Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0a67b81a-bfa9-49f3-ba6c-21429d5194ee.roa
File:                     0a67b81a-bfa9-49f3-ba6c-21429d5194ee.roa (raw, json)
Hash identifier:          O79whjDdfGg/KH7rihEcKHq1ys4eFQ+YRAyKdsSYac0=
Subject key identifier:   90:ED:44:01:E6:5A:7C:14:95:97:D0:0A:25:38:D1:D0:48:10:C5:92
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3C807C6E43527025FBBA9CE93DC883978F3276FE
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0a67b81a-bfa9-49f3-ba6c-21429d5194ee.roa
Signing time:             Sat 22 Apr 2023 00:00:00 +0000
ROA not before:           Sat 22 Apr 2023 00:00:00 +0000
ROA not after:            Tue 25 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:80:7c:6e:43:52:70:25:fb:ba:9c:e9:3d:c8:83:97:8f:32:76:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 22 00:00:00 2023 GMT
            Not After : Apr 25 23:59:59 2023 GMT
        Subject: serialNumber=a4ed9fe059c8dbb54347bbe9f3e1aaea88cb3c819f3adeb428d79c16e31e021b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:86:ab:03:b6:3b:ed:c1:ce:3e:ff:be:2e:e7:
                    88:ee:46:88:f0:bc:da:93:b6:f8:96:35:d9:8a:4c:
                    ae:ff:d4:23:45:3b:af:ad:ba:ca:c3:53:14:47:55:
                    67:20:d9:4d:fa:6d:1d:95:8d:14:ca:02:6d:e1:b0:
                    8b:2c:78:36:e5:82:93:21:50:84:d2:a5:22:00:96:
                    30:e8:8a:96:5c:f7:99:10:0a:00:d5:74:d3:e4:9e:
                    93:30:36:fd:cf:70:bf:2e:16:7e:3b:e1:57:7b:86:
                    46:5d:2a:53:f1:c4:97:93:2f:41:58:e0:50:42:e2:
                    11:bc:e4:0a:21:17:02:10:bd:de:7d:91:52:aa:42:
                    98:7c:c9:8f:1b:98:b5:63:6c:8a:e0:f6:70:7c:fd:
                    08:3f:4a:13:7c:f4:2c:61:76:f5:bb:4f:91:9d:5b:
                    8f:8d:89:18:91:c6:72:b1:b7:7f:3c:84:0f:48:51:
                    b1:76:7e:c3:01:e3:4d:5d:e4:bd:f6:a7:75:84:e0:
                    4b:2e:c2:d0:1a:08:f0:2e:6d:ce:c3:25:df:2e:98:
                    19:71:d8:15:ec:90:6a:74:a8:74:ae:76:3e:3d:7e:
                    e5:90:a9:bb:d1:4b:6a:34:f9:f5:0f:9d:8d:11:01:
                    84:ee:19:4e:8c:fb:e5:b8:da:40:3b:e7:55:99:f8:
                    fb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:ED:44:01:E6:5A:7C:14:95:97:D0:0A:25:38:D1:D0:48:10:C5:92
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0a67b81a-bfa9-49f3-ba6c-21429d5194ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:16:8c:f6:e7:f4:9c:46:3a:59:17:09:fa:26:2b:2c:12:53:
         67:d9:f5:4a:b7:7f:2a:b8:4d:5b:a6:58:a8:37:75:fd:35:5a:
         dd:a4:54:33:ff:9a:50:ae:1a:b7:b1:4a:18:12:a0:82:f8:5c:
         c5:9e:63:a2:0c:38:38:a5:fa:5f:11:1f:b0:c8:17:ed:20:ee:
         e5:39:55:04:86:7a:12:83:c1:0c:53:df:2e:27:02:39:4f:71:
         ce:17:cb:06:c0:16:60:66:3f:b9:5d:1f:a5:b5:f1:60:fd:4b:
         34:38:0f:d1:68:91:51:d5:d9:0b:85:0e:06:67:6e:4f:12:2e:
         a1:bd:dd:6d:82:82:af:2b:1d:48:07:6f:49:5c:c2:46:a9:6f:
         cb:3e:ce:08:7b:b7:a5:f3:0c:8f:be:8e:b6:ad:b8:47:af:33:
         68:7b:83:5e:d6:fc:48:00:ba:37:96:b1:da:94:8b:dc:1d:73:
         2b:b8:69:62:1c:bc:12:a2:08:29:51:17:19:fb:1a:2b:35:96:
         65:57:ce:5e:bd:cd:52:44:62:dd:d9:8b:da:3b:17:4b:56:13:
         40:30:f0:78:db:7c:e2:75:4e:2b:37:d4:e8:1b:8a:aa:03:02:
         38:7f:a1:f1:63:c2:92:93:44:c4:81:75:78:0a:1a:a5:34:f8:
         47:ed:2d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----