Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/84ebfa5a-802e-49a2-9721-a8f5aceae36c.roa
File:                     84ebfa5a-802e-49a2-9721-a8f5aceae36c.roa (raw, json)
Hash identifier:          t29tdhotzFTTJ6KqbC7jHfqwPA9DAD/1bpmkq+/WBK4=
Subject key identifier:   CF:91:1C:6B:3A:5B:B1:30:64:76:43:A5:BC:F9:92:99:9C:76:E6:69
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       23E3EBC84C7FBAC9E9D285DBF06E08B9AF142AA5
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/84ebfa5a-802e-49a2-9721-a8f5aceae36c.roa
Signing time:             Wed 14 Jun 2023 00:00:00 +0000
ROA not before:           Wed 14 Jun 2023 00:00:00 +0000
ROA not after:            Sat 17 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e3:eb:c8:4c:7f:ba:c9:e9:d2:85:db:f0:6e:08:b9:af:14:2a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 14 00:00:00 2023 GMT
            Not After : Jun 17 23:59:59 2023 GMT
        Subject: serialNumber=0f3d75a354df0bfc2ba38114b58db3fda42a6ec2acadc518edc30d870d035386, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5a:d0:ba:61:8b:bc:8c:2d:cf:25:bf:c2:9f:
                    1a:22:b6:83:3f:97:0d:42:55:84:e3:2f:fd:a2:19:
                    65:2f:35:52:9f:88:e2:85:ac:c3:98:98:b5:09:c2:
                    30:90:94:e8:03:8b:dc:e1:fe:25:e1:b7:72:6a:fc:
                    93:37:69:74:e1:b9:d9:ae:30:9c:1e:55:ba:08:07:
                    fd:a1:90:6a:a9:3e:ea:07:bd:d9:c8:01:ca:d7:91:
                    f3:87:6c:82:ff:ed:d2:e1:fd:c3:e5:28:af:19:e7:
                    bd:9d:dc:c7:73:ef:ea:27:d9:54:b5:75:f6:8f:6b:
                    0a:6e:46:43:2c:46:41:cb:60:1a:96:20:ce:37:15:
                    13:53:90:ee:e5:8b:b6:33:43:1a:57:30:6c:87:db:
                    4a:4d:59:10:0f:e1:d2:9a:b9:46:49:5b:66:fe:a9:
                    61:22:bc:e4:6a:4d:56:ae:e4:d5:fe:dc:54:45:3f:
                    7e:28:2c:e9:f6:21:36:49:5a:03:f4:be:43:c4:ae:
                    7a:ed:c7:74:56:d4:7f:8c:52:e1:10:80:0a:29:6f:
                    8a:34:98:d1:d1:61:69:8e:37:a7:76:ed:8a:6e:be:
                    50:e7:ba:e2:16:8a:c7:79:87:41:06:f5:24:54:eb:
                    1f:47:43:a5:b2:e1:17:95:af:97:62:5c:6e:58:1b:
                    89:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:91:1C:6B:3A:5B:B1:30:64:76:43:A5:BC:F9:92:99:9C:76:E6:69
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/84ebfa5a-802e-49a2-9721-a8f5aceae36c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:0f:d7:c6:90:91:ea:2d:dd:3f:b7:ff:af:d3:5d:f0:99:62:
         df:62:de:a1:e6:a1:2f:f5:9b:41:db:40:56:e9:20:cd:91:6b:
         0f:a2:03:b2:6e:80:34:36:e0:9e:ce:d3:b5:2b:76:0f:cc:9a:
         d9:18:9e:5a:46:9e:78:ae:a5:2d:58:9b:57:c2:46:46:d5:04:
         e6:32:f4:60:43:de:d1:8f:46:51:77:2f:6d:e8:f3:ff:c9:6b:
         ad:74:1f:f3:8d:1f:81:12:3f:df:5a:96:6a:08:e1:8a:fd:31:
         51:be:7f:5a:51:ec:ff:61:6b:9f:52:eb:93:ce:d5:de:17:f8:
         52:15:ec:85:0f:8d:1f:eb:e0:15:52:00:d1:11:e2:de:cc:fb:
         ac:5b:b9:b1:17:21:0d:7c:d6:5c:f3:d9:6a:8b:32:8c:8c:0c:
         c5:69:be:c1:64:ee:d7:76:f9:7c:96:b9:b3:6a:5e:69:f2:0e:
         c4:b5:5d:37:c2:3f:e6:06:ce:76:9c:40:94:34:ac:00:81:12:
         3c:6e:e1:97:01:28:64:9b:4b:f5:09:98:18:79:de:46:a1:e0:
         03:62:ed:54:04:0e:9b:2a:6a:51:09:2d:4a:d4:54:cf:46:3f:
         b9:5c:fe:20:cb:04:8e:f5:cc:4e:4a:c6:4a:a5:48:c2:1d:75:
         92:40:f7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----