Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f02d8a2f-ca9c-425e-80c5-ce057202c5ed.roa
File:                     f02d8a2f-ca9c-425e-80c5-ce057202c5ed.roa (raw, json)
Hash identifier:          qzKiQJuRlkMKqcZugK70+8n376w+XHBesjfBRDdYZxc=
Subject key identifier:   62:7C:35:37:04:2B:82:28:F4:2B:A7:C5:CD:4A:3D:93:7E:64:0D:3C
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       72ADB743AE0C12E2A9E3409101D7A9412628A634
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f02d8a2f-ca9c-425e-80c5-ce057202c5ed.roa
Signing time:             Sat 10 Jun 2023 00:00:00 +0000
ROA not before:           Sat 10 Jun 2023 00:00:00 +0000
ROA not after:            Tue 13 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ad:b7:43:ae:0c:12:e2:a9:e3:40:91:01:d7:a9:41:26:28:a6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 10 00:00:00 2023 GMT
            Not After : Jun 13 23:59:59 2023 GMT
        Subject: serialNumber=ae40e1a862e233c8f0d3d0d984d7566ba2ab48d22aaf7169b57745bfe733d5c5, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f2:ae:0a:1d:8e:a9:f6:35:63:e5:3c:96:fa:
                    f5:28:42:1f:af:70:06:f2:60:cb:59:e4:33:2c:d9:
                    d3:08:99:f1:21:90:c5:46:fb:6c:f9:d0:82:b6:1f:
                    79:f4:c9:23:b2:47:cd:f0:11:83:1b:4c:e4:f1:fc:
                    d8:40:98:10:2b:2c:0d:93:c5:6f:14:d8:30:d6:d0:
                    37:93:8b:89:e2:a7:d3:5f:dc:cc:25:c8:ab:34:e8:
                    34:dd:35:ad:e9:9f:9f:1e:67:63:45:e2:6d:f9:a3:
                    36:64:72:8e:14:6c:ee:38:48:42:3b:a6:60:df:4e:
                    52:90:c5:b4:df:da:96:ce:57:c4:78:27:bb:7d:08:
                    8b:95:8d:61:f2:49:31:c1:6b:2b:dd:2e:55:a6:2a:
                    96:95:17:8b:c1:1a:ea:78:cd:61:a0:24:e0:3f:91:
                    8e:a7:d4:4f:16:ee:01:f3:8d:ba:02:65:2e:f6:3b:
                    6a:29:5e:fc:31:db:d9:be:a9:79:c2:82:a7:73:8e:
                    03:bf:e2:8a:9a:4e:a5:3c:1a:c5:ad:c8:42:3b:13:
                    bd:7b:d8:15:5f:dd:24:4d:65:10:8a:c5:74:a9:a7:
                    54:7c:87:71:2d:39:e5:fa:7d:8c:ec:a5:2f:2d:b5:
                    24:04:3c:1e:2b:59:0a:7f:a6:73:cc:6f:16:5c:8f:
                    d6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7C:35:37:04:2B:82:28:F4:2B:A7:C5:CD:4A:3D:93:7E:64:0D:3C
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f02d8a2f-ca9c-425e-80c5-ce057202c5ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:60:f0:99:6c:23:4c:66:d1:bf:11:fa:07:c3:f8:23:6a:b6:
         f6:ff:1a:90:c0:2b:f3:a7:2b:12:35:3b:1b:00:d1:fa:4c:d1:
         2f:bd:59:ba:aa:05:f1:7a:7b:31:b8:3e:88:03:c9:c1:f0:bb:
         3b:d5:21:4c:93:6c:71:e4:39:38:76:e9:c0:27:40:40:5b:a9:
         fc:86:da:9c:57:c3:93:da:11:e5:bc:2a:22:09:8f:4e:a3:e3:
         86:b1:b3:39:fd:82:7a:99:ea:b8:b4:f9:ea:81:a0:25:e5:64:
         87:73:ef:b1:8d:be:82:33:cb:56:9c:52:14:81:b6:1e:4c:58:
         09:46:61:ac:43:f7:1c:2a:76:5c:03:ec:1d:de:69:77:68:d1:
         79:ca:0b:cf:44:db:1e:64:0c:bd:2d:34:4a:8a:af:40:c0:2c:
         eb:db:70:a0:ce:6e:a2:d2:51:2c:72:e3:d5:67:83:be:f3:98:
         39:02:6c:c5:78:12:79:ba:e3:91:bf:35:d3:55:df:9c:02:a6:
         f3:a8:7e:81:d9:88:50:a9:8a:ca:81:42:d4:3c:5d:93:41:62:
         db:a0:9b:81:00:f3:ad:e9:fc:6f:9f:3b:b6:11:a1:d8:42:fa:
         22:f5:56:87:bc:35:dc:67:fd:a4:5e:ad:d4:a8:32:db:ed:ac:
         8e:5f:a6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----