Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/47ab0041-77b7-4f38-ac9f-ef616729d511.roa
File:                     47ab0041-77b7-4f38-ac9f-ef616729d511.roa (raw, json)
Hash identifier:          vKjgZEdsYFgH2LGJHVoDfuOsb8JTUyOBuCVZ3KsD4FY=
Subject key identifier:   17:5D:F7:9D:B9:6D:9D:B2:D5:47:A2:6D:32:56:EE:0A:E1:50:74:71
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1E84EDDFB01EA29015808072CF2B99F6A27169FC
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/47ab0041-77b7-4f38-ac9f-ef616729d511.roa
Signing time:             Fri 24 Mar 2023 00:00:00 +0000
ROA not before:           Fri 24 Mar 2023 00:00:00 +0000
ROA not after:            Mon 27 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:84:ed:df:b0:1e:a2:90:15:80:80:72:cf:2b:99:f6:a2:71:69:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 24 00:00:00 2023 GMT
            Not After : Mar 27 23:59:59 2023 GMT
        Subject: serialNumber=1f6d4a3a54f66693c754305d8e664367aa1899c2a27903bf51fc622f4581f937, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5a:60:1a:8a:68:fe:81:2b:10:ee:d1:6c:a4:
                    68:c2:b2:19:1a:62:a1:73:98:3e:0e:99:02:2d:c2:
                    b3:6d:6d:d2:72:63:66:bb:07:5b:ee:10:bc:76:4f:
                    a2:47:f0:87:79:8e:96:57:6b:99:d5:c9:cf:64:66:
                    fd:d7:41:31:e3:64:8f:b9:5f:71:20:a0:cc:47:90:
                    19:53:be:cf:52:df:54:f5:90:a6:02:4c:f1:b8:14:
                    a8:89:cd:f9:97:89:6e:77:ec:ca:62:6d:69:97:0c:
                    f3:94:35:d0:4a:2d:dc:bd:2e:05:dd:98:17:8f:5d:
                    0c:ac:3e:ca:a1:ad:39:c8:24:b4:e0:bb:84:3e:ac:
                    63:06:3c:e0:b3:32:d5:09:b6:1a:b7:d8:e1:eb:19:
                    af:44:24:14:70:52:c3:80:96:cd:90:e4:d5:e7:82:
                    99:d0:12:0d:89:fb:ed:23:0a:94:a5:81:26:bf:bd:
                    db:c8:20:04:be:60:c9:68:f9:7a:d3:45:8e:a8:04:
                    fe:58:c3:c3:8f:90:a9:2c:72:e3:32:cb:ca:05:6d:
                    00:40:6a:1a:9a:06:82:16:36:92:0d:d0:9a:ee:a9:
                    8f:4d:79:e8:1b:e6:4b:43:de:70:f0:66:84:56:8d:
                    b2:1e:69:a8:9c:e8:38:c5:55:0c:43:6a:03:2a:6d:
                    2e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5D:F7:9D:B9:6D:9D:B2:D5:47:A2:6D:32:56:EE:0A:E1:50:74:71
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/47ab0041-77b7-4f38-ac9f-ef616729d511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:12:d5:37:bb:ef:7b:d8:7b:1b:c3:e0:13:e8:89:a0:7b:ef:
         4f:f6:e6:5c:43:11:25:2d:52:a3:da:75:31:6a:45:12:0a:b3:
         aa:28:26:bb:b4:bd:64:07:9b:75:7b:3e:a4:10:3f:00:16:d6:
         2c:ec:85:dc:34:cc:4c:19:b7:52:69:de:9a:d5:36:c7:7a:3c:
         22:d0:6e:7d:c4:3c:c4:e6:29:5f:2a:64:1d:0b:17:ad:1c:f9:
         4a:14:a0:21:80:0d:e5:c3:c9:ae:5d:43:9b:22:b7:fb:e9:66:
         3a:51:33:c5:4f:12:b6:97:de:74:91:49:7d:76:2b:5e:f8:2c:
         73:38:39:79:51:f9:87:cb:cd:22:14:8b:65:c5:6f:6b:b4:a5:
         b9:32:8a:f3:d2:75:b7:a6:a1:41:4d:2a:fb:56:15:1e:27:9f:
         65:4b:1d:72:76:64:ee:4f:ce:05:e0:80:d3:1b:1f:e1:96:8a:
         fd:e2:6a:b3:b5:55:9d:cb:54:5f:7e:fd:1c:27:c1:42:f3:c8:
         f4:cf:98:af:d2:74:b9:96:8c:35:69:9c:88:3d:94:60:3e:c4:
         f5:cb:f5:3d:dc:f4:4d:ad:66:6c:9b:93:3b:7c:15:04:b9:93:
         48:86:54:73:c0:a0:9b:ae:b0:76:b7:00:59:7e:4c:75:5f:15:
         3a:75:5d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----