Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c318f368-026a-4a68-bc0d-7f43dc15370f.roa
File:                     c318f368-026a-4a68-bc0d-7f43dc15370f.roa (raw, json)
Hash identifier:          3pTtb/7Qe23oFLJLsbe/MWOFA23CkTnVXy1Qjb7+0HI=
Subject key identifier:   88:19:D5:AD:92:D8:40:E2:53:DE:BD:61:C0:63:4E:B6:E0:81:BC:F0
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       42E0EE04E604C16502500C0C49DC8E6F959F0A80
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c318f368-026a-4a68-bc0d-7f43dc15370f.roa
Signing time:             Thu 08 Jun 2023 00:00:00 +0000
ROA not before:           Thu 08 Jun 2023 00:00:00 +0000
ROA not after:            Sun 11 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e0:ee:04:e6:04:c1:65:02:50:0c:0c:49:dc:8e:6f:95:9f:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun  8 00:00:00 2023 GMT
            Not After : Jun 11 23:59:59 2023 GMT
        Subject: serialNumber=3c36dbad01cd5b680c7966744e025774c9a50a6f3f6f79ffd139be86f48ef94a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6d:74:ac:a4:fc:11:d5:17:8b:d3:d6:a5:ea:
                    68:0d:62:9c:41:2e:43:0d:3b:e7:b1:9a:50:d5:bf:
                    34:2a:85:ca:92:f8:aa:0e:86:27:81:50:7a:c7:c9:
                    02:f4:d4:00:59:cd:25:f8:ac:fe:cc:4a:68:3d:e4:
                    20:16:2a:6f:4a:f1:59:ba:a0:6a:ae:a0:68:cc:11:
                    1a:b0:4b:88:5a:ba:6a:f0:6d:36:50:ec:b7:31:bc:
                    a4:21:89:19:f4:94:dc:c1:9a:7e:8e:ce:dc:97:f5:
                    7f:91:38:7d:e1:1a:23:f3:e3:51:b3:50:aa:fa:25:
                    cc:2a:15:f6:69:b2:d7:91:9d:9c:e0:fb:32:de:98:
                    04:47:ca:71:77:60:ee:bc:b0:48:3b:9a:da:b0:b6:
                    ed:ff:04:8f:d2:b4:11:96:0d:ac:46:2c:66:bf:cd:
                    1e:ff:a9:c2:68:2d:78:39:f6:0e:69:55:88:c3:34:
                    ca:b9:5e:21:76:cf:be:76:d3:ad:69:15:47:0d:0a:
                    66:29:1c:df:0e:cb:2a:d7:42:a8:bc:53:56:9a:0c:
                    7b:02:56:ff:e8:df:91:63:87:4b:c8:49:64:3f:51:
                    e4:52:b7:95:3e:88:45:7b:70:a0:02:ec:d6:36:de:
                    01:c5:82:bf:65:b5:99:71:fe:f6:ac:62:e1:91:8a:
                    a2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:19:D5:AD:92:D8:40:E2:53:DE:BD:61:C0:63:4E:B6:E0:81:BC:F0
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c318f368-026a-4a68-bc0d-7f43dc15370f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:76:42:0c:7c:c1:0c:ad:ba:3a:ce:c1:86:d8:d2:1c:21:92:
         6b:40:16:73:13:e4:95:b6:a6:c8:86:0c:01:a1:8d:1a:e4:e0:
         52:d8:42:96:3a:c6:d1:28:bf:7c:e8:5f:37:4c:4a:5f:3d:c4:
         33:8b:50:36:d4:75:78:18:95:7c:e8:31:91:36:95:5e:76:3f:
         15:79:00:ab:9c:ea:30:2f:ef:6a:58:66:c3:7a:63:81:80:64:
         3a:ee:2b:b5:bc:a8:93:c9:cb:1a:80:de:50:e9:23:bf:cb:7c:
         86:41:b4:7d:17:be:fb:74:8f:a5:d0:93:cb:ba:60:31:80:22:
         eb:90:63:f7:42:21:b1:50:12:83:29:6b:e7:4d:18:6d:4b:81:
         b7:d0:de:56:c8:29:29:92:eb:91:a7:8c:04:64:0e:88:2f:8e:
         e2:a8:fa:18:29:49:eb:02:2e:14:e2:56:d0:eb:f0:f3:59:96:
         c9:a6:50:ed:5a:21:9d:1b:ce:6c:d5:f3:92:0f:7d:19:46:6c:
         38:a9:bf:1d:8a:28:2f:cd:0d:32:41:60:8b:d9:9a:cd:33:7b:
         39:49:78:38:45:4d:74:ef:2c:50:08:fd:53:62:c4:8e:b8:c5:
         29:76:bb:c7:35:d4:e9:86:dd:eb:3f:c4:eb:1f:00:2a:87:bf:
         a3:31:2c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----