Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1393ce4f-b5ab-4152-a80f-417c4f276f12.roa
File:                     1393ce4f-b5ab-4152-a80f-417c4f276f12.roa (raw, json)
Hash identifier:          kSffY1Qjz5VFCXC98G6f2roqjZwXJgp//HxsF3jUFEc=
Subject key identifier:   EE:EC:DF:8B:B5:31:9B:92:4F:B2:1C:EA:07:FB:25:76:7C:7E:2A:8D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       30B9F77D0BFCFE6F1F9D62EA34F9EFF7962435A6
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1393ce4f-b5ab-4152-a80f-417c4f276f12.roa
Signing time:             Sun 07 May 2023 00:00:00 +0000
ROA not before:           Sun 07 May 2023 00:00:00 +0000
ROA not after:            Wed 10 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b9:f7:7d:0b:fc:fe:6f:1f:9d:62:ea:34:f9:ef:f7:96:24:35:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May  7 00:00:00 2023 GMT
            Not After : May 10 23:59:59 2023 GMT
        Subject: serialNumber=b9612c246843cefd4eae91ce5fea8fb14934b2a48e5c763cfc47e234e36180de, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:63:55:ac:fb:1c:59:9f:11:11:3e:e9:89:9b:
                    4d:38:84:04:49:ff:40:e6:2f:66:74:16:79:18:39:
                    7e:80:42:1f:b5:c6:25:a7:db:bf:e3:15:8e:a8:18:
                    b0:cb:7b:28:8c:82:22:8a:46:f4:3e:7b:70:53:6c:
                    d9:5c:51:9b:71:a0:f7:0b:fe:68:af:c8:05:6b:97:
                    71:27:f5:75:41:ab:3a:ee:12:1a:63:58:9e:46:85:
                    8f:a9:a4:a5:57:5f:98:99:49:57:0c:c5:c6:b0:d5:
                    8b:b9:5a:8d:dd:ee:55:74:76:ea:d3:4a:30:5c:eb:
                    4e:31:51:75:80:0f:0c:4d:74:c2:5c:23:de:91:09:
                    19:84:1d:c9:e5:c1:4c:0c:b5:b9:5f:db:dc:96:a4:
                    6f:11:3b:02:70:51:78:43:7c:6a:f3:5b:e3:79:fc:
                    68:88:12:26:e3:ef:3e:e2:16:17:0d:58:82:21:05:
                    0f:12:fb:c6:f9:94:24:a5:11:b7:9d:7e:71:a7:57:
                    e3:c9:45:00:fd:64:50:b8:c3:b4:09:82:b6:13:aa:
                    88:a7:39:56:db:c6:11:3f:38:8c:00:9e:a5:b0:51:
                    8d:81:1c:27:c8:00:fd:91:46:a7:2b:19:f3:4d:d6:
                    2b:46:68:2b:25:b3:36:86:03:00:af:4f:d7:97:11:
                    4c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EC:DF:8B:B5:31:9B:92:4F:B2:1C:EA:07:FB:25:76:7C:7E:2A:8D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1393ce4f-b5ab-4152-a80f-417c4f276f12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:31:e2:17:6b:55:5f:03:8f:b8:f6:ec:ea:81:84:0b:2a:4e:
         a2:2d:ee:df:ae:b7:f3:71:e5:09:41:19:8e:88:ca:e1:33:da:
         c7:45:8a:12:a7:fb:41:23:17:2e:31:41:f6:ec:ed:a4:b8:64:
         a2:d0:65:b2:88:25:7f:df:9d:d3:4e:c5:1f:f5:61:7f:e4:f0:
         60:cd:39:1f:e5:a0:db:0b:6d:2b:2e:8e:74:28:a1:5f:4b:19:
         36:bb:2d:cd:fc:6c:21:1d:89:d1:06:3c:e3:8d:52:d2:80:bb:
         49:8c:ce:3f:6f:e5:ae:5e:93:c8:eb:0f:97:02:d5:d3:75:4f:
         5e:d9:fd:c7:f2:27:de:c8:79:4e:39:7d:cb:d1:f1:63:c5:04:
         c8:1b:05:a2:fb:e2:1d:26:9c:ea:2c:80:17:c3:8e:73:2f:51:
         23:de:61:f8:96:8d:86:5c:d4:13:d9:95:5d:3b:79:45:a6:95:
         d8:1d:2f:a6:15:79:6c:37:f4:53:41:3e:db:19:19:0d:b4:b8:
         85:d1:36:e3:4a:2e:7a:89:9b:b8:59:40:e7:23:74:f1:bc:ef:
         0c:68:1a:72:20:69:e0:54:7a:4c:a2:d0:81:66:bc:60:d5:7f:
         4c:b8:30:30:89:e4:4d:18:45:d9:88:09:23:78:2b:e8:b2:a7:
         a9:c8:5a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----