Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/62b0880b-b6e3-48d5-a372-f5a4c76a87eb.roa
File:                     62b0880b-b6e3-48d5-a372-f5a4c76a87eb.roa (raw, json)
Hash identifier:          L9yT5H3VGuB+Hij/prm3K1yxz9nJy7uGoHKORoD06mE=
Subject key identifier:   73:52:BF:02:1B:CE:FB:DF:E7:C8:A2:AB:3B:3C:DE:5D:94:AB:CA:DB
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6C00802263EB14AE1E9DCAA022635D339B2F93A2
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/62b0880b-b6e3-48d5-a372-f5a4c76a87eb.roa
Signing time:             Tue 13 Jun 2023 00:00:00 +0000
ROA not before:           Tue 13 Jun 2023 00:00:00 +0000
ROA not after:            Fri 16 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:00:80:22:63:eb:14:ae:1e:9d:ca:a0:22:63:5d:33:9b:2f:93:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 13 00:00:00 2023 GMT
            Not After : Jun 16 23:59:59 2023 GMT
        Subject: serialNumber=dd1e65741f6b6aaac7282c085c98b1e9e3409bafbea465b5b5441eee3143fec0, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:44:29:22:61:68:48:9a:53:a1:66:ba:f8:5a:
                    e8:dd:41:53:28:81:ad:e7:39:99:9c:6a:f3:64:75:
                    c9:e5:f7:99:0a:10:30:ba:bf:b6:06:fe:d0:fa:33:
                    71:16:26:19:b7:8c:80:eb:be:d8:73:6c:5e:ff:64:
                    57:5f:17:18:ee:4d:71:82:5b:b5:c5:d4:30:a1:de:
                    0a:bc:be:70:19:65:fd:92:72:0d:6f:72:eb:92:ed:
                    a4:b7:a7:a9:96:7a:f4:61:3b:0c:46:44:f9:45:15:
                    6b:f2:fd:1d:bd:c4:a2:24:3e:de:49:69:51:64:ce:
                    68:ae:23:f2:47:be:0b:fb:82:f8:11:71:05:57:25:
                    99:da:6d:d8:42:77:12:1d:78:66:51:31:2e:0f:5a:
                    e1:e9:9f:df:a6:5d:c7:61:2e:78:db:49:ae:67:1f:
                    e7:18:0b:85:21:2b:93:19:77:b5:83:d5:95:a6:a6:
                    83:60:79:57:52:42:1c:c5:fc:d6:d1:67:7f:3b:6f:
                    50:39:0f:fc:c0:59:b8:75:93:c0:d7:05:52:51:ad:
                    6d:79:67:93:0e:dd:87:55:8f:82:7a:9d:7d:1b:c2:
                    82:cc:c2:55:85:88:46:38:b4:7b:4f:4f:ed:6d:45:
                    71:8d:54:c6:c4:c4:d0:53:14:64:5f:11:67:b3:4b:
                    bb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:52:BF:02:1B:CE:FB:DF:E7:C8:A2:AB:3B:3C:DE:5D:94:AB:CA:DB
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/62b0880b-b6e3-48d5-a372-f5a4c76a87eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:6c:54:ad:09:aa:15:d0:77:c5:b5:1d:0f:d0:52:01:b0:e3:
         9f:14:20:6b:95:66:10:41:b3:a8:b7:f9:95:c1:a5:75:f6:81:
         5f:00:e8:31:33:f6:69:95:39:2d:4d:66:0b:75:d1:f2:1d:b7:
         f3:62:5e:01:eb:a4:f8:78:26:a3:1b:e1:ff:a1:8f:79:ea:f2:
         d1:42:80:e0:ad:8c:7c:c9:a9:94:27:50:52:46:62:f5:2d:20:
         a2:d0:4d:6f:cb:91:07:20:c9:d9:55:c7:dd:83:4b:ee:90:0b:
         6b:2d:99:be:fc:b6:cc:52:f6:63:22:4e:f6:3a:6a:2c:77:b7:
         8a:c6:01:45:30:c3:51:87:a7:97:9c:e6:18:94:d5:76:51:38:
         81:d8:3d:7e:4a:d6:f3:63:65:71:d5:54:52:aa:ba:8a:65:23:
         63:81:7e:70:98:6b:c5:4e:84:f6:0c:71:e2:cc:b6:23:0d:30:
         f6:16:7c:f4:42:f4:16:46:6d:88:77:3c:3d:01:15:e6:f1:33:
         7b:93:eb:b7:52:d7:75:60:93:c5:e4:da:16:e9:a1:53:e1:60:
         ab:b0:5e:2b:8b:a5:2d:fe:b9:d0:80:40:9c:76:9d:cb:5d:f2:
         82:f8:a7:9a:6c:9d:6c:21:84:dc:c1:8b:e8:bc:43:89:69:5a:
         2d:72:62:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----