Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2a5e3898-c0f2-458f-ae34-0ae19b131115.roa
File:                     2a5e3898-c0f2-458f-ae34-0ae19b131115.roa (raw, json)
Hash identifier:          5kYH4cQv3BR6sEpv33LJO532StrZ7K3f9F4Yf/likJ8=
Subject key identifier:   FC:34:FD:B4:9C:0D:32:2C:38:FD:05:0B:8B:1E:E9:01:67:27:F1:11
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       60EEC085957BAA554E0FF1C80CAE3E9B6BCCB0D8
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2a5e3898-c0f2-458f-ae34-0ae19b131115.roa
Signing time:             Sat 18 Mar 2023 00:00:00 +0000
ROA not before:           Sat 18 Mar 2023 00:00:00 +0000
ROA not after:            Tue 21 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ee:c0:85:95:7b:aa:55:4e:0f:f1:c8:0c:ae:3e:9b:6b:cc:b0:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 18 00:00:00 2023 GMT
            Not After : Mar 21 23:59:59 2023 GMT
        Subject: serialNumber=1a84a46a5f7c463d8eec908b3d776145afa6b10a71eb41be638b1a5c8024791d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:93:dc:61:2a:60:f8:1d:07:e9:f7:5c:47:
                    db:3e:18:70:b0:db:33:52:bc:08:99:63:f5:b7:72:
                    4a:e4:04:85:b4:12:b2:10:f6:73:f4:d3:30:f3:29:
                    92:d3:70:3f:a5:79:e9:f0:8f:30:fb:bd:b6:57:7b:
                    a7:74:09:86:ec:98:e5:85:f3:0b:6f:80:34:19:cd:
                    55:8b:d7:06:ae:bc:0f:9f:18:18:fb:b7:6b:45:24:
                    11:f6:b9:8c:66:f6:a7:04:ba:91:f1:47:5b:89:ee:
                    4f:92:5e:01:b8:18:2e:ce:f3:57:d1:f2:d5:af:67:
                    df:88:e8:64:35:cb:6c:eb:8f:e2:f9:cb:d4:06:9e:
                    f1:75:96:53:47:79:bf:57:eb:52:35:cb:ec:fb:de:
                    84:62:b0:ca:ac:8f:46:63:04:ff:8f:7b:37:2d:7b:
                    a1:92:19:1c:01:f5:59:37:92:63:23:5a:e6:d4:41:
                    dd:9a:dd:9c:3f:8c:f0:d9:3c:5b:31:34:a1:45:99:
                    e4:c6:b0:1a:fc:ad:f0:fe:34:c0:54:e4:35:05:b2:
                    17:46:13:e2:a5:d5:66:d4:ec:40:4d:2e:86:7a:90:
                    e9:25:cc:ea:b9:06:fe:28:e9:d8:88:fa:a7:b2:9d:
                    27:c2:a4:26:2c:0b:ba:9f:a9:d1:5e:7a:5b:41:ef:
                    bb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:34:FD:B4:9C:0D:32:2C:38:FD:05:0B:8B:1E:E9:01:67:27:F1:11
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2a5e3898-c0f2-458f-ae34-0ae19b131115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:8d:50:74:8b:ee:92:7e:e3:f6:4e:e0:e7:f3:de:fe:a2:60:
         41:f6:3a:04:45:44:56:ca:43:af:48:54:96:37:fc:c2:07:6e:
         60:4a:85:02:54:7d:8e:83:30:41:52:21:57:8b:30:1b:cc:1e:
         d3:fa:bd:44:b4:ab:15:bd:fa:2b:79:8f:d3:d3:11:b3:79:02:
         a6:2d:c2:33:60:51:bf:96:a3:fa:8e:e1:98:8d:cf:20:9d:d3:
         0f:92:b1:93:dc:50:ea:96:66:1d:9c:f3:a8:36:61:0d:d1:94:
         e9:e8:4d:ab:31:49:94:0e:aa:c2:db:f7:9a:e9:ad:1d:be:b2:
         a0:ac:de:44:2c:2a:43:33:08:cb:6d:30:57:7e:8d:c9:60:d8:
         be:0b:e9:05:8f:0a:b3:f7:a9:f9:88:9c:bb:56:e9:34:49:ce:
         fa:a6:6e:9b:df:ac:d2:53:76:aa:ae:8b:43:d5:00:3a:fd:f7:
         ad:e8:a1:2f:70:62:ea:d1:fb:fb:ad:fb:47:ba:f7:65:0a:6f:
         be:e4:cb:62:3b:b7:30:99:a9:61:6a:fc:29:a5:5d:d7:bb:05:
         e3:a1:e2:3a:1a:d3:53:bd:e0:8e:03:e3:57:2e:2f:0d:e9:2c:
         55:88:e6:3e:f2:58:ee:ed:8b:52:5b:ef:84:71:39:8b:8a:79:
         28:91:68:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----