Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/496d9da4-2bbf-40d2-a760-8ae61baee3f0.roa
File:                     496d9da4-2bbf-40d2-a760-8ae61baee3f0.roa (raw, json)
Hash identifier:          RWaicT4C+dh/7BrwA7Q7mnZ5R7ABMnAJeJzvxUH/XUI=
Subject key identifier:   2F:85:30:CD:CC:CE:EC:0B:96:4D:75:CF:B0:48:36:B5:EA:AD:CA:DB
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       660A6EE5A3E5251FFA4DCE6037E5590C73B05120
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/496d9da4-2bbf-40d2-a760-8ae61baee3f0.roa
Signing time:             Thu 08 Jun 2023 00:00:00 +0000
ROA not before:           Thu 08 Jun 2023 00:00:00 +0000
ROA not after:            Sun 11 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0a:6e:e5:a3:e5:25:1f:fa:4d:ce:60:37:e5:59:0c:73:b0:51:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun  8 00:00:00 2023 GMT
            Not After : Jun 11 23:59:59 2023 GMT
        Subject: serialNumber=d21a67e4b7d8fc875e9408631982de0296192969b694521ca90bcbc63fd9c2b4, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6b:c8:f5:d0:24:95:2a:69:f7:f6:b6:fa:ab:
                    94:d8:a2:09:86:5d:6d:b3:48:8f:35:13:9a:4f:b5:
                    b6:e5:e6:a9:39:ba:c3:0c:c6:03:67:e7:23:88:69:
                    98:2a:53:e2:af:1d:32:c1:e2:ae:bb:25:99:a3:39:
                    c9:bf:55:c4:a7:6c:56:27:98:89:8f:f0:7a:c2:fd:
                    6f:15:5a:3a:d4:1e:df:0a:b4:af:01:a4:25:25:fa:
                    f8:09:3d:d7:6b:e9:70:c8:8c:44:10:1a:6c:67:01:
                    0c:9b:42:ed:1b:28:df:99:f1:99:77:94:d0:98:25:
                    f0:08:0d:75:de:de:53:4e:25:e2:ce:f4:1e:cc:49:
                    bb:c0:71:77:b9:08:1f:32:40:cb:91:a3:6c:e1:6c:
                    f3:3f:81:d4:ca:0f:76:68:67:5d:4a:0d:8b:e4:a9:
                    99:ac:4f:88:be:67:0f:4b:a2:13:a4:5b:6f:4e:09:
                    37:11:0f:d7:a3:59:e5:c5:2f:f1:6a:8a:88:5a:ee:
                    18:4c:ef:d8:09:de:7a:c7:5f:7e:61:e8:73:0a:64:
                    a1:7e:34:a6:ed:7a:91:5a:5c:0d:1e:92:63:05:84:
                    83:e3:65:69:75:e0:bd:31:65:3c:97:dd:44:dd:a5:
                    a4:f5:65:b2:43:a4:a9:a6:52:2d:b9:e5:54:6d:69:
                    7a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:85:30:CD:CC:CE:EC:0B:96:4D:75:CF:B0:48:36:B5:EA:AD:CA:DB
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/496d9da4-2bbf-40d2-a760-8ae61baee3f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:5a:db:68:dd:8f:dd:39:67:0f:e5:be:9b:8d:11:65:2f:41:
         87:ea:9c:d4:5e:01:05:20:bb:aa:88:51:92:57:af:1e:13:e1:
         4d:94:42:1b:4d:45:6b:4d:82:06:31:6f:89:33:b7:93:dd:ab:
         e2:0f:37:fc:c0:7c:fd:bf:ff:ea:f4:e5:b5:92:0c:0e:c7:92:
         c5:33:75:da:90:ef:8a:80:fc:62:aa:8f:da:df:7a:c7:86:99:
         52:3b:96:ff:bf:41:4a:fe:a1:02:d8:3c:ff:a8:fe:05:8b:7f:
         96:78:ef:45:25:3a:17:72:2c:d5:f4:e6:b9:b7:89:a0:42:29:
         45:ac:1f:59:44:bf:a0:ca:2b:9a:89:00:88:86:8f:4c:64:5e:
         c8:39:d6:90:44:ff:05:3b:40:40:62:dc:34:93:7c:5c:e1:a5:
         af:65:53:dc:f2:26:2b:e1:86:5a:bf:9b:59:09:de:e9:f0:e1:
         9b:88:e5:ef:67:83:a3:a6:5e:f7:59:66:b4:b0:c1:a8:19:ff:
         26:2b:58:24:00:4f:68:7d:ee:a7:ff:cf:76:68:c9:05:7a:1d:
         67:64:86:8f:d8:bf:34:26:97:28:e3:62:e7:61:ea:1e:ef:de:
         6a:42:65:07:ad:45:36:73:d9:cb:c4:4f:53:f4:c3:01:7b:12:
         7b:3d:e7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----