Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/66d0161d-8934-43bd-b4e0-8d0199d90026.roa
File:                     66d0161d-8934-43bd-b4e0-8d0199d90026.roa (raw, json)
Hash identifier:          iiyU62xS2nwyDf4xs1y9WLcp+SYm/vx+2efEPiEeoII=
Subject key identifier:   60:31:FB:84:81:0F:82:79:6A:EF:19:32:B2:D9:F0:BC:65:87:CE:E5
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       47C954731E5B68C7960DE4B28CF40C3EF83E2219
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/66d0161d-8934-43bd-b4e0-8d0199d90026.roa
Signing time:             Wed 14 Jun 2023 00:00:00 +0000
ROA not before:           Wed 14 Jun 2023 00:00:00 +0000
ROA not after:            Sat 17 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c9:54:73:1e:5b:68:c7:96:0d:e4:b2:8c:f4:0c:3e:f8:3e:22:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 14 00:00:00 2023 GMT
            Not After : Jun 17 23:59:59 2023 GMT
        Subject: serialNumber=de0c3fb082bfca75d5540a40c88d1509ee41430f68069d9292cee669e4046017, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:16:f3:9d:c8:23:df:3a:a0:52:34:75:b4:6b:
                    ab:45:ad:1b:e2:66:fe:f5:b9:7a:75:f8:36:1b:14:
                    df:d9:17:00:c4:63:af:a2:03:5b:b4:83:2b:83:1e:
                    d7:31:0f:b5:f2:dc:39:83:a4:32:68:42:39:db:51:
                    46:ce:4a:4f:83:5b:95:b0:05:ae:b4:5a:5a:19:01:
                    52:cd:af:bf:d2:d8:6b:be:c5:24:0d:2e:ba:f7:02:
                    bc:11:24:68:99:c3:f0:9c:72:c0:e8:60:24:b8:80:
                    b7:df:40:10:b6:44:f4:5b:e4:9f:40:e1:0c:ee:93:
                    80:47:b2:3f:57:aa:7b:df:fd:c3:13:f0:90:77:8a:
                    20:67:ec:ae:b8:c7:e1:0a:8a:30:eb:cd:b2:da:ce:
                    36:a7:50:6e:0b:f0:b3:06:b8:20:b6:d9:8a:02:38:
                    29:f2:f9:cd:8f:f3:de:8e:ea:da:3d:53:3c:3e:0f:
                    41:0c:01:56:05:b0:7a:8a:9d:08:3a:74:55:49:d2:
                    9d:8b:e3:23:4d:fc:3b:9a:1f:5c:3a:11:28:b0:5b:
                    45:88:50:68:14:30:5c:d1:a9:ca:7d:3f:05:ce:05:
                    ba:75:1c:62:e2:b0:4e:c4:d9:bc:80:cf:83:0b:8b:
                    26:c4:d7:47:a5:62:a5:5d:3d:dd:50:c2:b3:63:c2:
                    bf:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:31:FB:84:81:0F:82:79:6A:EF:19:32:B2:D9:F0:BC:65:87:CE:E5
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/66d0161d-8934-43bd-b4e0-8d0199d90026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:9d:91:a0:da:5c:04:64:a4:17:69:bd:81:58:f8:04:1e:f3:
         b4:d8:66:32:04:b2:32:a1:1a:b0:57:4d:1e:32:bf:62:d6:9f:
         ba:25:32:ef:d8:db:2b:12:47:02:12:92:ad:c5:4e:bd:e4:8e:
         58:48:75:73:ff:f7:02:0c:80:16:05:f0:54:36:ca:a0:5e:11:
         f2:ab:38:35:d7:52:e6:1c:25:0a:38:ba:f8:c6:33:f7:a1:81:
         9c:8d:3a:9a:d4:67:da:52:58:7e:1d:4b:ca:cb:11:52:a1:fe:
         e9:75:90:8a:da:24:ae:af:2e:ed:0e:63:4f:fb:e3:b7:8d:aa:
         8f:62:42:9f:3a:9f:38:4f:e9:52:72:00:6f:71:bf:4a:b7:3f:
         65:bd:0c:69:35:84:a0:22:04:e0:06:2a:fa:a6:92:4c:e7:bb:
         32:70:bc:f7:40:3a:ee:09:8a:19:1c:eb:f0:c0:0e:2c:5b:7a:
         7b:85:d3:1d:65:a1:ce:fa:24:33:5d:02:68:58:64:1d:59:50:
         a5:eb:01:4f:dc:c0:12:c9:b3:12:3b:52:2f:8e:b8:06:93:30:
         e8:20:ad:62:98:b1:93:42:dc:9f:b8:88:f3:cb:29:74:25:9a:
         52:04:be:68:64:3f:e2:62:a8:d5:81:4c:11:7a:69:ed:d0:ad:
         92:b4:4c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----