Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3395dfbf-d2e5-4ee8-acc9-564b83403378.roa
File:                     3395dfbf-d2e5-4ee8-acc9-564b83403378.roa (raw, json)
Hash identifier:          ETxKO/abYXjMqPfnqj0M4ai3OK9cZs4k2EPI6WaoMvs=
Subject key identifier:   6D:50:30:72:A4:33:DB:45:5C:68:41:8D:1C:A8:AA:55:27:AA:11:39
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       064D244870DA163B4FA52D2DB68DA98AB3A53CF7
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3395dfbf-d2e5-4ee8-acc9-564b83403378.roa
Signing time:             Wed 19 Apr 2023 00:00:00 +0000
ROA not before:           Wed 19 Apr 2023 00:00:00 +0000
ROA not after:            Sat 22 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4d:24:48:70:da:16:3b:4f:a5:2d:2d:b6:8d:a9:8a:b3:a5:3c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 19 00:00:00 2023 GMT
            Not After : Apr 22 23:59:59 2023 GMT
        Subject: serialNumber=35d54da12bcc21cbffc18344661a098611a355bc97b5d8dd0c3b46430124944d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:20:38:de:87:4d:0f:29:a0:98:d6:c6:31:62:
                    00:ea:7f:c3:e1:99:14:57:8d:52:f8:02:f1:04:99:
                    14:3f:c7:88:70:46:1a:76:f9:ab:07:2d:62:6a:fc:
                    c3:54:79:17:45:3f:21:ee:dc:a2:a4:67:fe:0f:c7:
                    c8:35:7c:87:36:b9:b9:55:0e:56:73:0d:c9:bd:32:
                    f2:91:65:3b:bf:22:5c:73:ea:0c:85:f4:b8:4a:31:
                    56:fe:71:dd:bf:1f:8e:41:66:a7:85:ac:ae:b7:91:
                    a2:c0:48:85:6c:c6:b5:8c:41:4c:d8:9d:57:ce:55:
                    bb:bc:b8:fb:c8:f9:b4:5a:cb:81:48:ff:c9:9d:bf:
                    5e:64:83:00:c7:7d:aa:ec:19:85:df:7a:82:1e:d6:
                    6e:d4:52:d4:ff:75:05:6f:b6:dc:30:5b:6f:bb:1c:
                    8c:7c:84:36:4e:bb:24:82:23:58:eb:76:cd:02:80:
                    12:63:4e:40:66:ce:97:8a:87:92:c4:cb:f2:3b:75:
                    e4:6d:05:e6:06:0d:8b:a8:86:1a:40:fb:87:86:e5:
                    f2:94:bf:b0:ce:a7:83:9f:a8:07:c2:98:69:fc:a6:
                    00:69:fc:f8:0b:5f:a8:f0:41:4b:e6:3c:55:1d:83:
                    fd:1e:1c:2f:34:4e:49:07:29:ad:c8:bb:1c:a6:be:
                    5b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:50:30:72:A4:33:DB:45:5C:68:41:8D:1C:A8:AA:55:27:AA:11:39
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3395dfbf-d2e5-4ee8-acc9-564b83403378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:46:8e:f0:46:a5:95:af:b6:e3:52:4e:4c:ab:01:c9:b3:3a:
         ad:37:ca:8d:09:89:d9:c5:72:0b:b7:57:ef:c3:71:14:c5:85:
         58:f5:fb:2c:cf:b2:bc:a2:34:1c:9c:1c:53:3f:22:50:65:d0:
         76:96:7d:11:e9:a8:2e:3f:01:58:42:06:8a:c9:ce:bc:b3:58:
         20:e7:02:d6:bd:de:73:8d:46:c5:84:d5:8b:da:48:d1:99:d8:
         c8:6b:58:72:a2:c5:38:12:15:6e:e8:6d:db:92:80:75:dc:e3:
         77:6e:2c:68:87:0c:b4:4b:39:4f:b0:93:e7:63:8d:c9:60:0b:
         7d:fd:6d:dd:17:a5:f8:ae:72:ba:99:78:6e:5d:b9:5a:a0:d6:
         12:25:5e:8e:ae:f6:7e:9b:67:d8:f1:21:57:cb:d0:fd:15:dc:
         e7:cb:12:53:c1:cd:16:fc:fe:7e:0d:31:83:c2:b2:5b:28:0b:
         c6:66:69:99:ea:45:78:12:37:35:9a:28:dd:5d:3c:60:6a:c3:
         13:a7:5b:05:48:fa:61:3e:39:a6:bf:f1:10:4a:68:2c:44:ac:
         bf:78:b4:78:5f:d0:78:2b:4f:36:21:69:6a:7e:3c:bf:1c:48:
         15:5f:bf:3b:62:36:8a:44:d3:e1:23:4c:4e:53:fe:31:4a:10:
         77:ad:62:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----