Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/98861756-36db-4f0c-b433-da291cd58d7c.roa
File:                     98861756-36db-4f0c-b433-da291cd58d7c.roa (raw, json)
Hash identifier:          5FzwCQeu69ISlQluonexPrRx55EqK+DkqlJiJXAyEps=
Subject key identifier:   26:DF:51:5D:AF:92:F9:0A:AE:41:37:3D:3B:AE:4E:65:97:89:76:70
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       38BF3F4F3F84174EB0EBDC87F732E9FC13BE7453
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/98861756-36db-4f0c-b433-da291cd58d7c.roa
Signing time:             Wed 14 Jun 2023 00:00:00 +0000
ROA not before:           Wed 14 Jun 2023 00:00:00 +0000
ROA not after:            Sat 17 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:bf:3f:4f:3f:84:17:4e:b0:eb:dc:87:f7:32:e9:fc:13:be:74:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 14 00:00:00 2023 GMT
            Not After : Jun 17 23:59:59 2023 GMT
        Subject: serialNumber=9b3875330c20332892ccf21b6b1804dda18d5454e3c666da162f93d3be0f16be, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:48:cf:82:d6:ce:81:2f:f5:66:4b:64:80:d6:
                    9d:35:23:a1:80:df:19:4d:33:86:8c:da:a5:62:3f:
                    49:e9:eb:07:80:27:b6:5d:5a:b0:83:6b:a6:04:e9:
                    32:f7:cb:3e:b5:c5:b1:fe:55:c3:ef:a7:9d:ba:f5:
                    e8:fa:b9:a0:76:01:ea:8f:c6:5b:56:3a:00:85:0f:
                    6c:4f:d6:5f:19:4f:16:da:5f:5e:f4:91:01:ab:4f:
                    c8:1f:99:30:7d:79:9a:ad:41:fd:36:39:eb:53:28:
                    02:43:04:fb:7c:8a:fa:4f:9e:f3:63:9f:2a:a4:35:
                    63:21:dd:a2:b0:22:0d:41:d5:ad:6a:df:66:11:94:
                    87:a9:ab:27:3f:21:23:7f:78:f0:ce:f7:92:40:aa:
                    eb:23:71:63:d3:6c:92:e6:c2:aa:63:77:2b:92:bb:
                    30:3b:e9:54:89:dd:02:2a:df:59:6c:c4:7c:fd:17:
                    f1:48:3f:ac:2f:d0:aa:07:3a:af:bd:43:be:f1:24:
                    58:03:42:ac:e6:00:3a:5f:4d:8a:62:8b:8b:ff:6b:
                    c9:dc:b7:9f:06:c8:ab:8f:f8:5f:41:31:f5:24:7f:
                    fc:d7:9e:ce:7f:5f:2e:34:e5:b6:5b:61:ac:f9:8a:
                    13:ff:d8:d3:3a:e1:21:6a:0b:db:e2:29:4b:92:fd:
                    bb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DF:51:5D:AF:92:F9:0A:AE:41:37:3D:3B:AE:4E:65:97:89:76:70
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/98861756-36db-4f0c-b433-da291cd58d7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:e8:03:cc:e6:53:25:5e:0e:57:5d:dc:09:2a:e4:ea:95:c6:
         cb:35:92:2d:6d:3c:98:4b:fd:66:4d:0e:8d:f0:73:9c:4f:80:
         8d:f0:50:74:c4:76:c0:55:2b:f0:9a:fe:23:7b:a1:30:36:0a:
