Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/43c269f0-8056-4fef-8f9e-8f707ddcaf0f.roa
File:                     43c269f0-8056-4fef-8f9e-8f707ddcaf0f.roa (raw, json)
Hash identifier:          BpEbaW2Ec23pcRP9p3VgJkM68Rrn3BT5OaiTDWLVTfo=
Subject key identifier:   26:85:85:4C:44:A4:6D:DF:9E:97:E4:13:8F:AB:55:E6:2A:A9:16:02
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4AC1782C88FFAA449479AF759C498019AC13E5D0
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/43c269f0-8056-4fef-8f9e-8f707ddcaf0f.roa
Signing time:             Sat 10 Jun 2023 00:00:00 +0000
ROA not before:           Sat 10 Jun 2023 00:00:00 +0000
ROA not after:            Tue 13 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c1:78:2c:88:ff:aa:44:94:79:af:75:9c:49:80:19:ac:13:e5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 10 00:00:00 2023 GMT
            Not After : Jun 13 23:59:59 2023 GMT
        Subject: serialNumber=7051e54ea20a84ba200f10979c19842cd59acfd557c693453d1f9e9f347b0c9b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3c:83:27:1b:46:46:e7:8c:fb:fc:69:99:bb:
                    21:a5:5a:81:7a:3f:0e:12:b8:cd:c4:c8:c8:8d:b7:
                    a6:68:b9:df:e4:e7:15:c1:3f:b2:8b:ca:0c:85:e4:
                    1b:62:34:75:6c:a3:e7:20:47:d4:b5:f6:64:b3:53:
                    c6:0e:d8:a3:29:11:ff:f1:3a:ef:2d:e0:e0:a2:55:
                    2d:81:37:86:a3:99:09:c5:41:dc:d8:f2:af:f7:f6:
                    22:0e:13:10:24:83:b6:67:1d:fe:c4:f4:f4:16:66:
                    2d:76:13:82:a2:f1:32:44:21:52:7f:4f:3a:ae:6b:
                    e1:ee:64:94:2c:30:33:bd:01:85:c0:3a:8b:94:2f:
                    8e:0a:01:62:9e:65:57:34:00:8c:29:0d:f0:4e:6e:
                    f7:8d:73:9d:97:eb:b5:ff:92:58:29:0d:2e:2e:68:
                    72:cb:b6:d0:9b:0a:39:11:da:ad:e5:f8:18:45:2b:
                    c5:15:95:a3:3a:82:d6:83:b8:a6:44:62:ef:8e:44:
                    2d:12:50:ac:12:c8:02:47:f6:30:8b:f3:ac:5d:48:
                    ff:75:be:b5:b8:ae:de:b0:18:56:9e:28:31:c8:2b:
                    d8:1d:f1:af:57:0b:5d:81:7e:2f:4f:33:4f:da:8b:
                    66:1e:a1:8a:c4:b5:4d:45:ea:66:74:4f:fe:c7:98:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:85:85:4C:44:A4:6D:DF:9E:97:E4:13:8F:AB:55:E6:2A:A9:16:02
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/43c269f0-8056-4fef-8f9e-8f707ddcaf0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:64:c8:e2:3d:cd:43:3f:3d:14:c8:ec:81:93:96:85:ba:03:
         9d:04:50:cc:b2:2c:70:6a:2e:be:63:0d:ca:1f:72:19:e3:ed:
         02:fe:65:b1:f3:45:1b:15:7f:c1:8c:98:9e:67:ba:96:b4:8b:
         fe:96:fc:a1:d3:54:9e:c5:db:d8:d8:69:e7:44:b3:5f:a7:bf:
         ff:62:a7:5d:67:e8:6a:e3:c5:ec:fd:b2:3f:e6:97:9b:d1:ab:
         5a:91:e2:2a:c4:e7:7b:39:57:b2:86:d3:f5:45:5d:f1:a2:bb:
         64:3d:03:53:94:0d:08:fa:5a:d1:96:a3:8a:6c:4d:fc:92:dd:
         04:92:77:36:c3:de:e8:14:24:e7:f1:dc:9b:d5:d6:9b:fa:5a:
         91:3e:8f:ca:7f:6e:11:a3:06:fa:14:8a:4e:b2:b4:ee:ad:64:
         e1:46:15:da:36:76:a2:2d:cd:d1:c4:b1:9f:69:99:84:c4:57:
         f5:fa:0f:32:10:4a:a4:b0:b2:e7:1d:81:df:e5:f8:64:e8:4a:
         dd:43:06:64:53:95:56:3f:59:70:45:3a:21:cb:c5:37:cb:b3:
         c5:39:d1:30:c8:83:c4:bf:77:61:f4:b5:9f:9c:8b:fd:1d:74:
         93:50:3a:b7:9b:54:a2:97:0d:56:1c:5c:ca:c4:ab:e0:db:88:
         58:02:2e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----