Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cb9d0984-9b95-4c0a-81d6-43a009cdd210.roa
File:                     cb9d0984-9b95-4c0a-81d6-43a009cdd210.roa (raw, json)
Hash identifier:          7d1bJeStKFAShXZmBzQz9MSStJCfng3OLcEZ9RHhwYY=
Subject key identifier:   7B:37:68:35:BE:B7:4D:97:AD:FE:51:46:EF:E2:13:07:C0:21:86:49
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7E2B242B96FAD98C815A6C31A541CB27683E51DD
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cb9d0984-9b95-4c0a-81d6-43a009cdd210.roa
Signing time:             Sun 11 Jun 2023 00:00:00 +0000
ROA not before:           Sun 11 Jun 2023 00:00:00 +0000
ROA not after:            Wed 14 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2b:24:2b:96:fa:d9:8c:81:5a:6c:31:a5:41:cb:27:68:3e:51:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 11 00:00:00 2023 GMT
            Not After : Jun 14 23:59:59 2023 GMT
        Subject: serialNumber=2b012ff84abd52bcbc39b10af79790f5cdceed5a0991f7b75f6faadce659f602, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ad:ff:7a:2b:54:a0:5f:6b:fa:85:d1:e5:ea:
                    53:ab:fe:3d:16:56:0d:53:f5:62:25:50:02:63:36:
                    05:66:13:d4:cb:1b:45:d0:f8:bf:0b:ef:26:56:6e:
                    0a:6a:9f:8c:03:12:d3:40:a7:55:2f:25:c8:e6:02:
                    62:ca:b2:53:2f:c4:91:76:09:50:58:e7:63:2e:7f:
                    53:b2:fa:66:8a:9a:9b:8d:12:e4:08:f9:af:48:0f:
                    fc:9f:fb:66:9e:ce:d2:1e:d2:fd:3c:da:c2:91:35:
                    48:d3:99:d5:fb:ce:46:ab:8a:63:79:6c:3b:d7:ee:
                    6e:cd:59:cd:be:6e:39:eb:e7:ed:36:75:64:01:55:
                    d2:01:2b:15:ae:39:3e:41:08:9e:df:29:e5:33:b8:
                    8f:bc:7d:3f:29:e8:0f:59:b7:fc:11:b5:80:c9:51:
                    02:6d:24:d3:1a:55:f0:f1:ff:03:cf:3e:c7:f2:5f:
                    8b:77:cd:dd:c3:5d:92:ea:61:ce:d5:5a:ea:c7:6a:
                    6c:c7:36:f4:44:eb:5f:c6:0d:13:75:c1:a0:1e:db:
                    94:25:b3:8f:a9:6d:ea:67:95:a2:57:4a:ed:67:dc:
                    b9:7b:71:65:b4:dd:e5:4d:ea:96:62:20:71:40:d8:
                    5e:c8:f6:43:40:cd:57:1b:05:7f:29:fa:c1:a0:f8:
                    25:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:37:68:35:BE:B7:4D:97:AD:FE:51:46:EF:E2:13:07:C0:21:86:49
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cb9d0984-9b95-4c0a-81d6-43a009cdd210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:b3:ca:09:be:5e:84:5a:2a:a8:d3:11:2d:3c:2e:6a:9d:e2:
         5b:d9:54:73:b7:9a:19:c0:6c:9b:bf:ae:a1:9b:6d:b2:ff:03:
         d4:cc:49:c1:96:83:7f:82:b4:93:11:ee:8e:98:d4:d1:7b:75:
