Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/35a1930c-4a11-40fd-8836-1cbf1bd0aa27.roa
File:                     35a1930c-4a11-40fd-8836-1cbf1bd0aa27.roa (raw, json)
Hash identifier:          xf2G8F6oH3pMtJJdmIJpxYi8GifrPaZJ8x03zWGWEyI=
Subject key identifier:   4D:25:13:EF:3D:1E:48:DF:F3:B2:8B:90:CA:94:3B:12:DD:38:F1:6F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1608A6E2BBF5269D0BF9E0171B9EDB2D5CF4F95A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/35a1930c-4a11-40fd-8836-1cbf1bd0aa27.roa
Signing time:             Tue 16 May 2023 00:00:00 +0000
ROA not before:           Tue 16 May 2023 00:00:00 +0000
ROA not after:            Fri 19 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:08:a6:e2:bb:f5:26:9d:0b:f9:e0:17:1b:9e:db:2d:5c:f4:f9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 16 00:00:00 2023 GMT
            Not After : May 19 23:59:59 2023 GMT
        Subject: serialNumber=eeabde32d6544c602b902f6ae4c6291a098d71d9845b78f3324243c6e76cb329, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:80:a0:03:c0:48:76:a6:ba:14:b1:55:78:62:
                    6d:c3:07:75:f4:47:26:a0:04:76:6d:1e:5b:38:f5:
                    3d:a5:3a:48:4a:6c:e5:f5:cb:83:3c:26:88:65:d7:
                    e8:e6:35:fa:06:f7:aa:f0:2d:10:c0:1d:e5:47:57:
                    da:47:0b:ba:fc:da:36:5f:01:15:58:7a:c7:57:5e:
                    63:ef:0a:cd:52:e2:77:f6:d9:3b:0f:a0:56:2c:bb:
                    f5:fc:20:34:a2:a4:9a:b7:54:8e:3b:32:82:e7:14:
                    d7:a9:40:ab:0e:95:d7:8e:ef:0a:19:57:9d:a1:d0:
                    7a:4a:ba:2f:ae:b4:93:b9:99:59:ae:40:7d:85:e3:
                    dd:b2:5f:68:b9:aa:40:3c:a2:49:f2:25:6b:c2:6f:
                    18:18:4e:7e:37:7e:7d:22:c3:14:c6:bc:f0:79:32:
                    5a:92:11:6d:a3:89:18:81:22:d1:4d:cd:de:83:94:
                    d1:8d:e8:5e:7b:ff:61:62:5f:c6:5d:a6:2c:f8:1a:
                    0f:19:b7:6e:f7:b0:2e:b1:95:70:0c:31:e1:91:d2:
                    aa:e8:aa:31:4e:2b:42:f4:88:1d:b4:ec:73:43:26:
                    47:8e:25:90:e0:8e:16:e5:85:5f:7d:08:f4:ee:a5:
                    f9:d9:f6:d7:bf:f7:89:ac:f6:61:ac:61:6a:62:e8:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:25:13:EF:3D:1E:48:DF:F3:B2:8B:90:CA:94:3B:12:DD:38:F1:6F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/35a1930c-4a11-40fd-8836-1cbf1bd0aa27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:74:0c:ac:e6:ef:6a:6d:00:0b:7a:5e:88:d4:e6:9e:00:42:
         d7:96:31:2b:8e:a1:73:fd:a4:cb:d4:bd:59:e7:ac:af:c6:fb:
         c2:b2:aa:fc:01:25:1e:d4:fa:54:cb:8d:d9:2e:f8:7c:39:2b:
         d8:c2:0f:6d:e1:1a:62:73:3b:b9:ae:52:72:e0:06:c7:aa:5a:
         0c:01:8a:ff:3f:12:eb:3d:8f:e7:99:f8:ca:08:03:79:8d:8b:
         f8:64:db:0d:ac:c0:3a:be:0c:a8:ac:97:a5:91:1c:85:82:2b:
         4a:ea:a1:c8:5f:1c:1f:2e:ff:bd:74:62:65:db:99:0d:2d:11:
         3a:c3:1a:a0:8a:26:86:fb:d4:16:20:ca:1e:3c:4a:61:0d:c6:
         5c:29:51:90:f7:83:e0:f3:22:b3:07:6e:5a:cf:eb:32:38:9b:
         32:c6:59:6f:74:90:17:e5:f6:0e:a8:16:a0:fc:de:44:e3:7d:
         f9:c2:c0:0a:21:0f:d4:f0:fd:ca:74:2b:a5:be:2f:fd:82:e8:
         32:2f:11:23:3a:59:9b:92:de:86:23:c8:17:d9:ef:49:37:08:
         e6:a1:eb:22:c6:02:a1:a6:ee:a5:bb:ed:84:fe:11:84:88:81:
         f8:70:40:2b:e5:60:df:05:bf:e1:1f:5c:1d:24:c7:0e:27:94:
         f0:e2:9f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----