Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4b6c3336-1322-4f79-9db3-46a7bdb47ab8.roa
File:                     4b6c3336-1322-4f79-9db3-46a7bdb47ab8.roa (raw, json)
Hash identifier:          uQVQ78H4N3GcWcWrnh9fTXmZSKYNHnrdoaCDqYt/Fgw=
Subject key identifier:   50:73:A6:41:00:63:EE:26:37:3B:12:C8:7B:DE:DE:BE:BC:05:75:24
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6B694BFE16192DEFFF7265BB221C2E2941CD18D4
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4b6c3336-1322-4f79-9db3-46a7bdb47ab8.roa
Signing time:             Fri 19 May 2023 00:00:00 +0000
ROA not before:           Fri 19 May 2023 00:00:00 +0000
ROA not after:            Mon 22 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:69:4b:fe:16:19:2d:ef:ff:72:65:bb:22:1c:2e:29:41:cd:18:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 19 00:00:00 2023 GMT
            Not After : May 22 23:59:59 2023 GMT
        Subject: serialNumber=d372841b0f301f9847af8e66697389f67cc2f6de7e941918379c974efe64cfc8, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1a:35:bf:0a:cf:0c:0c:85:7a:d0:bc:e9:97:
                    43:f6:bf:cf:8c:9e:ef:9e:64:31:13:13:bf:cf:8a:
                    36:aa:0f:3c:15:a7:8c:8b:86:e4:a8:19:99:13:65:
                    cf:47:c5:bd:79:55:d9:9a:94:fd:3c:f9:14:bd:0d:
                    20:37:dc:72:c5:1f:d9:5c:a2:f8:a4:29:17:b0:90:
                    ad:a6:13:f2:25:ac:4d:04:53:f0:75:6c:18:c1:14:
                    fd:f4:db:8f:f1:2a:8a:52:d2:7b:12:1f:40:a4:9f:
                    00:02:7b:cb:18:8e:a2:08:08:30:02:41:15:42:84:
                    12:c0:fe:19:ea:a6:3c:73:10:c9:2e:2c:c2:7f:fe:
                    a0:d9:a9:54:f4:c8:69:47:41:02:55:f3:46:e5:4c:
                    b8:d6:ed:39:3a:cd:12:81:a1:41:86:22:9b:d1:f4:
                    ce:c7:57:92:ec:e2:bd:fd:8b:54:67:ab:5f:11:fc:
                    54:6b:ac:da:e9:68:76:2a:c3:94:a7:47:77:75:7b:
                    69:20:d8:ad:38:75:b6:c6:4c:52:9f:e6:b2:37:dd:
                    c4:14:ef:14:ae:0b:57:7e:bf:0a:6e:23:08:e3:f1:
                    89:24:1a:60:a4:10:2a:d6:c3:9c:84:33:31:8a:63:
                    7e:4d:28:1f:cd:4c:89:43:5f:3d:b0:9f:3d:1d:6f:
                    56:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:73:A6:41:00:63:EE:26:37:3B:12:C8:7B:DE:DE:BE:BC:05:75:24
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4b6c3336-1322-4f79-9db3-46a7bdb47ab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:53:d1:71:78:58:20:90:d9:15:5e:5a:04:ea:a3:15:0a:d3:
         a8:bd:af:8f:c3:e9:c1:4b:50:1a:18:22:51:33:93:cd:af:d0:
         23:6d:56:f8:15:d1:a7:c5:8e:0b:7a:b3:d8:b5:a1:56:5c:19:
         11:9a:43:f0:bc:40:c7:f9:44:98:d9:72:60:4a:37:bd:ad:08:
         7d:5b:b9:62:6d:06:72:86:99:09:2d:f1:53:c7:37:d7:77:c7:
         fc:68:1d:21:0d:c8:38:e8:6c:3d:f3:c8:34:ac:a2:ed:94:2b:
         2b:13:b4:75:8a:4f:da:21:59:e7:3b:ef:a1:31:45:fe:5e:41:
         56:d1:cb:cb:38:2e:df:6f:12:26:73:2a:6b:38:b9:7d:40:4f:
         21:92:36:35:8d:03:75:b9:22:fc:af:d5:11:81:de:3a:4e:13:
         18:f7:45:63:d3:4e:61:43:0e:35:a4:27:0e:f7:d7:b3:b5:f7:
         6c:93:86:a8:40:0a:28:93:fa:64:e1:f0:a0:d3:6d:36:79:ec:
         f9:dd:d3:5b:aa:fb:25:79:8f:03:d5:fd:af:f3:83:ff:76:55:
         68:be:c2:24:37:a0:0d:0a:6b:15:62:c0:c5:42:dd:8a:f9:07:
         2d:96:ae:21:5e:37:4c:dc:3d:d6:52:e3:c2:24:68:05:92:a1:
         30:f8:c1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----