Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/95504b01-d43f-46fb-9395-b9dcbc4d4b02.roa
File:                     95504b01-d43f-46fb-9395-b9dcbc4d4b02.roa (raw, json)
Hash identifier:          lSSjpEVR+nh8IP29MB4p1SmQStcIJ6WLBNpKI4kN9so=
Subject key identifier:   2A:C8:1C:EC:DB:8A:60:59:58:35:35:D6:D2:E9:8A:24:6C:ED:80:53
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       17DD158F0F128C2DB60CF85E93CA4EC9C13D97A1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/95504b01-d43f-46fb-9395-b9dcbc4d4b02.roa
Signing time:             Mon 12 Jun 2023 00:00:00 +0000
ROA not before:           Mon 12 Jun 2023 00:00:00 +0000
ROA not after:            Thu 15 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:dd:15:8f:0f:12:8c:2d:b6:0c:f8:5e:93:ca:4e:c9:c1:3d:97:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 12 00:00:00 2023 GMT
            Not After : Jun 15 23:59:59 2023 GMT
        Subject: serialNumber=1e9a82a3b247228d06e05f6ae3f1d3d8705d382ec92dfede48993a31d1ea941c, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b9:72:54:7f:6f:84:a3:f5:bc:4f:dc:5d:87:
                    0c:c3:f9:8e:46:52:8e:62:f3:01:3f:54:6a:c0:3c:
                    2f:81:70:63:a8:08:90:3a:ba:09:b1:4e:06:72:32:
                    f6:23:42:a2:7c:3b:6d:05:3f:68:e9:40:f6:c8:16:
                    54:fb:08:c5:ed:22:75:03:60:03:a9:17:d4:64:14:
                    0e:52:e6:07:5f:dc:0c:e6:ff:d5:bb:8b:14:bd:23:
                    df:ed:86:ef:b7:0c:8d:6f:fb:fa:a2:3e:08:69:44:
                    e7:97:05:23:8a:5f:ff:42:b9:c1:8d:64:a1:bd:23:
                    46:fa:54:93:ad:ed:97:37:0e:e6:b2:80:0f:f9:75:
                    15:fd:e3:9d:e6:a8:8e:f3:36:25:3e:0e:30:a0:85:
                    d0:43:f7:99:c7:10:02:f9:83:49:a7:12:a5:42:4a:
                    28:a0:dc:ad:27:ac:49:2c:a0:c3:eb:00:1d:57:66:
                    c6:7b:fd:0a:e0:69:ea:e9:2e:8d:56:2a:23:fa:60:
                    85:35:0f:bf:ff:e9:34:10:23:91:6d:cb:30:42:26:
                    e5:3e:b5:23:bc:ce:60:1e:8e:d1:a9:79:e7:16:94:
                    b4:59:ac:bd:c9:df:0c:44:17:d8:28:15:e2:0c:c1:
                    37:c7:f7:48:fb:1a:e6:97:0d:46:5e:18:51:70:a2:
                    b6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C8:1C:EC:DB:8A:60:59:58:35:35:D6:D2:E9:8A:24:6C:ED:80:53
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/95504b01-d43f-46fb-9395-b9dcbc4d4b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:7c:2b:c9:4d:fa:b4:7d:fa:a7:02:65:b4:3d:67:e2:45:be:
         dc:87:c5:02:85:17:40:55:24:7e:20:50:e3:d4:87:bb:ee:09:
         19:fa:75:56:a7:10:cf:92:c6:df:6f:44:e3:ec:fd:b1:1f:b0:
         5f:4d:1f:11:10:cf:08:f8:dd:23:94:f7:7f:a9:31:ed:af:c4:
         32:b2:50:41:fd:8a:c3:dd:d4:10:6e:a1:49:f5:99:dd:b4:0a:
         73:2a:5b:04:52:2f:95:1f:de:56:e1:af:9e:e4:8c:a7:7a:fe:
         b3:ab:68:03:c9:fb:c1:85:c5:24:59:1b:28:e4:e7:54:db:ab:
         2d:13:f4:ca:60:5e:5e:43:a2:a2:0f:07:f2:23:d0:dc:f2:2d:
         21:6f:c1:46:a8:1a:49:de:1d:0f:a0:76:6c:fa:b6:70:b4:88:
         e6:85:7c:8a:23:ef:db:15:d9:7d:8f:93:09:3d:cf:c0:88:06:
         27:85:45:65:17:44:f3:61:f4:e9:f5:45:00:fe:d8:d6:ec:d2:
         b5:5b:3f:70:77:18:c5:bc:68:f9:5d:66:be:1f:e9:1b:6e:db:
         97:02:ef:63:0d:87:a3:72:9f:ce:87:5d:0e:d9:18:e9:d4:56:
         9e:4f:47:2d:e1:3d:d1:fd:f0:28:ca:d2:ba:dc:76:10:11:04:
         8f:79:62:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----