Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/08651619-11c8-450a-a39e-9751c8868ae7.roa
File:                     08651619-11c8-450a-a39e-9751c8868ae7.roa (raw, json)
Hash identifier:          VaLqQwo0CeGItmJnQx8oMfCsPSyZQcXPiUb9uaR8q28=
Subject key identifier:   34:30:2E:88:5A:85:93:D3:74:79:26:49:B8:61:49:33:B1:9B:BB:C0
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3F9C1ECD45A8F420112F95BC4F3E2129BDAEDC5A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/08651619-11c8-450a-a39e-9751c8868ae7.roa
Signing time:             Thu 11 May 2023 00:00:00 +0000
ROA not before:           Thu 11 May 2023 00:00:00 +0000
ROA not after:            Sun 14 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9c:1e:cd:45:a8:f4:20:11:2f:95:bc:4f:3e:21:29:bd:ae:dc:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 11 00:00:00 2023 GMT
            Not After : May 14 23:59:59 2023 GMT
        Subject: serialNumber=9f9b9027ee8c70198854d5d6a875a1ee9e1bc1c931731424a8c55fe3e2592610, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:06:0b:ce:02:b3:d6:39:26:80:2d:fe:8c:21:
                    18:87:e7:12:e4:d8:9b:51:e3:5a:81:d6:d7:e4:86:
                    e3:35:9d:60:a9:27:87:4f:f1:c2:18:6b:6c:f2:78:
                    1d:4d:51:74:50:ea:ed:63:d0:46:22:b9:72:b5:41:
                    32:eb:37:7a:54:dc:4b:dc:25:ab:bf:07:16:29:79:
                    f6:ba:ce:c2:19:e2:ec:88:18:53:12:33:2e:9e:82:
                    85:23:43:e6:d8:dd:8d:d0:a6:68:6e:14:5d:7c:13:
                    f4:25:23:f0:d8:48:f7:c3:d2:eb:fc:25:2c:36:eb:
                    f0:40:3a:cb:a7:ca:fa:35:cd:87:df:b3:b1:dd:c2:
                    73:bf:96:f8:6e:f4:e0:1e:54:a7:84:6f:30:3b:43:
                    96:c9:38:35:46:bd:f5:c3:0c:a7:03:51:81:de:45:
                    72:9b:27:fc:68:5e:ed:1a:fb:ef:c0:a3:a7:4e:cd:
                    c8:9b:8c:f1:d9:09:e1:8d:a4:44:35:33:8e:7a:89:
                    52:c4:aa:e0:b3:e6:6a:35:96:34:c7:07:16:be:3c:
                    f6:ef:3d:a1:9f:78:13:a5:62:f6:9e:5c:5c:70:69:
                    3f:ae:27:3c:f9:d6:ab:2c:03:e8:cf:b5:0b:20:91:
                    4f:c9:23:e6:82:e9:8a:60:34:58:b1:8d:a3:a4:e5:
                    ec:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:30:2E:88:5A:85:93:D3:74:79:26:49:B8:61:49:33:B1:9B:BB:C0
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/08651619-11c8-450a-a39e-9751c8868ae7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:66:a7:73:79:63:9a:08:9a:16:1e:72:74:d2:4e:56:29:8a:
         e2:23:33:4b:d9:ef:ae:fb:ec:7d:0c:b1:e5:01:da:80:bb:ab:
         83:40:a8:82:7f:5c:9c:dd:e9:cf:c0:4e:13:f0:64:52:b2:97:
         59:a4:45:8b:23:45:40:fb:f7:f1:80:09:c6:15:0d:da:7d:dd:
         e7:d6:af:37:89:09:42:1d:15:63:05:39:e5:ed:e2:c6:13:10:
         e7:90:7b:d1:fc:0d:5d:ec:7e:31:59:d4:59:44:6b:52:c3:ef:
         23:12:9e:d5:0d:5f:38:ab:72:39:17:8a:0c:6c:06:37:62:cd:
         64:c5:bd:28:44:20:1a:1d:ce:3d:05:32:77:af:5a:ea:86:e8:
         67:97:c4:2a:cb:6e:8a:d8:1f:f9:fd:bf:34:6f:d0:44:f3:dd:
         74:b0:ec:be:83:09:61:5f:97:76:63:c8:16:30:d0:56:d8:fe:
         52:d2:73:fb:22:f4:fd:c8:2e:f3:01:a6:f7:23:c1:41:cc:71:
         a2:3b:e1:ec:2d:23:27:f5:c7:53:16:29:cf:b9:31:ae:fd:14:
         ba:45:6e:ce:12:c2:4c:92:60:fe:d3:69:43:ad:a0:44:e1:54:
         59:fd:0a:75:ad:d8:1d:fb:40:4d:38:99:4b:17:e0:1d:55:7a:
         5c:41:25:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----