Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2e8c2313-ab8b-4f08-8bef-2ffd77bbc130.roa
File:                     2e8c2313-ab8b-4f08-8bef-2ffd77bbc130.roa (raw, json)
Hash identifier:          LDeRMk0qST8wuyoBBFRRF3jfXBpf3P0HWdrULYibQfY=
Subject key identifier:   63:80:1B:EA:9B:2D:E9:69:4B:AA:47:09:AA:88:C6:07:F0:3E:BE:5B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       45C9900F8099DEEAAC668BD8E9D2F7EDF4D74580
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2e8c2313-ab8b-4f08-8bef-2ffd77bbc130.roa
Signing time:             Mon 24 Apr 2023 00:00:00 +0000
ROA not before:           Mon 24 Apr 2023 00:00:00 +0000
ROA not after:            Thu 27 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c9:90:0f:80:99:de:ea:ac:66:8b:d8:e9:d2:f7:ed:f4:d7:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 24 00:00:00 2023 GMT
            Not After : Apr 27 23:59:59 2023 GMT
        Subject: serialNumber=915ba8fcd2b059a88045fb49c09b32406417f165f1c8d209f0017418674aaf6d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:29:fe:c2:b0:eb:f8:6c:05:9f:05:c8:43:02:
                    80:b8:44:00:e0:c9:a2:16:c1:39:b2:ee:56:69:ec:
                    6a:60:59:f9:fc:75:53:2f:cc:bc:6f:ba:25:8c:6d:
                    84:09:4c:1f:ce:8d:d5:54:76:42:33:d4:06:dc:84:
                    e4:b7:3c:0a:e5:9e:36:d2:da:b0:87:22:ed:8d:61:
                    25:aa:2c:c2:2c:ab:d9:af:61:73:ca:f4:b4:fe:fe:
                    6c:d3:96:d0:af:74:af:2a:c2:23:8d:51:b4:b5:bc:
                    13:6e:22:e4:2f:db:d2:13:db:4b:cd:75:50:a7:df:
                    70:77:e9:de:8a:3b:c0:35:fa:e9:c5:e7:af:34:3d:
                    2f:03:ae:6b:d6:36:d0:e9:c9:ce:f6:a5:e1:d2:a8:
                    43:31:77:09:48:8f:8a:b7:2b:ca:1b:26:50:7d:81:
                    70:ca:5e:f1:04:06:51:05:45:df:9f:7e:6a:a8:92:
                    a6:37:0e:0a:32:cb:92:dd:6b:85:ba:bc:8f:0c:15:
                    af:96:20:9f:7a:8e:c8:1c:fc:aa:d1:f4:84:30:df:
                    06:29:99:33:2b:90:ad:e3:01:d4:33:88:45:c8:41:
                    8b:41:28:ad:ae:72:19:36:9a:9c:ad:a8:5c:3e:46:
                    5f:28:75:aa:b8:c9:75:ee:33:8e:35:e8:71:6b:97:
                    4c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:80:1B:EA:9B:2D:E9:69:4B:AA:47:09:AA:88:C6:07:F0:3E:BE:5B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2e8c2313-ab8b-4f08-8bef-2ffd77bbc130.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:f5:6b:da:a7:fc:38:26:57:5f:2d:8d:a9:9d:22:11:3b:e3:
         17:04:25:28:d7:84:35:7b:4b:5f:ea:f0:fd:bf:72:57:37:b5:
         31:ce:4d:d0:c8:91:2f:55:b7:bc:0c:44:e9:f8:65:16:98:9f:
         fa:b8:83:bb:56:8a:a5:b9:af:92:3b:6e:23:9c:d6:e8:7d:92:
         66:22:3b:b9:83:f2:3a:9d:61:42:96:eb:0d:13:f8:2a:01:4f:
         93:5a:64:fe:f1:b8:b3:dd:8d:99:d5:8b:a3:06:a3:f0:b6:9d:
         8d:3d:96:aa:00:cb:12:bb:50:2d:13:2b:b1:60:04:0b:88:5d:
         34:01:68:a1:7d:1b:c1:01:c4:52:a8:30:c6:cf:d6:4e:81:70:
         13:0c:8c:35:89:82:47:a7:5f:55:bf:0b:43:c2:7a:23:6f:0c:
         6b:6f:c1:5d:08:17:17:29:ac:a8:0e:4b:70:d1:49:8e:a8:17:
         20:4e:9f:23:5a:cc:56:18:ac:d2:a5:4c:20:bf:90:2b:4d:bf:
         05:2b:93:ef:83:f5:72:3e:4c:95:87:49:b6:93:8a:f3:9d:2a:
         b3:62:48:23:e5:ce:3c:0e:d0:cb:d4:e3:4c:4a:14:a4:25:28:
         f3:89:d1:97:c7:e4:18:46:31:48:15:9f:3c:c6:38:5c:a9:58:
         12:f7:84:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----