Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5e77b2bd-2458-4625-a33d-c41676e245d6.roa
File:                     5e77b2bd-2458-4625-a33d-c41676e245d6.roa (raw, json)
Hash identifier:          f0yUoeZpzfLLyxwnncRO3YonT9IHfOdiiuWws2jbeAQ=
Subject key identifier:   D6:CA:D1:21:D7:19:BA:C8:1C:EA:4E:8A:52:62:0F:2C:C1:56:34:75
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       02DE2C8318C3D5FB745B5EC366BF51467DA5C0AB
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5e77b2bd-2458-4625-a33d-c41676e245d6.roa
Signing time:             Sun 11 Jun 2023 00:00:00 +0000
ROA not before:           Sun 11 Jun 2023 00:00:00 +0000
ROA not after:            Wed 14 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:de:2c:83:18:c3:d5:fb:74:5b:5e:c3:66:bf:51:46:7d:a5:c0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 11 00:00:00 2023 GMT
            Not After : Jun 14 23:59:59 2023 GMT
        Subject: serialNumber=906dd837f9b67e9ac5c8bd537cfacf25f2c8e7a03047b5065792e0eeb1d6a109, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ba:e8:dd:f6:2e:ec:6e:ed:90:e3:25:5c:4e:
                    bb:98:b0:de:14:e3:c1:37:db:88:5b:a6:d7:d6:62:
                    31:c9:97:18:a9:f9:f6:41:c3:d1:69:3c:be:b9:5d:
                    2c:2b:51:4c:ba:5d:9d:d7:f5:30:13:72:3d:c7:c8:
                    bd:fe:3a:8b:e8:de:f1:08:57:45:e2:f6:b5:04:01:
                    08:03:98:36:d5:cc:51:ee:56:a4:1a:85:82:07:b5:
                    62:f1:5d:88:d8:c4:66:75:f7:b3:89:9b:f1:a1:00:
                    1d:41:53:bd:cc:97:2a:26:1b:5a:37:60:e9:db:2a:
                    16:d2:61:0e:8e:5b:6c:10:0b:ce:fe:6a:97:6c:49:
                    0f:10:ce:be:45:e4:62:38:98:ac:4c:cd:58:18:09:
                    e7:de:58:8a:92:f5:89:65:de:93:81:51:77:4a:35:
                    fd:e3:1a:a5:28:5e:30:d5:06:78:92:cd:a9:5e:ca:
                    66:33:1f:3b:30:e0:b2:dd:16:df:70:0d:25:66:ce:
                    36:cf:48:d1:0e:ae:7e:d0:60:e6:8e:e2:c5:9e:e4:
                    4e:c3:92:be:de:c9:63:89:ec:4b:15:1b:0d:09:9a:
                    7c:22:75:c4:06:5c:f9:5e:c2:5a:60:da:aa:30:07:
                    b9:aa:ac:16:53:07:b9:59:42:c7:91:23:7a:88:31:
                    d7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CA:D1:21:D7:19:BA:C8:1C:EA:4E:8A:52:62:0F:2C:C1:56:34:75
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5e77b2bd-2458-4625-a33d-c41676e245d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:3f:08:f7:26:cf:29:7c:8b:92:ca:14:76:06:35:c1:5e:0a:
         30:4d:c4:b1:69:5a:e2:b1:33:21:b8:00:1f:e2:25:89:3a:14:
         5b:88:c4:5c:96:d7:2b:76:cf:68:c0:68:6d:ec:03:ae:a3:ce:
         b7:cb:35:bb:d8:ee:1b:f3:b2:6b:84:7c:87:c2:a3:fb:9d:a0:
         24:ba:f4:dd:95:a7:37:45:6d:6c:11:94:c0:a0:de:c4:ee:b1:
         ff:63:fd:ca:72:78:35:e1:16:48:8b:20:89:f3:0a:a3:da:38:
         67:b2:2a:fb:d5:f2:ba:36:fc:27:af:65:6e:49:d3:fe:a6:ee:
         42:93:f7:18:04:b2:0c:3f:b7:12:18:bd:fa:51:7d:c9:cc:93:
         62:0a:a6:d0:68:a3:ce:ce:d5:a8:71:e1:cf:09:4d:ed:32:71:
         fd:67:75:22:8b:57:fd:f1:ef:c0:94:49:58:0b:6c:ea:e4:bf:
         9f:be:48:41:06:27:29:d1:c0:4d:3b:ca:4d:ee:f5:c2:79:a6:
         9d:b9:b6:80:8e:6c:19:86:2f:68:d1:a8:f2:6b:1f:2a:69:01:
         24:60:02:1f:63:86:62:d0:e6:71:d6:6b:91:c9:f4:61:3d:e4:
         91:32:9c:27:c4:92:45:8c:5e:84:ba:7e:38:ee:2e:6a:95:89:
         36:9d:36:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----