Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/70365195-5127-4737-85c5-a8653ca79950.roa
File:                     70365195-5127-4737-85c5-a8653ca79950.roa (raw, json)
Hash identifier:          UotR2HxGukoUCxDaGetpLJVfGhzsAGG+HZS7VJxeqe8=
Subject key identifier:   04:B7:A6:10:CA:7B:18:08:F8:D1:AF:7D:CC:65:F6:0D:3B:55:B2:F4
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4F19734DAABB0440B45F403CC8C22630D3FC5C9E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/70365195-5127-4737-85c5-a8653ca79950.roa
Signing time:             Mon 12 Jun 2023 00:00:00 +0000
ROA not before:           Mon 12 Jun 2023 00:00:00 +0000
ROA not after:            Thu 15 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:19:73:4d:aa:bb:04:40:b4:5f:40:3c:c8:c2:26:30:d3:fc:5c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 12 00:00:00 2023 GMT
            Not After : Jun 15 23:59:59 2023 GMT
        Subject: serialNumber=6d9012ca7f7b735bbd34a05704ed191b794dc632874ea83def23645f7a0a3b77, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e6:40:da:df:25:30:9c:1b:33:34:a3:aa:33:
                    82:8a:58:53:a2:ed:95:e3:e6:dc:8d:08:65:03:86:
                    20:95:99:93:5e:dc:69:47:fc:be:1b:e9:b5:1e:a9:
                    b1:25:87:97:01:96:41:cd:2d:92:89:27:ed:07:ee:
                    4a:89:2d:fa:68:20:88:7a:1c:31:9b:3d:b6:94:13:
                    64:d7:ee:33:e3:97:54:78:05:7a:4f:69:6f:e5:a7:
                    53:65:fc:71:8c:cd:ed:06:94:12:4d:25:eb:7c:a2:
                    1e:e5:c6:57:84:24:fb:5a:69:e4:09:f5:8b:bd:90:
                    9a:01:3f:d4:56:ef:95:69:b3:80:dc:0d:ab:2c:43:
                    ee:7e:7e:d7:63:4d:4a:e6:e2:32:c6:ac:67:e0:80:
                    8d:f6:ee:05:f1:5b:d6:a6:85:88:63:55:8c:86:ab:
                    eb:ea:16:bb:a8:9f:1a:d6:14:4e:03:1a:8e:38:d2:
                    b4:b3:09:55:e0:8d:12:32:e7:ec:17:ee:a0:3a:43:
                    e7:aa:ae:df:45:7e:65:a7:b5:68:35:0f:19:c2:75:
                    56:15:02:3a:98:94:98:97:ab:84:89:59:d2:a8:5a:
                    1c:f6:b5:3e:18:15:f9:23:d2:22:7d:92:7a:fb:7d:
                    42:50:55:39:b7:9b:e2:4e:ee:4f:fc:22:2e:3d:6c:
                    d8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B7:A6:10:CA:7B:18:08:F8:D1:AF:7D:CC:65:F6:0D:3B:55:B2:F4
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/70365195-5127-4737-85c5-a8653ca79950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:42:7e:5d:f4:a2:5b:7e:10:b7:ef:2c:ae:1f:be:ef:68:03:
         15:1c:9c:67:ac:44:cf:9c:e0:56:ee:11:5a:b3:6a:44:22:d7:
         9d:93:f4:d0:62:a3:02:ad:b7:cc:b0:11:bd:5e:ea:b8:6b:a2:
         20:ef:8b:de:11:bb:5f:95:db:51:3f:da:2b:a5:c8:56:02:ce:
         0e:9b:77:10:9b:0f:65:f6:0d:ce:a9:b3:4b:79:47:07:01:54:
         e0:9e:5d:2f:92:51:bf:83:1c:79:54:3f:90:3e:a2:14:7f:75:
         7e:62:0d:96:1d:6f:df:0c:94:1a:8a:bf:fa:2b:ea:95:a9:f0:
         93:1b:a6:b0:d7:87:36:0c:e5:1e:fc:1c:84:62:96:33:0a:35:
         b5:7b:83:66:0e:3a:7c:8e:55:71:d3:3e:31:99:9f:b0:34:80:
         af:00:12:00:dc:a3:27:63:61:6c:89:23:4c:94:e7:f0:29:95:
         ca:1b:82:3a:af:1f:a5:1e:73:49:cc:19:cb:4a:79:3f:a2:50:
         e0:5a:13:b7:10:c7:11:04:8d:52:ab:4e:68:56:bd:fb:2c:4b:
         20:ae:b9:ed:03:b4:6b:ab:33:e8:69:ac:b8:6b:37:fc:2a:21:
         f2:38:cf:54:b8:80:35:31:5a:b4:db:63:12:ba:2e:bb:65:c2:
         e8:22:b4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----