Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/186af3ea-df9f-4801-9cc7-63ca00e0bbd9.roa
File:                     186af3ea-df9f-4801-9cc7-63ca00e0bbd9.roa (raw, json)
Hash identifier:          LCgBvrnZcFfpsqBvlLE3KVk0NdOoUUiZteZ8TxptKTk=
Subject key identifier:   0C:34:C3:98:A0:0A:73:D6:7D:27:49:39:87:75:FE:7D:D9:A4:B4:96
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       66A422550A707A8EC7BC0F55C009996EB64CC03A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/186af3ea-df9f-4801-9cc7-63ca00e0bbd9.roa
Signing time:             Mon 27 Mar 2023 00:00:00 +0000
ROA not before:           Mon 27 Mar 2023 00:00:00 +0000
ROA not after:            Thu 30 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a4:22:55:0a:70:7a:8e:c7:bc:0f:55:c0:09:99:6e:b6:4c:c0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 27 00:00:00 2023 GMT
            Not After : Mar 30 23:59:59 2023 GMT
        Subject: serialNumber=426e7fa5a47ff8cce59657533c360dd1d9b3569e966266dad538465b77f4b3bc, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0f:59:42:45:12:af:2d:22:f5:40:d6:ca:c6:
                    43:c8:77:ff:4e:f7:14:c0:bf:36:5d:1d:5e:49:a2:
                    41:77:81:ce:64:aa:74:18:ee:9b:51:01:b4:4e:44:
                    cc:53:4d:22:08:cc:7b:e6:a1:05:4d:98:43:6e:01:
                    d2:af:b7:f7:24:7b:c7:cf:de:e0:8e:92:c3:96:76:
                    28:36:48:b0:92:25:df:b6:bd:c4:ec:55:89:0f:ee:
                    5e:16:e0:88:df:3e:c1:69:d9:a5:d2:1e:f8:a4:70:
                    3f:93:bd:57:0b:e4:cd:27:75:c1:a3:26:a6:c0:e3:
                    a7:3e:8e:cf:05:4d:5b:da:10:18:33:c4:4a:4f:a9:
                    dc:d6:c1:cb:f9:a7:f9:e3:0a:9d:3b:3e:f2:2b:89:
                    fe:84:a8:b2:07:c5:2f:68:7f:30:d5:05:e7:f9:a4:
                    76:a5:c0:df:b3:4b:6c:c3:69:3b:98:b0:4a:1f:31:
                    8b:b8:5d:1b:35:87:d9:62:3f:11:e9:57:68:6e:b8:
                    f3:f5:74:8b:43:13:b6:d7:6f:77:e5:51:56:dc:8d:
                    4b:01:37:3b:db:44:cf:3c:ad:f3:7a:92:b6:6b:a5:
                    de:e9:4a:86:fb:88:5f:55:13:55:06:60:43:64:96:
                    aa:10:73:7f:c0:ba:f1:cd:40:60:33:52:8c:6f:9b:
                    0b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:34:C3:98:A0:0A:73:D6:7D:27:49:39:87:75:FE:7D:D9:A4:B4:96
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/186af3ea-df9f-4801-9cc7-63ca00e0bbd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:51:bb:e0:ea:b5:ed:45:fd:03:9b:0a:00:31:28:b3:48:f5:
         fd:5a:02:23:3c:65:58:b3:12:fe:4d:cb:22:20:23:42:cf:d6:
         4d:3f:b1:fd:2e:66:c3:02:22:fe:44:01:68:17:fa:67:8b:16:
         03:18:9a:5a:4c:69:4a:57:32:c3:4a:99:31:27:e0:86:dc:0d:
         ae:13:6b:d3:bc:bc:57:8b:c4:56:2c:e8:4f:bc:95:3b:f8:94:
         d5:8b:45:47:76:65:82:ce:64:f6:37:2b:ea:2e:0a:a0:f0:1e:
         8d:50:17:37:14:14:80:06:23:c2:f3:9a:67:2b:f4:4e:cf:b2:
         e4:9d:70:b3:a3:ad:3b:9c:03:76:18:6f:f3:92:72:9f:be:5a:
         ea:f3:f8:52:d2:db:f9:f3:c7:fc:dc:80:a5:1e:ea:cc:c2:08:
         a7:57:60:ce:66:1c:28:ef:a8:fd:cf:f5:fd:78:53:24:da:79:
         e6:9c:5d:48:07:37:fe:ef:f8:6d:e1:f3:8a:42:b8:6c:d2:28:
         81:2f:6f:65:73:dc:8a:42:0c:bd:d3:9b:cc:4b:57:3a:17:e5:
         4f:a6:e3:03:c8:5a:f2:ad:93:d1:d0:78:e3:a3:15:c5:d1:4c:
         04:27:b6:68:1a:1d:39:d5:48:af:97:34:60:1c:78:c0:88:ce:
         e4:ca:99:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----