:ee:d0:c4:d0:68:ce:79:32:
                    7f:3b:61:3f:8f:ef:b2:43:a1:5e:ce:4c:15:f9:7e:
                    5a:28:24:c5:e4:b7:3d:d2:8e:d2:61:2e:45:b8:da:
                    24:e0:91:20:b1:bd:4d:25:1d:dd:72:e1:93:0a:a0:
                    8d:d0:fb:c6:6b:1c:38:48:02:1f:e1:d5:3b:0a:3e:
                    87:66:da:c3:62:81:ea:1d:73:fb:a5:23:95:75:dc:
                    13:85:f0:1b:f2:54:93:cb:e5:8d:ed:30:7e:50:7c:
                    fa:ea:bb:fb:49:cc:13:4b:08:4e:7a:89:7d:b3:50:
                    63:97:4f:a7:97:ce:11:4a:e6:88:91:62:18:00:51:
                    ec:9f:f6:0d:54:8e:10:be:d1:64:7b:54:76:52:e4:
                    fc:df:5b:99:64:bd:14:4c:3b:37:17:f0:51:94:fb:
                    eb:3b:32:76:b6:3f:82:c6:c4:95:86:12:34:b1:97:
                    1d:ac:db:5e:c9:f0:fd:47:71:1e:e5:ed:a9:6f:7b:
                    53:15:47:85:92:39:d9:bd:b9:e2:08:4b:c7:47:d4:
                    d1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4A:B3:8A:08:AF:33:60:42:25:25:38:BB:5A:68:F8:44:5F:DF:AA
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/41edddd0-897c-4908-95f3-f91fe83f3035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:94:e6:a9:f7:2c:52:85:4f:fb:32:d0:e5:f4:96:6f:66:72:
         5f:15:c1:f2:c2:f4:48:f0:d8:70:a8:f2:8b:bf:50:b6:9c:3d:
         ea:cc:f5:19:b0:78:3c:fb:c6:4a:ed:2d:5c:55:4c:40:25:46:
         60:9c:73:90:ff:16:0f:b2:28:7f:a1:2c:4d:b1:2b:2b:ca:ad:
         ff:16:cd:8b:8a:9f:84:88:f7:f1:47:06:9c:d5:52:f9:bf:7f:
         4e:d3:d8:f7:57:78:58:48:0d:29:8c:bf:c7:1e:77:73:2d:5c:
         76:01:8d:e9:93:84:33:f3:4f:5a:92:92:2e:82:cf:ef:32:b7:
         f9:e4:1c:bd:82:e1:d7:77:28:0f:b1:ee:72:50:7b:f5:15:48:
         2f:74:a8:d4:50:21:61:07:ad:38:81:15:fb:08:19:a6:aa:cb:
         04:c7:d3:ca:e0:b2:70:8e:c2:42:54:1d:e0:eb:cf:87:8f:8b:
         4c:3b:13:7e:90:18:e2:1b:c0:76:70:9a:07:1c:9f:d5:b8:25:
         9b:c9:f6:f2:81:0f:77:b7:0d:0d:69:4a:a6:37:27:e5:d4:cc:
         ab:8f:e0:10:22:d0:4e:bc:47:10:d6:c8:fa:2a:73:3b:74:c0:
         c7:41:48:46:d7:00:9a:3f:5b:14:6f:d2:18:1c:75:91:e7:50:
         77:48:ac:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----