Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d5f265fe-75e8-4d29-aa6f-bb4b40bac3e5.roa
File:                     d5f265fe-75e8-4d29-aa6f-bb4b40bac3e5.roa (raw, json)
Hash identifier:          coCWZ2S6H5f7XM/4gqPZCJrqX9Sfb3reiDNC6oNZpmA=
Subject key identifier:   43:6D:A3:9F:F8:4A:4C:D7:08:C0:32:3C:72:5C:4A:8E:D0:D8:CF:64
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6C87E30A116233969A17C27C323DBC3EA0AD952B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d5f265fe-75e8-4d29-aa6f-bb4b40bac3e5.roa
Signing time:             Thu 08 Jun 2023 00:00:00 +0000
ROA not before:           Thu 08 Jun 2023 00:00:00 +0000
ROA not after:            Sun 11 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:87:e3:0a:11:62:33:96:9a:17:c2:7c:32:3d:bc:3e:a0:ad:95:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun  8 00:00:00 2023 GMT
            Not After : Jun 11 23:59:59 2023 GMT
        Subject: serialNumber=68c805a5c7eaa412b0c5710cc4387fd927da603464a2cb2b04b86e755815503a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b2:1c:27:52:51:6d:6c:9f:64:00:84:03:a9:
                    2b:55:7a:08:41:34:1e:3f:4d:25:53:fe:59:65:7f:
                    97:5c:96:f1:22:cc:a4:75:b1:93:fd:d2:85:6d:d2:
                    cd:d8:1e:2e:7a:47:40:6b:a4:18:27:a9:2b:1e:81:
                    bf:50:b6:db:0a:af:32:b2:d9:03:d3:0b:08:af:cf:
                    d8:6b:0a:02:27:98:97:a8:5a:5d:6a:b6:b2:26:9e:
                    62:c7:97:e2:ea:b2:d5:09:0c:f7:a4:8f:a3:70:8f:
                    95:41:d9:cf:bf:7f:ed:06:df:ee:c1:54:13:28:b1:
                    3c:19:a2:94:59:17:65:a5:4d:82:4e:cd:01:b3:fd:
                    02:d1:17:90:12:ae:be:c1:de:6e:6e:72:e0:6a:93:
                    68:50:92:de:34:0a:55:09:79:d3:5f:8b:ab:af:53:
                    eb:1c:d7:2d:46:ad:71:f9:f3:61:7c:fd:d0:ad:b3:
                    e7:52:5c:e9:1d:28:7f:59:15:20:0d:ae:24:cd:7a:
                    21:71:cf:c6:04:a7:f1:c8:56:64:6d:08:2e:8b:a3:
                    14:92:ed:32:65:60:c0:8e:46:45:58:c2:3d:bf:7a:
                    5f:e7:10:29:e6:4d:19:03:3b:37:7e:ba:1c:b8:8e:
                    e9:68:d2:d9:62:ce:e1:c3:f8:5c:63:a3:09:e9:e0:
                    34:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6D:A3:9F:F8:4A:4C:D7:08:C0:32:3C:72:5C:4A:8E:D0:D8:CF:64
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d5f265fe-75e8-4d29-aa6f-bb4b40bac3e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:a5:2b:4b:3c:cc:40:83:5e:14:e2:ec:ca:71:56:07:df:93:
         86:41:d3:4b:67:1e:0a:f6:63:45:0b:99:18:4e:4d:07:86:d8:
         62:51:d5:43:12:8d:2f:75:16:81:a0:d7:93:fc:17:86:37:ce:
         c0:4c:ce:25:d7:ab:be:f8:0f:d9:f5:12:4a:03:9e:d2:99:e5:
         bc:6b:cb:19:fe:79:5b:81:42:8e:1c:6e:0c:06:8f:bc:87:46:
         35:db:5c:dc:88:36:e4:80:01:ac:15:b6:bf:b4:92:f8:2f:16:
         34:c7:7c:d9:cb:f1:a4:66:25:3c:f8:d8:e0:58:f3:2c:d8:bf:
         c3:40:76:fd:19:1e:72:1f:90:cd:99:6e:2d:d2:a0:46:2a:4a:
         a9:86:51:5d:9f:19:4e:67:b3:a1:ac:48:ed:ad:ed:14:74:19:
         67:76:95:4a:f5:fe:52:6c:00:c6:03:03:63:ba:89:3c:d6:66:
         1a:4a:84:47:19:32:1d:e9:5f:a0:60:5e:b9:d1:0e:76:54:b5:
         df:59:7f:b1:c1:bf:21:49:55:bc:1e:5f:07:4d:80:f1:10:fd:
         fd:ae:af:34:ed:80:f4:79:30:dc:61:00:fb:c1:f5:17:7d:6a:
         2b:c2:d1:d4:82:5d:23:67:66:d3:ba:d8:1f:f1:20:84:a5:4a:
         1e:a0:17:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----