Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/13afe3e8-9ec9-46aa-a68c-060a6284de09.roa
File:                     13afe3e8-9ec9-46aa-a68c-060a6284de09.roa (raw, json)
Hash identifier:          /oSkZYvT/sIzEQCRyNerOc/Xrxx1+ncapBZoavpftE8=
Subject key identifier:   DC:E3:02:C2:6C:66:E6:55:E3:A7:D5:56:A5:65:61:D9:33:B4:5B:F7
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7938CB2C9F6400D66C285049A521518B6B41FF8C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/13afe3e8-9ec9-46aa-a68c-060a6284de09.roa
Signing time:             Sat 11 Mar 2023 00:00:00 +0000
ROA not before:           Sat 11 Mar 2023 00:00:00 +0000
ROA not after:            Tue 14 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:38:cb:2c:9f:64:00:d6:6c:28:50:49:a5:21:51:8b:6b:41:ff:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 11 00:00:00 2023 GMT
            Not After : Mar 14 23:59:59 2023 GMT
        Subject: serialNumber=b9c0800a7ff3acff0801be32d1513f7363bdd46447ffc338e7c6c37204a804d6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:57:54:88:f0:6b:46:27:71:c7:aa:ff:9c:0a:
                    b3:61:c6:41:1b:36:e5:d8:6e:f9:8b:ed:93:fe:28:
                    84:a6:35:2a:db:e2:0b:62:c5:71:78:a8:c3:73:38:
                    78:64:98:7c:ef:e3:16:80:32:af:a5:17:c5:f5:18:
                    38:e1:73:3b:45:02:20:80:c6:66:cb:df:87:85:87:
                    39:95:79:61:9f:28:cc:98:6e:b8:00:da:c3:0b:bb:
                    e1:e4:e0:a9:14:86:8e:1d:5c:16:71:5a:45:b0:64:
                    9d:4e:07:51:52:17:ce:da:d2:bf:06:36:23:53:af:
                    dc:e1:d7:67:9b:dd:ee:6d:b6:f4:60:9a:e0:59:19:
                    a1:24:a9:37:ed:8a:5c:1f:44:81:97:38:92:d0:41:
                    7a:5e:c4:7d:6a:9e:c0:e7:3b:be:ae:0f:d4:9b:7b:
                    68:15:e6:f6:d6:63:77:ee:85:66:a8:7a:e2:ad:04:
                    3e:e0:3d:b1:a1:e6:e4:32:05:87:9d:38:f3:fb:5c:
                    67:7e:0a:9e:d7:95:e7:25:81:a8:81:61:0c:5e:d2:
                    53:f9:15:1c:60:4f:be:93:49:c4:6c:b4:5d:dc:47:
                    03:e7:e5:70:16:e4:1c:68:2d:cb:8d:b1:22:1a:ec:
                    08:48:7a:18:ed:01:7a:a9:4a:98:65:8a:0d:e0:f4:
                    70:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E3:02:C2:6C:66:E6:55:E3:A7:D5:56:A5:65:61:D9:33:B4:5B:F7
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/13afe3e8-9ec9-46aa-a68c-060a6284de09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:49:77:b1:5b:de:73:6c:fc:eb:14:28:02:72:8f:aa:f2:d7:
         1c:d6:e4:fd:a3:44:de:4f:4d:a5:b3:ef:d7:d4:79:29:a2:88:
         cf:2f:b7:60:84:d4:7f:cb:e6:a6:f6:1a:54:51:99:7d:60:96:
         9c:63:fd:7e:87:dc:d8:0a:3a:ab:af:b8:13:13:83:30:2a:e0:
         e6:b9:e9:af:00:97:fd:db:1f:83:e2:1f:46:99:52:69:78:0d:
         a7:05:3b:e2:90:0d:19:f0:21:61:15:a7:49:dd:45:ea:10:de:
         96:a2:71:fe:79:b3:2f:59:9f:25:12:f8:31:3f:74:1b:b6:67:
         bb:a4:62:2e:8f:5c:05:bf:ab:45:01:db:28:72:3d:fe:9d:3e:
         dd:f9:7b:f1:e0:53:fe:bc:16:b8:2c:3d:5e:ac:30:c5:38:67:
         a5:9e:85:85:dd:0a:87:bd:a7:1a:eb:9e:fd:21:ae:56:05:a9:
         d8:50:9a:88:3b:46:b3:b1:2e:ad:d2:cc:39:22:2f:50:24:62:
         bc:2f:f3:ab:4d:73:01:d3:04:b2:0b:d8:20:c2:68:f4:4b:82:
         7b:e1:3e:59:61:44:e9:bd:9c:13:88:75:ca:67:17:ed:2b:c1:
         98:9f:ac:f6:e0:5f:6d:03:1b:00:fc:35:27:86:1e:da:94:a5:
         c1:64:b8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----