Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/68997c7b-c405-46ee-a929-cac899018525.roa
File:                     68997c7b-c405-46ee-a929-cac899018525.roa (raw, json)
Hash identifier:          8vN47TVDP2Ih0OLkVQWXYuPZrS26PSyVcPjPCFF0wlI=
Subject key identifier:   9C:35:85:3D:E3:E8:B7:4E:2C:06:63:9C:96:20:D7:C1:36:45:FE:96
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1870F8264868206B15CC3E29AE4E9DEA217393A1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/68997c7b-c405-46ee-a929-cac899018525.roa
Signing time:             Thu 08 Jun 2023 00:00:00 +0000
ROA not before:           Thu 08 Jun 2023 00:00:00 +0000
ROA not after:            Sun 11 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:70:f8:26:48:68:20:6b:15:cc:3e:29:ae:4e:9d:ea:21:73:93:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun  8 00:00:00 2023 GMT
            Not After : Jun 11 23:59:59 2023 GMT
        Subject: serialNumber=a986247c5850d93a4c0a13a87ee886a27bdb092847326f6bfffc9fe98d1af723, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:52:2d:1b:3e:d8:c7:77:23:b7:3f:55:a0:11:
                    84:f7:9a:6f:e8:09:94:dc:91:22:0d:bc:d0:0e:74:
                    bf:39:81:69:61:cf:d4:f4:c3:22:54:76:72:6f:1c:
                    f4:4e:f6:5d:8a:44:2f:1e:b7:2e:90:0d:69:fe:85:
                    e2:93:68:37:62:1b:e3:b7:fc:7f:bc:6d:4c:07:e0:
                    0d:07:71:39:c8:cf:92:7e:21:48:78:19:bd:37:51:
                    51:52:22:db:a8:c8:f2:b2:70:14:87:10:62:a7:63:
                    7a:94:d7:78:16:9d:47:3e:9b:8d:0f:59:f0:ba:3c:
                    01:bc:53:40:7b:f7:23:df:5b:62:89:f8:58:e2:c1:
                    ac:ef:c3:3e:b2:79:0d:f8:a4:66:09:5a:ff:f8:47:
                    dc:3a:18:2c:af:8e:b0:d2:02:47:1a:92:1a:3e:c2:
                    5c:72:20:57:7b:ca:93:62:0e:74:02:7e:91:fe:c8:
                    40:5f:98:e7:c4:ad:3e:c0:6b:dd:3e:57:ba:a3:7c:
                    bc:21:45:41:6b:82:4d:50:e4:33:81:a9:56:88:e9:
                    6b:9a:a6:9e:76:41:65:4e:89:71:eb:3d:38:65:1c:
                    00:27:31:ea:49:26:9d:c9:34:d1:f9:ea:a2:f0:2f:
                    96:cd:e3:f6:43:a4:03:76:ca:22:18:cb:d0:7b:fc:
                    30:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:35:85:3D:E3:E8:B7:4E:2C:06:63:9C:96:20:D7:C1:36:45:FE:96
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/68997c7b-c405-46ee-a929-cac899018525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:20:3f:ab:ea:8a:3c:45:7c:8c:5a:80:37:85:ea:ef:08:72:
         4a:40:a9:8e:58:f4:d6:3f:ea:e3:55:51:c5:1b:29:ca:ac:46:
         98:ca:3c:04:d3:59:24:9c:87:53:ee:e6:6d:fd:b0:d7:3a:ad:
         58:b3:8f:42:ad:de:0e:93:25:27:ea:ed:46:89:64:23:dd:b5:
         30:14:52:cc:da:9b:e3:0b:1e:35:d8:86:17:fa:af:89:d4:d4:
         d3:ef:11:89:71:21:a5:36:f7:81:58:f2:c2:71:5d:08:f1:81:
         e9:04:ef:37:c8:47:3d:d3:e2:00:49:53:f4:2b:e7:6c:35:02:
         1e:0d:51:4c:40:1b:59:0b:54:39:c2:cc:17:4b:30:96:72:1f:
         6c:30:3f:26:0d:35:fd:a5:b9:cd:f9:f1:c7:c0:12:55:2f:98:
         7c:11:a8:64:64:7b:22:3a:0e:9b:4c:c1:f8:8b:8c:3b:10:63:
         8f:ce:90:aa:83:a5:21:77:eb:aa:f7:4b:e1:ab:7c:86:fd:5f:
         c3:43:2d:9b:dc:5b:66:c4:a3:6e:ca:7a:cc:53:ef:c6:f6:ea:
         0a:6f:9b:73:03:cb:83:59:a3:ec:8a:12:8d:88:f4:d9:71:1d:
         64:0d:6f:43:69:25:79:f2:15:be:4f:7f:31:fb:ca:48:8a:03:
         ea:4c:aa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----