         2a:93:35:e9:f5:dd:8c:49:bf:f9:55:35:fb:3d:82:bf:26:b8:
         aa:ba:a7:ee:af:ff:15:17:95:a7:1d:f0:d7:f0:1e:3d:6e:96:
         e8:e8:4c:e7:7b:fa:c0:56:78:44:0e:ce:56:09:e9:56:66:e7:
         63:4f:0a:db:72:f8:94:67:3d:96:75:87:0f:b2:db:d5:28:f8:
         2a:48:7a:d5:a6:76:49:69:f8:52:0b:70:ed:81:42:ee:ef:45:
         ce:c8:f6:cd:2c:3b:ad:ca:dc:b9:91:c1:0d:3c:3c:06:5e:aa:
         bd:de:29:8a:12:ca:75:3b:3f:0b:b1:2c:00:e7:dd:05:d7:01:
         0d:0f:31:3d:6b:13:ab:42:60:5a:8b:c3:c5:4f:c1:a8:bc:d0:
         04:d7:9b:2b:4b:ee:ff:d0:0c:d3:f0:0e:4f:af:e2:02:85:c0:
         cf:63:e0:e7:ad:95:94:6c:3b:76:6d:9d:f6:d7:97:28:a4:54:
         76:a8:57:f6:de:c1:b2:de:ea:de:9c:e6:4c:8c:fa:b5:59:51:
         4d:99:2d:12
-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgIUfiskK5b62YyBWmwxpUHLJ2g+Ud0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNjExMDAwMDAwWhcNMjMwNjE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AyYjAxMmZmODRhYmQ1MmJjYmMzOWIxMGFmNzk3OTBmNWNk
Y2VlZDVhMDk5MWY3Yjc1ZjZmYWFkY2U2NTlmNjAyMS0wKwYDVQQDEyQ2YWU0ZTU2
Ny02MzQ4LTRjNGYtOThhOC0wNDIyYzRjNTJmZjMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwrf96K1SgX2v6hdHl6lOr/j0WVg1T9WIlUAJjNgVmE9TL
G0XQ+L8L7yZWbgpqn4wDEtNAp1UvJcjmAmLKslMvxJF2CVBY52Muf1Oy+maKmpuN
EuQI+a9ID/yf+2aeztIe0v082sKRNUjTmdX7zkarimN5bDvX7m7NWc2+bjnr5+02
dWQBVdIBKxWuOT5BCJ7fKeUzuI+8fT8p6A9Zt/wRtYDJUQJtJNMaVfDx/wPPPsfy
X4t3zd3DXZLqYc7VWurHamzHNvRE61/GDRN1waAe25Qls4+pbepnlaJXSu1n3Ll7
cWW03eVN6pZiIHFA2F7I9kNAzVcbBX8p+sGg+CVJAgMBAAGjggK+MIICujAdBgNV
HQ4EFgQUezdoNb63TZet/lFG7+ITB8AhhkkwHwYDVR0jBBgwFoAUkUTtx6QO6ZC3
+jZv9uF9ea3Eg5cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83M2YyMWMyYi04
ODIzLTRjMjQtYjI1Yi00M2M4MGNiNmQxYmIvMjc4YWFiODc4ZjI4MzFiYjE4MjNi
NTg3OTRiMDkyZDg2ZmIxZDdhMGY3NGUyODE2MTEuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjY4YTMyZWUtNDU1ZC00ODNhLTk0M2QtMWE1
YmU3NDhiZmVhL2NiOWQwOTg0LTliOTUtNGMwYS04MWQ2LTQzYTAwOWNkZDIxMC5y
b2EwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVz
LWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2Et
OTQzZC0xYTViZTc0OGJmZWEvNGJiOGFlNWMtMTI0Yy00MmYzLTg3ZmItNGYzNGU3
NGUzZGEyLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAxyR4MA0GCSqGSIb3DQEBCwUAA4IBAQBbs8oJvl6E
Wiqo0xEtPC5qneJb2VRzt5oZwGybv66hm22y/wPUzEnBloN/grSTEe6OmNTRe3Uq
kzXp9d2MSb/5VTX7PYK/Jriquqfur/8VF5WnHfDX8B49bpbo6Ezne/rAVnhEDs5W
CelWZudjTwrbcviUZz2WdYcPstvVKPgqSHrVpnZJafhSC3DtgULu70XOyPbNLDut
yty5kcENPDwGXqq93imKEsp1Oz8LsSwA590F1wENDzE9axOrQmBai8PFT8GovNAE
15srS+7/0AzT8A5Pr+IChcDPY+DnrZWUbDt2bZ3215copFR2qFf23sGy3urenOZM
jPq1WVFNmS0S
-----END CERTIFICATE-----