         a1:a4:c8:2c:3e:6e:04:ff:34:64:28:31:f0:74:f1:a1:4e:53:
         80:84:6d:a1:c8:f0:ef:25:c1:4b:d3:c1:1d:99:ec:27:52:0e:
         f4:85:e5:7c:9a:31:18:18:d9:1d:e2:43:c3:27:16:38:3b:d4:
         e0:52:c8:9f:3e:c9:47:e4:18:59:c0:6b:70:13:4f:71:f3:db:
         be:35:66:39:22:d5:81:05:bc:b5:6a:cb:2e:92:1b:37:13:05:
         ec:b0:87:a9:21:d6:06:ad:37:73:c7:4d:87:30:e6:b5:32:07:
         6a:a3:c5:a8:a9:f3:c1:f6:d7:df:59:28:28:5e:67:89:6c:2f:
         05:79:ea:aa:b0:3d:77:5b:20:7e:02:8d:ac:8c:0e:c8:94:cf:
         93:02:3e:f1:3d:fb:30:c1:f9:bf:fe:e6:6d:e7:ae:7b:f3:8d:
         5b:04:00:4c:e1:46:c9:77:55:77:4c:2f:3e:8e:b8:4a:4b:91:
         aa:fc:a0:f6:16:c1:f2:11:51:c5:24:1a:6e:68:19:43:af:e5:
         0d:2b:ff:9d
-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgIUOL8/Tz+EF06w69yH9zLp/BO+dFMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNjE0MDAwMDAwWhcNMjMwNjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A5YjM4NzUzMzBjMjAzMzI4OTJjY2YyMWI2YjE4MDRkZGEx
OGQ1NDU0ZTNjNjY2ZGExNjJmOTNkM2JlMGYxNmJlMS0wKwYDVQQDEyQ2YWU0ZTU2
Ny02MzQ4LTRjNGYtOThhOC0wNDIyYzRjNTJmZjMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCKSM+C1s6BL/VmS2SA1p01I6GA3xlNM4aM2qViP0np6weA
J7ZdWrCDa6YE6TL3yz61xbH+VcPvp5269ej6uaB2AeqPxltWOgCFD2xP1l8ZTxba
X170kQGrT8gfmTB9eZqtQf02OetTKAJDBPt8ivpPnvNjnyqkNWMh3aKwIg1B1a1q
32YRlIepqyc/ISN/ePDO95JAqusjcWPTbJLmwqpjdyuSuzA76VSJ3QIq31lsxHz9
F/FIP6wv0KoHOq+9Q77xJFgDQqzmADpfTYpii4v/a8nct58GyKuP+F9BMfUkf/zX
ns5/Xy405bZbYaz5ihP/2NM64SFqC9viKUuS/btbAgMBAAGjggK+MIICujAdBgNV
HQ4EFgQUJt9RXa+S+QquQTc9O65OZZeJdnAwHwYDVR0jBBgwFoAUkUTtx6QO6ZC3
+jZv9uF9ea3Eg5cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83M2YyMWMyYi04
ODIzLTRjMjQtYjI1Yi00M2M4MGNiNmQxYmIvMjc4YWFiODc4ZjI4MzFiYjE4MjNi
NTg3OTRiMDkyZDg2ZmIxZDdhMGY3NGUyODE2MTEuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjY4YTMyZWUtNDU1ZC00ODNhLTk0M2QtMWE1
YmU3NDhiZmVhLzk4ODYxNzU2LTM2ZGItNGYwYy1iNDMzLWRhMjkxY2Q1OGQ3Yy5y
b2EwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVz
LWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2Et
OTQzZC0xYTViZTc0OGJmZWEvNGJiOGFlNWMtMTI0Yy00MmYzLTg3ZmItNGYzNGU3
NGUzZGEyLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAxyR4MA0GCSqGSIb3DQEBCwUAA4IBAQBu6APM5lMl
Xg5XXdwJKuTqlcbLNZItbTyYS/1mTQ6N8HOcT4CN8FB0xHbAVSvwmv4je6EwNgqh
pMgsPm4E/zRkKDHwdPGhTlOAhG2hyPDvJcFL08EdmewnUg70heV8mjEYGNkd4kPD
JxY4O9TgUsifPslH5BhZwGtwE09x89u+NWY5ItWBBby1assukhs3EwXssIepIdYG
rTdzx02HMOa1Mgdqo8WoqfPB9tffWSgoXmeJbC8FeeqqsD13WyB+Ao2sjA7IlM+T
Aj7xPfswwfm//uZt5657841bBABM4UbJd1V3TC8+jrhKS5Gq/KD2FsHyEVHFJBpu
aBlDr+UNK/+d
-----END CERTIFICATE-----