Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2f85b60d-bcf6-47fd-931b-e2ab84118ea2.roa
File:                     2f85b60d-bcf6-47fd-931b-e2ab84118ea2.roa (raw, json)
Hash identifier:          fXvhdYQwbzyQciHDY4cBOnB5SiHrWlReLBjKDppxSpY=
Subject key identifier:   56:E9:D6:CF:CC:6E:53:3A:54:F9:AD:B7:8E:40:45:6A:89:9C:4A:89
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       29625FDB375108B99648331D67644F674DD817FA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2f85b60d-bcf6-47fd-931b-e2ab84118ea2.roa
Signing time:             Fri 03 Mar 2023 00:00:00 +0000
ROA not before:           Fri 03 Mar 2023 00:00:00 +0000
ROA not after:            Mon 06 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:62:5f:db:37:51:08:b9:96:48:33:1d:67:64:4f:67:4d:d8:17:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  3 00:00:00 2023 GMT
            Not After : Mar  6 23:59:59 2023 GMT
        Subject: serialNumber=b609131d19a83b2a4d9e926e2d9e25ede3efa5c8a2b6a801bccd86f9ef45ea62, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:84:78:0f:27:8b:57:41:05:cb:a9:aa:83:
                    40:95:ba:01:58:be:4d:e6:d8:e3:82:4c:04:b6:54:
                    d4:fe:98:45:e7:cc:19:df:61:d3:7e:ea:0b:f3:8e:
                    56:72:ec:c5:cd:37:59:7a:21:58:75:fd:2c:21:e5:
                    0b:46:f6:b8:4a:e8:a5:66:c9:6e:b1:71:50:ee:d6:
                    47:d2:4e:3f:f4:21:d9:87:7e:36:f6:33:07:98:4d:
                    22:80:69:e4:91:b1:60:f9:f8:54:2b:61:b5:6d:ef:
                    13:bc:7a:9b:c2:36:e6:81:70:76:6e:50:d3:e4:75:
                    38:8c:6b:de:69:d2:57:3f:03:cf:3f:c8:37:d7:09:
                    d1:0e:72:01:93:76:33:76:53:a3:48:15:79:33:3e:
                    62:62:40:49:25:3e:a1:92:9e:0b:4a:99:f9:c5:5d:
                    61:3c:6f:bb:66:f7:cb:a1:9c:9e:22:c7:4f:ff:5f:
                    3a:24:a2:92:50:14:3c:67:2d:00:f2:72:f1:e2:b2:
                    1e:2f:36:5e:80:5b:96:44:dc:0a:14:87:df:56:a0:
                    ad:d0:b3:3d:34:72:2a:c0:07:2c:1b:37:22:15:50:
                    fa:9c:fc:a3:ec:3e:0f:1c:f2:f6:85:5d:cb:17:16:
                    67:7c:90:c7:42:ea:7d:e4:53:21:8b:5c:47:50:11:
                    a9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E9:D6:CF:CC:6E:53:3A:54:F9:AD:B7:8E:40:45:6A:89:9C:4A:89
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2f85b60d-bcf6-47fd-931b-e2ab84118ea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:ec:46:a7:37:c9:de:8e:0e:e5:b4:c5:af:25:2d:2a:93:a1:
         8c:5b:d1:d1:9d:56:4c:1c:b9:14:42:07:09:e4:1b:27:a7:c7:
         bc:5d:eb:51:e3:20:33:e9:86:f9:a1:1c:d7:a9:6d:bf:54:a1:
         5e:99:f0:d7:6c:6f:f2:64:54:63:13:cc:8b:50:80:ad:3b:93:
         28:79:c6:53:86:53:0a:4e:70:30:b7:23:bb:d0:58:b9:1c:88:
         02:ca:29:9d:ac:1a:e8:1f:e3:8e:e8:60:f2:87:dd:39:11:c0:
         cf:ac:4f:28:ed:2a:04:1b:b0:9a:ad:fc:da:e0:f1:c0:be:bb:
         f8:26:cc:8c:5b:b5:3f:4d:de:13:50:5c:b3:4a:d0:0b:86:78:
         e9:df:d3:f6:06:89:73:25:e3:c9:81:96:4a:bb:70:4a:a2:cd:
         49:74:fb:1e:f0:c5:33:8f:51:fc:01:aa:f4:a6:e4:e7:4f:27:
         32:a8:86:b7:c3:db:eb:fe:53:6b:50:02:ff:97:6c:d3:4b:8c:
         d1:d7:05:a9:75:d8:40:38:cd:53:84:8c:61:6f:77:03:45:cf:
         d4:87:43:4c:bb:53:90:f6:da:5e:b6:cd:45:7c:e8:28:fd:0b:
         a3:a5:f4:3d:36:e0:af:68:01:41:8b:33:f2:43:ac:d7:5a:af:
         dd:12:6e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----