Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/38b1b080-61a1-4d24-bb9c-b690a919c949.roa
File:                     38b1b080-61a1-4d24-bb9c-b690a919c949.roa (raw, json)
Hash identifier:          7fKcAx94y9DJIcS1iKRWUbi/5sXUTHhTuxbmrZnaGlM=
Subject key identifier:   40:4F:13:E5:3F:C1:89:29:97:82:DE:F5:E4:0F:DC:69:D6:AA:FB:45
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3EA5F64E8FC01DF178869B036D5BB0CF97177C7E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/38b1b080-61a1-4d24-bb9c-b690a919c949.roa
Signing time:             Thu 25 May 2023 00:00:00 +0000
ROA not before:           Thu 25 May 2023 00:00:00 +0000
ROA not after:            Sun 28 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a5:f6:4e:8f:c0:1d:f1:78:86:9b:03:6d:5b:b0:cf:97:17:7c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 25 00:00:00 2023 GMT
            Not After : May 28 23:59:59 2023 GMT
        Subject: serialNumber=61f81b6f6605e7dada1d8049157e8179ea0b380c41c8bc3ad9709d7c5aa1db3b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:40:fd:61:3f:8b:ed:ca:db:6f:e5:34:d9:d5:
                    24:6c:8f:a7:6b:36:e4:d0:f2:a8:6f:6d:10:d9:0f:
                    cb:5a:1c:3a:69:cc:51:94:9e:25:00:96:ec:3c:46:
                    ed:84:70:28:21:91:3a:8d:34:cb:04:9c:fe:f1:50:
                    46:6a:58:ac:80:c4:05:9f:a3:35:5d:0a:5b:01:1a:
                    a4:64:cf:bd:7f:07:09:bc:96:34:7e:c3:25:47:b3:
                    43:bd:23:9f:cc:ba:61:04:26:5b:c1:18:7f:4f:09:
                    70:ca:9e:f1:41:71:a1:94:fd:a3:9e:e0:49:56:c9:
                    7e:34:3b:d9:a3:46:51:ad:25:1d:92:c8:87:2f:a3:
                    48:93:86:e5:98:4e:e0:82:99:4c:4d:83:da:01:90:
                    c1:b4:28:80:78:0a:ac:83:99:8b:76:7a:0f:b1:30:
                    f6:f3:10:a6:05:4f:ac:c7:e1:9a:57:9c:36:3b:a6:
                    f4:fe:b9:d0:83:2e:25:ea:3c:0c:6e:f0:8c:67:58:
                    ea:fa:7e:bc:92:d6:7c:47:ef:f0:d2:71:27:05:0b:
                    8a:07:06:73:2a:50:a1:3d:5e:2d:9c:79:fd:83:a0:
                    a2:da:09:50:c1:9f:57:e4:93:cd:0b:82:8c:13:59:
                    f5:e1:c5:66:73:3a:92:80:2d:68:82:b7:80:3a:9b:
                    0a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4F:13:E5:3F:C1:89:29:97:82:DE:F5:E4:0F:DC:69:D6:AA:FB:45
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/38b1b080-61a1-4d24-bb9c-b690a919c949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:d3:2f:e0:c7:a4:bb:33:c9:3a:39:b2:e7:c9:50:92:b8:3c:
         ff:91:65:ef:0a:36:d2:53:22:a4:a9:6a:68:45:8f:eb:b2:1a:
         2c:96:e2:a6:50:42:59:0a:34:2d:60:d6:05:8f:c0:27:a8:d6:
         34:61:23:25:fe:f6:6d:df:e2:09:24:89:0d:69:da:67:f6:6b:
         cb:83:c9:95:d6:1f:b1:42:42:7c:56:6b:18:3c:20:56:a4:de:
         3a:43:07:42:2c:74:56:f6:a7:cd:c0:dd:80:78:5c:9d:09:36:
         ce:61:f8:ee:83:32:01:ea:2c:e9:7c:a8:9a:84:32:97:8f:7e:
         f9:cd:c9:82:87:eb:d1:38:ac:74:16:ed:49:cc:19:5f:89:bb:
         21:f1:dd:12:28:ce:d2:6f:c3:70:4e:df:70:62:a1:6b:b0:b1:
         99:37:63:db:0f:60:c7:e0:d6:09:25:29:71:b5:91:be:69:df:
         7a:9d:6f:d0:27:95:2f:28:a9:3d:7a:c8:f6:5a:c0:3d:8f:3a:
         38:5e:fc:04:db:a1:c0:e1:c0:b1:5b:72:7d:26:5e:96:d0:0a:
         63:68:c9:3a:a9:76:42:b8:2d:b9:a1:3b:5c:07:16:15:9e:b3:
         f5:6c:d8:1c:bf:39:34:cc:d2:5f:c3:69:00:eb:17:e9:c5:95:
         ad:02:8c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----