Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0fedc4ec-23a3-4c24-829c-f8c71511684a.roa
File:                     0fedc4ec-23a3-4c24-829c-f8c71511684a.roa (raw, json)
Hash identifier:          1X5zGfN174p66oRa84tg2nvmjxqKbt0VfYYEMrkkg4w=
Subject key identifier:   62:15:A0:33:11:3E:B3:AE:95:BB:61:65:13:A8:26:99:1F:27:CC:56
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       26F002FFCF7B09E50225BC8665BD27F5DEC116CD
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0fedc4ec-23a3-4c24-829c-f8c71511684a.roa
Signing time:             Thu 01 Jun 2023 00:00:00 +0000
ROA not before:           Thu 01 Jun 2023 00:00:00 +0000
ROA not after:            Sun 04 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f0:02:ff:cf:7b:09:e5:02:25:bc:86:65:bd:27:f5:de:c1:16:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun  1 00:00:00 2023 GMT
            Not After : Jun  4 23:59:59 2023 GMT
        Subject: serialNumber=29d85e0ae6b88c9baa55ce887532fbc816fe1103fe18f077cca5ceae77f05dde, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:77:ce:4d:34:c7:5f:57:f5:55:ec:ab:7b:58:
                    92:d0:e6:41:42:0b:b8:aa:cf:12:0a:f5:bd:ca:59:
                    44:d7:39:09:b1:2c:b9:47:80:26:d9:35:ab:79:81:
                    53:77:24:88:0d:01:d7:93:2c:8d:3c:18:1d:3a:bf:
                    1a:09:f9:4d:0e:90:94:c3:85:d8:f5:f5:01:90:4c:
                    20:f1:ee:e0:c5:da:eb:ba:01:90:71:0d:f6:41:41:
                    37:b8:8f:14:52:0d:c5:53:18:43:f1:76:6f:10:f1:
                    7b:37:56:34:c5:66:a5:81:5b:b5:95:9b:c0:3a:ff:
                    06:2a:c6:48:e2:ad:66:e1:be:d5:fb:63:87:36:32:
                    41:7e:d4:66:e3:2f:3b:f3:68:49:fb:0d:b5:92:13:
                    d2:c0:75:5c:9b:54:e6:43:0c:88:dd:a1:fe:ff:c7:
                    9c:64:ab:1b:b5:ad:4d:24:ff:e0:14:ba:db:03:b7:
                    12:b0:f3:9e:e9:81:87:54:d4:8d:9c:6c:2f:95:ca:
                    19:fe:be:ff:26:a0:c5:4d:d5:a1:d6:04:ce:1e:bd:
                    ab:cd:0f:e3:db:ba:8a:6a:0b:22:8f:92:a7:e8:82:
                    4b:3d:93:64:6d:9e:27:44:80:29:8e:36:d6:a8:6f:
                    8f:7e:54:da:b5:96:e1:3c:85:27:f8:1d:7a:b0:8c:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:15:A0:33:11:3E:B3:AE:95:BB:61:65:13:A8:26:99:1F:27:CC:56
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0fedc4ec-23a3-4c24-829c-f8c71511684a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:b8:93:f2:e9:58:b4:5f:58:a8:93:78:ad:62:46:fd:45:7f:
         fb:e7:6d:6f:b8:23:08:41:a5:f2:0a:58:52:01:ff:c8:aa:24:
         38:93:13:3a:cf:18:55:ca:9f:61:9e:b9:35:61:32:df:df:e6:
         1d:df:22:de:96:4d:73:26:f0:db:ab:e1:51:97:e4:6a:96:44:
         24:0f:4c:35:17:1d:b4:9b:3e:8c:14:cf:8b:d3:70:8b:b6:c0:
         48:66:55:93:ff:10:9a:af:f2:15:b5:eb:b7:19:3e:1b:4f:e1:
         03:a0:3b:2e:98:9f:ed:65:8c:d1:ce:d5:37:6f:d8:81:fa:38:
         fb:a8:a6:0c:70:c1:76:c0:74:22:e9:5a:fa:97:6e:2f:3c:e4:
         31:ed:83:cb:79:9a:80:52:9a:81:18:76:4b:32:4a:5a:c1:c8:
         c3:27:f5:f8:82:eb:15:89:e0:fe:0c:3b:3a:87:48:c0:a2:00:
         57:42:ed:e6:b7:7c:2f:9f:1e:1f:57:a2:91:12:0b:7c:bb:88:
         09:f0:13:79:46:5e:a8:a5:e1:b9:7a:81:26:c1:c0:f2:7e:e9:
         99:d0:c2:26:56:6c:c2:f4:7c:ac:6a:ac:e9:3c:69:47:8d:75:
         ce:f1:65:b0:0e:bd:9c:49:16:41:20:e9:6a:12:a9:56:0f:7a:
         44:11:a2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----