Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6613722a-c6df-4a6f-9287-25b6adbf3c2c.roa
File:                     6613722a-c6df-4a6f-9287-25b6adbf3c2c.roa (raw, json)
Hash identifier:          7Vmr6mXo9UHYufGm5S6b4rAnff0Mxsy12VtPSQg8YnU=
Subject key identifier:   3A:37:43:C4:3B:B5:A9:C2:0C:E8:BF:9F:0B:9E:3F:63:BB:CD:4B:70
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       209E452ECEDE5A299FA1E0A19F6BB275CEC1BBC1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6613722a-c6df-4a6f-9287-25b6adbf3c2c.roa
Signing time:             Sun 11 Jun 2023 00:00:00 +0000
ROA not before:           Sun 11 Jun 2023 00:00:00 +0000
ROA not after:            Wed 14 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9e:45:2e:ce:de:5a:29:9f:a1:e0:a1:9f:6b:b2:75:ce:c1:bb:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 11 00:00:00 2023 GMT
            Not After : Jun 14 23:59:59 2023 GMT
        Subject: serialNumber=9af01d042d816df7bab16ac009c3c72e250002673940e00cc96f7733d7eb8830, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:bb:3e:b7:5c:fb:0c:da:74:9b:5b:a4:d9:
                    fa:4b:f5:1f:45:db:a2:e9:c4:70:b6:6d:62:8b:45:
                    e5:36:81:fc:f1:89:4e:99:4e:c4:e5:fc:14:30:6c:
                    a5:9c:62:c8:9c:aa:6e:d9:e1:7a:a1:a9:a4:35:f9:
                    d2:ee:32:1b:5e:01:84:07:27:75:77:4b:62:00:e4:
                    44:01:61:e9:bc:ef:49:5e:1d:16:9b:11:e6:a4:8b:
                    96:81:f9:1e:a8:71:ed:77:9a:ce:24:4e:ce:07:a5:
                    af:fb:74:99:8c:f3:48:31:7c:4b:18:e4:cc:6d:e6:
                    78:b6:00:42:90:9c:5a:e4:3b:2a:1b:05:29:23:07:
                    74:1e:55:34:32:ae:39:cb:36:d4:5f:73:10:6e:50:
                    44:f1:e6:ce:f1:05:54:e9:97:01:69:0f:17:b3:a3:
                    4b:32:c2:12:e8:53:8e:97:ab:78:1d:87:cd:13:cc:
                    c9:9f:1a:44:a8:75:cb:00:c0:25:44:2d:81:2a:25:
                    41:1f:2a:0f:06:fb:cb:c1:93:ff:f2:07:66:4d:2b:
                    f0:95:dc:bd:36:05:2f:7b:5d:87:46:3c:06:c3:22:
                    43:a0:7b:13:35:6b:69:d0:70:17:04:77:72:0d:f6:
                    d5:35:0b:21:33:30:d2:ea:21:f9:6c:9f:cb:34:1e:
                    92:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:37:43:C4:3B:B5:A9:C2:0C:E8:BF:9F:0B:9E:3F:63:BB:CD:4B:70
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6613722a-c6df-4a6f-9287-25b6adbf3c2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:0f:8c:db:28:d9:02:e8:8a:4e:ab:1d:7d:70:83:f6:01:cd:
         1f:83:57:be:d5:19:0a:99:66:ea:1e:ca:d6:b4:f9:c1:c3:83:
         d3:e1:c7:bc:e5:c1:fa:3b:3e:c2:5c:81:21:ad:9b:03:a7:51:
         55:69:fd:a8:7b:62:bc:59:e9:4d:bc:5c:ca:01:11:ff:df:bb:
         de:16:6c:e0:54:30:2b:a6:6a:85:0b:39:db:3c:5e:52:7a:01:
         08:66:f1:ad:9c:07:e9:8b:2f:48:53:5e:b6:dc:de:5a:f7:dd:
         0e:3f:81:1c:e6:a4:82:5a:76:9b:36:32:2e:72:43:2d:cb:e7:
         f0:5b:26:b9:72:12:f7:e8:2d:09:18:03:8a:d0:44:f7:84:d7:
         21:ae:e2:ec:cc:1c:fc:ed:c7:71:bd:c7:23:9c:e8:b9:04:15:
         ab:bb:51:fa:33:1b:e5:26:ec:83:a6:04:ce:95:2c:bb:03:76:
         1c:00:96:ba:71:d9:3f:58:43:b1:83:7e:86:79:dc:da:5c:47:
         1a:af:4b:f6:cc:df:3f:5f:bd:13:8b:5b:e0:dc:0e:af:70:14:
         a4:f2:25:c3:a8:e1:ac:4c:cb:21:14:7b:6e:7d:7e:d7:35:33:
         13:ee:9e:0d:47:50:e8:08:46:c9:71:2b:44:ef:29:8a:f6:00:
         f8:7c:19:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----