Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3e8cadfb-004a-49d2-9b9b-e29ab87cccfa.roa
File:                     3e8cadfb-004a-49d2-9b9b-e29ab87cccfa.roa (raw, json)
Hash identifier:          G/4l0K0nKPch4zikAPRWWWH9d79iEQ2k+l7/J1XUibI=
Subject key identifier:   15:0D:3A:CF:54:F3:D9:C4:9F:6D:DB:CA:15:C3:48:80:1D:48:46:A0
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4CFAF7A2328FC0EBC8533A3622E2ABFB006733A0
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3e8cadfb-004a-49d2-9b9b-e29ab87cccfa.roa
Signing time:             Fri 21 Apr 2023 00:00:00 +0000
ROA not before:           Fri 21 Apr 2023 00:00:00 +0000
ROA not after:            Mon 24 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:fa:f7:a2:32:8f:c0:eb:c8:53:3a:36:22:e2:ab:fb:00:67:33:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 21 00:00:00 2023 GMT
            Not After : Apr 24 23:59:59 2023 GMT
        Subject: serialNumber=57790d630e50f70cacb241a172b4a81226c569e132171355351dadf61b46a570, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:97:e9:9a:02:d3:15:f0:53:7a:8f:cd:d7:
                    36:12:f8:c2:4a:72:50:fc:8c:a2:54:46:0a:a1:b0:
                    60:b5:d6:ca:60:56:b0:f1:fc:aa:54:ec:d2:53:e9:
                    36:f4:6e:b6:36:c4:18:92:45:13:2c:e6:e6:24:e6:
                    72:9d:8e:0b:ca:3a:8f:1b:8a:67:05:3e:a9:bd:8b:
                    23:c1:44:75:b9:e0:97:df:a2:df:f3:28:3e:ff:f1:
                    c5:07:f5:a2:39:e3:f1:24:1a:63:1d:e4:84:d2:9e:
                    41:f1:ae:3a:8b:42:af:1c:a1:58:8e:11:21:21:57:
                    70:eb:d0:49:96:5a:f4:16:be:00:cb:b9:c9:bc:dd:
                    be:80:33:4d:8b:d4:63:ae:72:ff:f2:f7:f7:cf:39:
                    4c:61:9e:18:31:3b:93:57:a5:83:ac:27:dc:8e:76:
                    31:d4:42:18:13:06:1f:f5:1d:be:4f:38:4f:22:27:
                    0c:a8:1e:5f:d1:8e:74:76:46:ae:f4:27:6a:39:5a:
                    87:42:f3:0b:f2:6d:83:5c:21:53:ca:07:17:be:c5:
                    df:58:f6:bd:25:6a:6b:46:35:3f:00:13:0f:57:b5:
                    98:9e:d5:ce:bb:54:09:33:14:76:2a:05:36:2b:02:
                    20:de:76:98:f6:da:bd:62:42:13:06:23:16:2f:00:
                    6f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0D:3A:CF:54:F3:D9:C4:9F:6D:DB:CA:15:C3:48:80:1D:48:46:A0
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3e8cadfb-004a-49d2-9b9b-e29ab87cccfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:94:41:71:dd:73:0f:70:a5:45:09:bb:33:95:b3:41:c2:c3:
         59:3a:42:9c:4d:a5:28:f6:61:ce:02:41:ee:49:2e:84:87:c3:
         ca:34:2a:da:5d:25:c1:34:d5:b5:f2:f5:07:34:52:67:08:eb:
         16:ea:02:da:15:0d:e5:ca:06:d2:fc:83:67:da:5b:13:4b:7a:
         c7:13:9c:bd:42:95:41:47:96:26:40:62:8b:60:bc:cd:53:55:
         53:89:ea:5f:8a:2b:52:34:95:e2:d6:06:51:c1:23:d0:09:47:
         aa:c0:13:0b:80:fd:95:b7:ac:8e:e5:1a:3e:d1:2a:1a:df:27:
         91:fc:04:ec:c7:9a:ab:97:db:3b:fd:9b:49:67:d9:b5:be:de:
         86:81:91:b7:26:b1:40:17:b5:ef:17:17:e6:b4:cc:47:d5:70:
         8a:da:eb:30:8d:4c:af:85:c7:dc:69:ad:c7:72:d4:07:5e:96:
         70:c1:57:a5:44:3b:ae:29:c3:31:fb:75:e9:75:5c:3d:8e:db:
         cc:0e:d4:9e:fb:f6:9e:87:2a:62:c3:9a:46:21:36:7e:25:39:
         e2:1f:b3:0f:bc:fc:97:91:df:10:6e:63:3a:1c:70:0c:d1:e7:
         33:8b:b5:41:f5:29:7f:75:d5:96:1b:95:79:16:2a:90:ca:2c:
         88:cf:b6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----