Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d91190ab-1659-4841-aec7-9a9a40d7c1bb.roa
File:                     d91190ab-1659-4841-aec7-9a9a40d7c1bb.roa (raw, json)
Hash identifier:          Q1h14rQ7V7Ijl39RNoIQEC2V5wpUEpPjb3eYr47+Ue8=
Subject key identifier:   F9:3D:43:DB:75:26:66:F0:C0:7B:CB:C3:25:9A:A3:5A:7C:43:D1:CD
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4C72243FE0DCF08ADC16EF89409D1520D7AAA374
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d91190ab-1659-4841-aec7-9a9a40d7c1bb.roa
Signing time:             Thu 08 Jun 2023 00:00:00 +0000
ROA not before:           Thu 08 Jun 2023 00:00:00 +0000
ROA not after:            Sun 11 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:72:24:3f:e0:dc:f0:8a:dc:16:ef:89:40:9d:15:20:d7:aa:a3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun  8 00:00:00 2023 GMT
            Not After : Jun 11 23:59:59 2023 GMT
        Subject: serialNumber=77c2e30da8db26ee3260235f822a7e8822f50d250204d42bd99b1864bc52bded, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6b:d2:5d:d6:a3:3f:51:bf:58:87:c8:c0:61:
                    c8:af:e8:21:d7:cd:82:cf:c2:13:68:fe:9d:17:c4:
                    67:42:03:15:20:66:f1:1c:8c:37:50:3c:0a:f2:b8:
                    99:db:3e:48:84:69:45:2d:f2:50:a9:11:8b:4b:2f:
                    e4:93:1c:47:0f:81:0d:1c:15:06:2a:17:98:22:69:
                    c0:b0:ef:8e:b8:ff:9b:f1:9b:f8:ec:64:4e:8d:d7:
                    21:e3:7d:2b:3e:a2:48:3b:9e:a3:22:37:46:66:2b:
                    12:a4:53:fd:21:e9:26:72:b2:7c:03:d0:94:04:bf:
                    c9:c5:d8:d1:13:c0:dd:4f:f6:c3:88:6e:1b:d9:8e:
                    54:75:b4:cd:7d:de:20:33:81:6c:f0:f0:de:60:54:
                    b6:69:71:27:5a:98:d7:e1:0b:ce:0e:57:ed:9d:eb:
                    eb:df:fa:a6:7d:86:aa:02:ba:72:b1:82:10:7c:94:
                    04:78:3e:9f:30:33:17:25:aa:93:fb:19:d1:4a:d2:
                    63:64:56:e8:5e:19:cd:04:1f:4f:d6:73:f2:79:b2:
                    10:1c:a4:34:60:39:3a:96:52:22:d3:e2:bd:11:27:
                    08:b5:bb:51:35:6d:0f:70:e2:42:80:0a:2a:37:7e:
                    e1:5a:66:7a:f1:09:7b:e3:58:f6:3b:93:97:d3:df:
                    f6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3D:43:DB:75:26:66:F0:C0:7B:CB:C3:25:9A:A3:5A:7C:43:D1:CD
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d91190ab-1659-4841-aec7-9a9a40d7c1bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:12:24:c2:b0:11:b3:45:d2:df:52:8d:99:b4:3d:dd:07:5e:
         7c:56:72:b3:c4:d6:c1:97:96:b1:08:d9:92:b3:a8:ae:90:f2:
         02:74:2b:68:05:77:62:2c:b5:15:55:15:2e:8a:41:d4:7d:2f:
         3d:cc:f4:09:cf:ec:31:02:e0:f1:8d:f7:99:5c:96:05:65:c6:
         f6:6e:af:17:05:5c:ad:9a:1a:30:e6:ec:89:21:ed:cd:03:96:
         97:49:fc:03:a7:d7:4a:e7:cf:e4:a5:c6:b8:90:88:62:8f:5a:
         9c:f8:dc:1a:7a:a0:f1:53:56:3c:59:d4:bf:b3:17:b9:f4:69:
         21:ce:9f:d0:94:ce:b9:f1:05:35:b7:c3:3c:75:eb:0d:69:59:
         91:fa:e0:8a:90:af:a4:f8:9c:2d:a2:ef:c1:71:c0:9d:41:cb:
         69:8e:52:18:f2:85:11:a6:22:88:02:2a:bb:6f:c6:92:09:b0:
         e5:fd:a5:86:38:b8:54:d0:db:1c:9c:e9:a6:36:24:99:43:51:
         aa:ec:f6:66:c1:ca:0d:ce:3f:bb:07:6d:da:e6:05:6b:a3:4c:
         53:02:90:9e:9e:cc:33:16:69:6d:b5:9f:a0:95:1d:89:1f:26:
         22:92:07:af:b8:d4:b6:68:5a:3b:1a:34:bc:3e:9d:c6:bd:28:
         6c:3b:a4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----