Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/01314805-fe5c-497b-9b94-15c147570c46.roa
File:                     01314805-fe5c-497b-9b94-15c147570c46.roa (raw, json)
Hash identifier:          zyOXKz0+QIwd9vfDYw1Qclkf5RMaOedhlGUCUvpOGzM=
Subject key identifier:   CA:FE:AD:A9:43:BD:00:8F:45:09:AC:E0:4A:CB:71:64:EB:24:72:75
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       616454E06A00E81426DC70CD4F4F2B68A91698CC
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/01314805-fe5c-497b-9b94-15c147570c46.roa
Signing time:             Sat 13 May 2023 00:00:00 +0000
ROA not before:           Sat 13 May 2023 00:00:00 +0000
ROA not after:            Tue 16 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:64:54:e0:6a:00:e8:14:26:dc:70:cd:4f:4f:2b:68:a9:16:98:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 13 00:00:00 2023 GMT
            Not After : May 16 23:59:59 2023 GMT
        Subject: serialNumber=9467a8dfd9c2a1f833f61877b3c2f247a7775f8bf70130d392817c1603477700, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a9:cd:fd:34:df:88:42:0a:3d:f5:06:ae:f9:
                    02:8e:f3:99:b3:34:47:bc:08:79:c5:b6:0f:37:3e:
                    fd:6b:02:53:4b:e4:82:db:9b:0c:cd:2f:35:29:67:
                    82:0c:ca:8d:d8:82:06:da:5c:ae:88:1c:e2:72:db:
                    99:25:6f:b4:64:cf:ef:dc:c6:30:5e:5b:95:0c:ab:
                    42:dc:ae:b8:41:e0:d8:59:88:04:ca:ae:9d:75:47:
                    00:57:90:1b:df:21:20:53:69:e6:e5:9f:54:fc:8d:
                    13:09:21:1b:2c:df:f7:c4:83:7d:00:88:cf:af:f2:
                    99:2e:f1:4c:b6:81:f0:22:aa:5f:d1:70:4c:95:85:
                    45:df:34:65:d4:d4:15:6b:a4:a2:22:19:dd:94:c2:
                    1e:b8:cf:c6:8a:3e:2e:1f:7d:a4:ff:8c:8c:73:ae:
                    20:32:05:4c:36:d4:41:4b:2b:7c:2d:a0:10:13:07:
                    f3:ef:ab:78:f5:05:ed:1b:bf:fd:6c:ad:66:9f:30:
                    c9:2e:81:bc:6f:65:0e:a9:5c:9c:57:f1:02:6c:09:
                    f9:bf:8e:0c:7e:15:4c:3b:a7:22:48:40:e7:1b:cd:
                    0e:0b:26:6e:17:da:3d:05:3b:2b:29:84:d6:29:48:
                    37:89:18:f0:f7:98:5e:a8:f5:f0:cd:2e:bb:00:8c:
                    d9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FE:AD:A9:43:BD:00:8F:45:09:AC:E0:4A:CB:71:64:EB:24:72:75
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/01314805-fe5c-497b-9b94-15c147570c46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:db:ff:98:d5:bd:9f:0c:67:5c:6b:14:96:d8:27:79:17:91:
         3e:9e:e8:73:5b:97:5e:69:4a:7f:59:cb:f9:5f:72:4c:a0:d9:
         f1:ce:b3:1b:be:5c:4e:fb:fc:7e:60:a1:4b:3e:6e:49:54:a5:
         ae:f9:0c:aa:14:4c:82:3d:86:66:6c:8e:f8:7c:62:dc:c6:e0:
         56:86:9b:46:ee:68:be:c9:0d:06:ce:42:66:9e:ca:ca:28:dc:
         51:8a:50:a9:c9:61:d9:17:68:b6:5f:72:38:20:75:54:5e:d2:
         21:35:61:51:37:51:f3:61:34:3a:41:89:29:81:97:10:27:6e:
         51:f9:47:e1:e7:df:09:de:b3:b1:91:d1:51:8f:82:6d:93:f4:
         98:5d:d9:3b:84:02:5a:35:8b:5c:32:78:08:c3:d3:fe:a1:bd:
         47:ab:6d:c8:d8:b9:83:30:cc:f8:5f:e5:38:15:10:6f:af:5c:
         cc:0b:35:96:45:26:e5:66:ce:da:be:29:ab:92:34:87:a9:74:
         f4:d8:c5:ca:7c:b0:4e:d5:3a:fb:0f:f3:ff:28:1c:ed:28:3d:
         cf:65:6f:3e:0d:17:66:4d:64:6b:d3:4d:a9:bc:f1:b7:53:01:
         e8:30:81:7a:d2:57:a0:c3:94:6a:e0:b9:f7:47:54:31:20:c4:
         b1:40:0d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----