Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/29e1ac27-6a14-44db-9728-3676ee06dd1d.roa
File:                     29e1ac27-6a14-44db-9728-3676ee06dd1d.roa (raw, json)
Hash identifier:          uH+0glOJr59vzvtT4sygwSvBmwFQltpyBTUTZqYdhcE=
Subject key identifier:   22:88:3E:08:00:4E:EB:9C:7C:C5:5F:D9:33:AF:B3:A0:AB:C1:6F:8D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4790ED49A74E11F20721869DDDB2A284045F769D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/29e1ac27-6a14-44db-9728-3676ee06dd1d.roa
Signing time:             Sun 23 Apr 2023 00:00:00 +0000
ROA not before:           Sun 23 Apr 2023 00:00:00 +0000
ROA not after:            Wed 26 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:90:ed:49:a7:4e:11:f2:07:21:86:9d:dd:b2:a2:84:04:5f:76:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 23 00:00:00 2023 GMT
            Not After : Apr 26 23:59:59 2023 GMT
        Subject: serialNumber=8241f94b98a4178b3b2f97009abcce2708c92376eaeb9b8c522ca69946a49d46, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8f:7e:5e:8b:f2:8d:5a:37:ed:cf:2a:28:e5:
                    c4:9e:cb:91:2d:17:b6:40:3a:4d:56:7c:81:09:37:
                    39:5b:f5:20:09:81:97:35:fe:07:5e:f9:f9:19:e1:
                    0e:94:b5:90:52:d9:16:87:05:64:56:29:38:37:d6:
                    6e:f6:b6:ab:cc:0c:8f:a2:30:1d:71:0e:65:32:3d:
                    3c:11:3f:1e:09:9d:31:ba:3b:32:b6:67:7d:7b:3c:
                    9f:91:5a:53:19:26:9b:3f:dc:99:eb:d0:70:69:f3:
                    8d:28:a9:b1:09:74:b4:77:92:bd:3b:4e:7d:29:6a:
                    24:af:a3:74:f0:0f:28:8d:da:c8:97:64:ba:d3:17:
                    95:92:6d:d9:5c:06:ad:e7:38:c6:4c:21:e0:5b:82:
                    1b:ac:d6:1e:0d:fc:a1:38:28:67:77:7e:37:64:d0:
                    b0:95:dc:2b:a4:29:c9:6c:d8:9a:07:15:cb:74:bd:
                    85:8b:b7:89:c9:d2:71:85:0e:3c:03:24:53:6e:b9:
                    14:c6:25:ea:cb:d5:df:89:d4:d5:59:92:56:c9:34:
                    c2:7b:fa:30:ca:30:06:b9:50:8c:1a:d3:fd:09:66:
                    72:21:c7:0b:ce:6b:cf:b2:3a:0a:ae:8b:a4:70:d8:
                    96:f6:35:a3:75:e4:0b:f8:59:54:76:66:86:70:33:
                    84:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:88:3E:08:00:4E:EB:9C:7C:C5:5F:D9:33:AF:B3:A0:AB:C1:6F:8D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/29e1ac27-6a14-44db-9728-3676ee06dd1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:fa:63:27:1c:12:aa:90:88:ef:7a:1c:28:3b:cc:f7:5e:e1:
         40:c5:59:44:c8:de:96:07:99:13:f2:46:0a:8f:86:06:c6:bf:
         8d:91:63:38:20:f3:24:0d:c6:af:dc:f1:00:0a:f5:e9:54:ce:
         77:0b:47:30:21:41:fb:af:8d:57:2b:a5:54:0d:80:58:c3:e2:
         60:9d:be:3a:e7:ef:21:d7:a1:b7:f8:38:3b:95:e0:9d:11:02:
         7a:10:c2:ea:d5:93:e1:dd:99:36:78:5c:10:89:4b:a1:e7:4c:
         10:0b:ea:13:6e:58:91:73:12:70:bc:b6:68:57:b9:2c:67:f5:
         07:10:60:1c:a1:d1:a4:f0:a2:af:8b:1f:58:b7:cf:4d:25:c2:
         2f:4c:6f:c1:a1:0d:ab:49:57:b6:c2:0f:11:ed:ce:f8:b1:82:
         1e:16:a8:43:fb:d1:6e:48:2e:20:4a:4f:47:a4:82:1e:9e:87:
         c4:6e:00:bf:29:4c:d6:8d:d1:d3:2d:23:b1:24:2f:e0:20:b4:
         e9:0c:38:bc:13:3c:33:02:7c:a1:2a:4e:af:09:3c:06:8e:4a:
         6a:e7:c8:08:1d:65:da:1c:0b:ee:9f:76:3c:c7:39:e9:2c:f2:
         19:ac:33:28:23:50:9f:1e:c0:17:74:35:1e:ee:df:68:46:b3:
         97:ef:a9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----