Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/032abcbd-10c2-4fe0-867d-24787aaac07d.roa
File:                     032abcbd-10c2-4fe0-867d-24787aaac07d.roa (raw, json)
Hash identifier:          vuoP/ZSWVAa/0KedXYARaB2GubzAfICvNEhFkp1PKqY=
Subject key identifier:   E5:ED:C7:66:A9:3C:53:F1:9C:0B:DC:78:21:E4:34:55:4F:A5:12:C2
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       33CF109AE581826A6F5486F848A63222CD798AA3
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/032abcbd-10c2-4fe0-867d-24787aaac07d.roa
Signing time:             Fri 14 Apr 2023 00:00:00 +0000
ROA not before:           Fri 14 Apr 2023 00:00:00 +0000
ROA not after:            Mon 17 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cf:10:9a:e5:81:82:6a:6f:54:86:f8:48:a6:32:22:cd:79:8a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 14 00:00:00 2023 GMT
            Not After : Apr 17 23:59:59 2023 GMT
        Subject: serialNumber=99ac5c95795401aedc4f451da44c25d63627852f24c52fb9a28f0b08c165d800, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f2:7e:1f:42:b0:35:e6:3b:fe:b3:ca:33:ae:
                    71:fe:d4:89:ce:2b:c6:29:c5:68:ba:15:c4:69:65:
                    1e:a8:70:d8:2f:47:c3:85:6c:dd:1f:4e:8b:a2:26:
                    9e:ce:a8:37:f7:07:ea:be:a9:07:23:c3:7f:63:da:
                    7d:39:e3:e9:ea:7c:be:0b:10:16:08:cc:e3:de:e0:
                    28:e8:b7:11:2b:4b:07:84:1a:44:31:58:e3:15:75:
                    fa:7a:12:82:f4:19:d9:7a:63:dc:9a:02:89:ec:2a:
                    22:95:4a:c7:41:78:00:95:13:7c:0b:c9:99:c8:1e:
                    c7:0d:a6:44:59:e2:69:95:e9:fc:53:ad:45:8f:d3:
                    dc:74:d0:c5:9e:72:8e:97:24:92:b0:ef:b4:c9:df:
                    67:3e:2f:9f:b9:0e:01:9b:34:c0:c9:f9:97:58:fa:
                    41:95:0b:76:d8:af:bf:5e:61:0c:65:03:41:c4:c3:
                    0f:87:f2:f0:e6:87:01:95:af:71:f7:f5:82:4c:d4:
                    60:d2:af:95:86:ff:7b:67:6e:88:ef:61:68:c7:9b:
                    4f:5e:d7:30:62:6c:d2:8c:c6:6e:b8:c7:65:b4:2e:
                    f5:ac:13:af:17:a3:2c:91:b4:20:23:43:fb:24:70:
                    2c:7d:14:f1:8b:06:dc:d6:4e:7f:1e:8b:04:17:6c:
                    ac:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:ED:C7:66:A9:3C:53:F1:9C:0B:DC:78:21:E4:34:55:4F:A5:12:C2
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/032abcbd-10c2-4fe0-867d-24787aaac07d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:f0:78:18:ca:a6:42:cf:78:8e:04:67:9e:13:d3:66:f4:6b:
         00:6b:03:85:33:8f:eb:98:5b:0a:25:79:c0:8e:7f:7d:c8:0f:
         37:23:9e:a1:c6:1d:51:f9:de:2f:df:bd:e5:46:05:a6:d6:87:
         83:f9:b0:76:bf:b9:6a:6b:5d:33:bc:cc:39:f6:0c:51:c9:a6:
         6b:c7:2a:ea:dd:f4:0c:85:e5:0d:7d:d3:4c:c1:33:23:db:33:
         e1:c2:32:20:ca:98:3f:5d:11:fb:6d:70:f3:55:95:5d:56:06:
         38:a0:f7:8e:d1:3b:c6:f6:8e:94:92:2b:22:bf:da:ef:5c:a5:
         69:b1:74:a8:97:9a:12:d4:9a:df:49:1b:47:9a:a0:55:38:74:
         3e:c2:17:6c:be:03:f1:c6:0a:04:4a:ec:76:2e:9a:44:73:e6:
         f3:5b:3d:a8:32:5a:29:07:a4:41:99:d4:77:61:94:55:2d:22:
         d7:b5:75:ce:96:23:5a:f6:9b:33:29:54:d4:2e:d4:07:df:8a:
         1f:4e:df:65:20:dc:ba:7e:8d:26:83:f8:18:29:04:5c:fe:6f:
         17:8d:44:a5:d9:08:6b:16:4e:42:6a:49:70:b3:ae:29:75:67:
         9f:58:9c:bb:1c:90:dc:f1:90:53:43:f8:69:97:09:93:ca:7f:
         0f:c1:01:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----