Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e7012f19-3baa-4391-824a-61baa13a0d43.roa
File:                     e7012f19-3baa-4391-824a-61baa13a0d43.roa (raw, json)
Hash identifier:          IXFvR459RzeU4WhJ4q/j0nTb1ECHHPzmk7+0kLkh0qU=
Subject key identifier:   B9:81:61:1D:0F:65:A5:DB:CD:14:26:16:0B:6F:37:EE:8D:DB:83:96
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       04270E0C11AE328D4B3C4B26A77F0CF53CA4F853
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e7012f19-3baa-4391-824a-61baa13a0d43.roa
Signing time:             Sat 10 Jun 2023 00:00:00 +0000
ROA not before:           Sat 10 Jun 2023 00:00:00 +0000
ROA not after:            Tue 13 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:27:0e:0c:11:ae:32:8d:4b:3c:4b:26:a7:7f:0c:f5:3c:a4:f8:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 10 00:00:00 2023 GMT
            Not After : Jun 13 23:59:59 2023 GMT
        Subject: serialNumber=e00454a0a3a7b5a39ed10ffde17093acd35b21edc667d3c4529c69f499168b5e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ea:a2:aa:b4:c2:72:ae:ce:87:b4:e4:8c:27:
                    cf:39:f6:1e:3e:8d:e3:f5:ac:97:fc:ce:51:4f:63:
                    a7:ea:63:56:ba:5e:cd:6e:49:79:28:4c:09:4c:7c:
                    32:9a:a2:93:88:e2:f1:98:9d:90:98:c0:60:07:b6:
                    cd:94:61:2c:45:1a:d7:16:f5:20:1e:73:35:bc:44:
                    c8:5a:54:b5:aa:d9:ac:31:b5:e2:5f:94:64:f9:ad:
                    55:15:93:18:d1:5c:6e:78:62:88:4b:69:ea:41:26:
                    52:1c:75:64:57:d6:77:86:eb:e0:5d:94:4f:a2:9a:
                    2c:1c:0f:2e:3f:ca:24:c8:de:04:28:22:a0:d7:ed:
                    17:35:e6:61:06:d7:e0:20:b2:39:f8:53:d2:e2:26:
                    92:c9:a8:52:8f:2c:c8:f8:2d:3c:e0:d6:f9:83:20:
                    a5:d6:ae:df:e0:64:76:59:01:10:34:99:74:33:a8:
                    ad:a6:f1:13:25:da:e3:46:1a:06:eb:0d:31:27:6f:
                    76:d7:bd:75:e5:21:56:21:6c:5b:94:25:fa:09:95:
                    58:26:03:43:45:d1:bb:c2:ba:cd:f9:eb:e3:92:01:
                    3b:36:fd:b2:46:67:b9:d0:1d:be:25:ba:f7:b7:3a:
                    1e:8d:c8:10:47:1b:eb:4d:08:1f:b2:18:0e:3a:0d:
                    43:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:81:61:1D:0F:65:A5:DB:CD:14:26:16:0B:6F:37:EE:8D:DB:83:96
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e7012f19-3baa-4391-824a-61baa13a0d43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:ea:8b:a2:c4:2b:be:b5:a2:3c:e7:28:06:1c:03:a3:8a:73:
         4d:49:72:20:9e:1e:6a:cd:81:49:9b:57:ab:2b:03:e5:71:4c:
         aa:d1:d1:74:b5:4c:d6:d1:6d:84:82:e5:1f:46:a4:fe:d7:9d:
         79:98:f8:89:1f:bb:55:de:f6:ce:e4:20:b9:1f:9f:0e:67:47:
         25:e0:8b:5a:51:06:27:4a:3f:b8:93:ed:3b:ff:92:bd:3c:10:
         85:b7:c9:5f:3f:a5:c9:3a:0a:f6:d4:fb:e4:b2:18:0a:b1:3c:
         e5:d6:60:42:32:09:3b:52:17:bd:1a:41:67:b2:9d:18:34:07:
         e3:9a:52:5a:66:72:ab:ef:61:dd:b9:e6:68:1d:f2:cc:bb:63:
         9c:1b:63:35:2a:84:67:c9:9b:b8:47:d0:7c:2d:6f:88:ef:35:
         c0:00:e9:16:05:fd:13:a5:c2:85:67:c1:15:4c:c7:d1:5c:43:
         66:c5:51:cb:06:e6:8c:6a:d1:37:40:51:b2:a4:66:80:29:38:
         09:ea:26:ce:ae:6f:a0:79:ad:13:d4:b4:51:a4:26:43:87:8d:
         88:34:6a:61:07:08:f7:46:6a:6e:fb:2c:b3:aa:1c:29:ef:db:
         64:ca:fa:9b:dd:fb:2a:c7:df:80:ed:92:a4:ef:bd:39:73:14:
         48:59:68:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----