Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2375431b-9f78-484a-890b-e6bd5903a0a6.roa
File:                     2375431b-9f78-484a-890b-e6bd5903a0a6.roa (raw, json)
Hash identifier:          AGIRO04KGNEtHdgB7hqWFbnvPGBMd6sTACHos3KI+NM=
Subject key identifier:   43:7E:C9:D7:80:4A:0E:06:5B:CD:3D:3B:01:B4:30:6C:C0:36:A4:4F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4BA79EB886865F9DCD68C5EB68A48EB59FA4853A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2375431b-9f78-484a-890b-e6bd5903a0a6.roa
Signing time:             Tue 18 Apr 2023 00:00:00 +0000
ROA not before:           Tue 18 Apr 2023 00:00:00 +0000
ROA not after:            Fri 21 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a7:9e:b8:86:86:5f:9d:cd:68:c5:eb:68:a4:8e:b5:9f:a4:85:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 18 00:00:00 2023 GMT
            Not After : Apr 21 23:59:59 2023 GMT
        Subject: serialNumber=c4bb6ae7c44cd06c334adec6641b9c4e84eee65dc09d12df130149527605476b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:6d:e7:68:63:86:1c:e5:a1:59:a3:b1:c4:
                    df:c7:b7:20:f6:69:41:d7:63:a7:4a:9f:af:94:76:
                    74:04:65:3e:38:e1:5c:4a:1e:6c:bb:a9:fd:f6:fa:
                    f3:29:ac:fc:11:0a:90:f9:ee:84:ee:6a:5f:20:ef:
                    51:dd:1d:19:11:7e:d7:35:07:c8:ec:e5:fa:d5:d4:
                    4c:62:91:69:0f:2f:9f:02:3d:88:48:9a:e2:34:94:
                    c9:ef:d8:35:83:b3:6a:ae:39:4c:6f:f4:be:55:81:
                    99:8c:24:d8:3a:62:23:60:be:f6:54:78:ce:67:73:
                    b1:95:0e:ee:4c:1c:90:96:34:51:b2:0f:54:6f:28:
                    9c:54:c5:82:e0:91:28:6d:47:18:ea:d3:39:9f:59:
                    39:85:2f:cc:92:a2:3b:73:28:02:c3:44:34:59:ac:
                    96:6d:b4:9b:e5:98:4b:eb:b6:5a:57:21:fa:56:b7:
                    5d:c4:98:33:19:db:68:9f:09:14:8b:b7:0a:a4:27:
                    76:5b:25:93:1f:70:82:0a:a8:8e:79:59:ad:a0:29:
                    2d:3f:f4:9c:32:3e:e1:6a:1c:e1:e1:a9:ee:cb:c2:
                    d6:d3:18:4b:a6:f6:26:c3:1c:bb:db:c3:22:c8:0b:
                    63:8f:54:ba:24:3d:1f:d6:8a:be:68:94:3d:11:23:
                    e5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7E:C9:D7:80:4A:0E:06:5B:CD:3D:3B:01:B4:30:6C:C0:36:A4:4F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2375431b-9f78-484a-890b-e6bd5903a0a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ec:6a:56:ed:1b:7c:93:7d:c6:fa:ee:51:ac:ec:ed:8b:da:
         71:59:0d:c4:6a:6e:1d:bf:05:80:b4:aa:bd:29:9c:32:88:53:
         e7:e6:83:50:37:a9:84:b4:b0:0c:e7:e4:03:86:8e:61:7f:51:
         3b:68:57:da:d2:cd:17:00:c6:e0:3d:02:f1:43:00:e0:82:ad:
         dd:7d:3e:33:fc:26:e3:c5:e3:7f:14:f2:11:52:02:ce:ba:2a:
         e5:6d:61:f2:83:72:03:49:17:c2:c7:4f:b7:0e:83:63:95:a3:
         ae:3f:cb:d5:cf:cd:a8:8b:1d:6e:35:7a:43:cf:4a:f3:df:22:
         b9:30:c1:31:6e:46:28:a9:7a:36:bf:cf:60:ac:b7:6c:c3:7d:
         11:ac:19:e6:90:2a:6d:91:34:d9:3e:6c:97:41:e2:4c:e8:29:
         94:61:6f:98:fb:d5:e5:98:6a:42:87:f8:3a:d4:b7:46:fe:fe:
         e0:63:20:cc:dc:2e:1e:e8:af:7f:be:4f:12:ec:72:bd:fd:29:
         1c:b7:01:4c:e9:76:17:80:1c:35:d2:88:a2:d0:b1:49:ec:54:
         db:ac:78:c0:09:04:83:b1:81:64:8d:0b:d3:7c:e4:42:ad:61:
         8e:82:86:e4:49:06:0b:ed:07:89:50:39:93:49:01:fd:70:d0:
         78:0d:2f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----