Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2ece0f50-5554-4285-9be2-8566d8222256.roa
File:                     2ece0f50-5554-4285-9be2-8566d8222256.roa (raw, json)
Hash identifier:          tU/wYLcrkhiNj7QHP4lrD97txT47d6rmEIwWjZ9xEQ4=
Subject key identifier:   65:ED:58:F1:D2:DE:11:82:97:17:85:CF:34:B3:60:A5:49:EF:DF:57
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2466A0BA7371FE3E63DA2B85BDD04775185F6D83
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2ece0f50-5554-4285-9be2-8566d8222256.roa
Signing time:             Sun 14 May 2023 00:00:00 +0000
ROA not before:           Sun 14 May 2023 00:00:00 +0000
ROA not after:            Wed 17 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:66:a0:ba:73:71:fe:3e:63:da:2b:85:bd:d0:47:75:18:5f:6d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 14 00:00:00 2023 GMT
            Not After : May 17 23:59:59 2023 GMT
        Subject: serialNumber=8eaaa6bc12c11836bd12b10f3d1e32e0e93243a321a70716a35f99e18ee239b7, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:93:e3:2c:8b:8d:ee:d7:93:2a:1b:73:f9:
                    e5:05:70:d0:bc:cd:65:11:9d:be:57:f5:2c:b5:33:
                    69:82:c4:1a:e0:79:9e:87:61:e1:57:79:5e:b4:1b:
                    c6:01:7b:7d:a9:f4:30:d5:b7:17:29:8d:a1:f7:8b:
                    89:bc:3e:e2:d5:19:51:7d:c6:9c:27:0c:b4:36:21:
                    39:a1:fb:42:49:64:13:4c:ac:86:43:a5:ed:0e:2c:
                    d4:36:90:14:65:97:00:e5:39:d7:73:eb:98:3a:a8:
                    79:43:d0:54:66:17:b9:f6:0b:e0:6b:09:9f:e0:93:
                    c5:39:a7:fc:62:4c:d5:bb:93:e3:e2:29:7c:d5:5e:
                    6d:78:6a:f7:0b:c2:7e:38:52:05:b3:38:c9:48:27:
                    e3:0c:11:94:14:87:f3:56:83:8c:3b:93:36:a0:b4:
                    de:5b:2c:c5:e5:51:c2:e0:6f:56:8e:4c:0c:a9:7e:
                    b6:42:f5:d7:f3:05:0f:20:61:a6:7f:a7:cc:01:2d:
                    d3:83:1a:c0:ad:29:3e:97:5b:53:f0:fc:03:9d:d8:
                    65:79:d5:6f:8e:a8:7e:83:5a:ee:17:96:4f:7e:c1:
                    c8:d2:28:87:ac:56:34:09:a7:23:90:b2:90:f3:c0:
                    f4:9f:a7:bc:fa:36:b6:bc:e4:f8:79:7e:70:d9:3d:
                    dc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:ED:58:F1:D2:DE:11:82:97:17:85:CF:34:B3:60:A5:49:EF:DF:57
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2ece0f50-5554-4285-9be2-8566d8222256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:45:06:b8:46:6a:99:c4:34:02:50:aa:9e:6c:9f:9c:ee:3b:
         1c:31:bb:0f:f2:94:4c:94:d9:83:1e:98:85:d6:79:15:89:57:
         71:91:0b:27:c5:26:3f:ba:96:57:2d:9f:85:77:72:08:e9:ce:
         27:8d:c3:9e:56:d3:e8:48:c2:59:49:56:19:82:9a:bf:af:5c:
         a4:09:d9:13:e5:52:79:14:76:40:56:18:98:99:ff:0f:67:cf:
         4e:0e:e2:a7:0e:23:bc:21:58:06:16:6e:7b:93:ba:14:47:51:
         1a:13:b1:db:8b:71:ac:ff:ab:a3:e7:94:b7:3f:8b:76:0b:94:
         ea:2f:23:63:c5:4c:6b:d1:1d:4d:a9:99:9c:78:24:c2:83:bc:
         2b:c0:37:10:db:fd:f5:bb:83:cb:17:38:28:01:47:c2:0a:4e:
         76:ab:8a:8e:dc:05:cc:2b:58:9d:7b:53:f9:53:69:59:29:fc:
         f0:fc:f0:c5:84:70:35:e6:53:c2:dc:d5:b9:c5:f2:91:ae:06:
         52:3d:2a:a2:f0:1c:ad:06:4b:2d:ad:f0:62:ae:63:2f:6b:31:
         9f:de:30:e4:10:68:90:e2:ec:1f:b0:16:07:ca:70:78:34:1b:
         8b:04:3f:46:e1:2c:54:79:9d:84:3b:ae:7f:ff:b7:0b:32:2a:
         a2:94:a9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----