Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1bf86e0a-cc5a-439f-bfc9-4e9535c07c76.roa
File:                     1bf86e0a-cc5a-439f-bfc9-4e9535c07c76.roa (raw, json)
Hash identifier:          Bz1Q4/gRNeSh+946fWmdbuFn1YkapX9VXARJ3IYiyu4=
Subject key identifier:   C0:51:78:06:91:F7:79:81:D6:A6:F1:B7:CE:5B:3C:A1:10:D3:3B:67
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       63C34DB209B0454C1E61A2FA1350988104A7FB78
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1bf86e0a-cc5a-439f-bfc9-4e9535c07c76.roa
Signing time:             Mon 15 May 2023 00:00:00 +0000
ROA not before:           Mon 15 May 2023 00:00:00 +0000
ROA not after:            Thu 18 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c3:4d:b2:09:b0:45:4c:1e:61:a2:fa:13:50:98:81:04:a7:fb:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 15 00:00:00 2023 GMT
            Not After : May 18 23:59:59 2023 GMT
        Subject: serialNumber=a90a12b6e2a3febba4054af8662bedecc107ace8608e7d60cdf8e28fda8c80ea, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f4:02:25:52:bc:df:fb:6b:46:e7:d7:c6:29:
                    11:62:af:49:b6:fd:80:a7:f8:ea:87:a3:00:76:7f:
                    05:fe:7b:5f:e8:6b:a3:62:7f:47:62:a3:01:aa:62:
                    89:03:19:cf:ba:41:da:04:d2:5d:29:0d:0f:69:36:
                    ef:89:b4:a3:f0:7b:07:29:6a:3e:51:a1:fa:19:06:
                    50:be:49:b3:34:66:e6:fe:2f:07:cf:5f:fd:df:0b:
                    33:12:e6:b6:a6:63:bf:b4:7f:68:4e:38:5c:c7:90:
                    7e:04:40:70:c1:de:33:00:bf:a7:d3:44:4b:ad:b2:
                    56:b2:40:01:80:e9:86:b3:78:fc:96:d3:59:97:e5:
                    eb:a8:39:06:ba:bb:3f:9a:4b:14:cb:9a:7b:21:4d:
                    33:9a:bb:26:35:91:12:36:da:f4:d4:6a:0d:94:39:
                    88:11:fd:04:5e:64:c3:09:16:be:95:64:bb:6a:be:
                    da:e9:6a:eb:a2:b6:5d:4b:2c:23:11:a2:c1:5e:a3:
                    ba:3e:cd:1a:20:74:58:d3:32:45:9b:ed:c3:9a:2e:
                    c8:45:ff:d3:4a:3d:31:9e:ab:95:7f:6f:7a:88:ad:
                    bb:a3:81:32:fe:65:85:64:8e:f2:7b:38:c7:3c:60:
                    27:e5:48:c2:58:78:8e:9d:32:42:60:08:f9:4b:b3:
                    b6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:51:78:06:91:F7:79:81:D6:A6:F1:B7:CE:5B:3C:A1:10:D3:3B:67
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1bf86e0a-cc5a-439f-bfc9-4e9535c07c76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:c3:50:a4:c1:ae:06:cd:2a:a8:8e:bb:4b:6e:b7:97:8e:8c:
         39:b3:e2:08:75:8f:52:72:c5:be:f0:be:37:c5:f6:13:3b:29:
         44:03:3f:e6:95:3c:75:8b:b9:3a:c7:1d:cc:1a:da:4d:7d:5b:
         3e:d5:0d:0f:4d:7d:91:e0:3e:e1:df:71:cf:50:c3:d0:ac:e8:
         86:28:3b:c2:b1:b7:79:2e:f2:55:d9:c3:60:5e:ed:ee:38:0a:
         9e:2d:5b:f7:2b:2d:20:5d:fc:ce:f3:06:4f:f5:8a:dc:66:0b:
         03:bb:55:b2:1d:11:8f:97:0f:44:7d:25:4c:ad:77:d0:75:28:
         9d:db:dc:4c:fd:ed:bd:a9:84:39:cc:e8:59:09:85:7c:80:45:
         f7:c6:1c:54:db:b4:27:9f:2b:59:5a:a4:e5:f5:53:f2:5c:9b:
         df:d2:ed:ae:f0:88:b7:c0:d8:65:20:7e:a7:77:39:c6:19:59:
         8d:f7:5b:d4:c7:d0:29:33:7d:4b:08:d2:ed:d1:8d:35:a6:ee:
         d9:28:64:4b:88:0b:62:48:ed:5d:e6:9f:37:75:9d:f6:71:e0:
         fa:59:5e:5c:04:e9:f0:b6:ef:e6:a0:ac:2b:0c:7a:9d:64:dd:
         bc:fb:b1:d9:5f:e0:52:b1:e5:4d:d6:50:b8:66:75:4f:d2:80:
         9e:36:09:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----