Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4c737c56-6f14-487e-9fae-7f8a1fea4bb8.roa
File:                     4c737c56-6f14-487e-9fae-7f8a1fea4bb8.roa (raw, json)
Hash identifier:          1NzKPBfh0V/3spxm/Dn3XcOKpom5DwQLnTjjbdrML3o=
Subject key identifier:   46:D9:F7:1D:36:5D:D1:48:77:8C:CF:08:CD:54:0D:88:69:5F:BC:9B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5730B3227311A543E1BC2C9CE4A0332A537C1BE4
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4c737c56-6f14-487e-9fae-7f8a1fea4bb8.roa
Signing time:             Wed 24 May 2023 00:00:00 +0000
ROA not before:           Wed 24 May 2023 00:00:00 +0000
ROA not after:            Sat 27 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:30:b3:22:73:11:a5:43:e1:bc:2c:9c:e4:a0:33:2a:53:7c:1b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 24 00:00:00 2023 GMT
            Not After : May 27 23:59:59 2023 GMT
        Subject: serialNumber=0dcca46677b98523a6208cc3bef994db5ad6fdb803c2adc95e80497425797c5d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:1d:f1:11:f7:a1:a2:f1:b6:84:50:bf:46:
                    7c:1d:2b:b4:05:42:ed:47:4b:9d:cf:99:56:bc:07:
                    b7:6a:fc:cf:e0:8b:b6:bb:fd:f3:1e:1a:b2:d2:05:
                    78:1f:53:5d:c9:aa:fb:c7:09:df:69:d3:47:4e:b3:
                    71:b9:a1:06:5f:2d:fd:86:22:71:6a:67:22:dd:97:
                    a8:6b:3a:80:d0:e8:13:ab:16:cf:76:1d:f2:ad:01:
                    19:52:38:d2:7f:1b:9f:7c:f7:69:25:77:15:86:e0:
                    ac:2c:73:66:91:99:89:77:0c:e1:37:89:7e:a0:12:
                    9d:ee:ac:4f:b4:86:e0:34:b2:bf:f3:45:c8:18:96:
                    d2:a9:38:72:af:a4:f9:a4:13:ad:b5:d0:fe:37:e4:
                    51:75:23:fa:5d:6b:22:28:99:21:29:a5:ae:ed:d0:
                    b8:21:80:40:2b:02:3c:b2:a5:f5:d2:0e:09:81:2b:
                    1b:f2:6b:34:76:0a:54:01:13:ef:94:af:4c:d1:89:
                    f1:70:f0:55:93:6e:22:1f:ec:fc:9e:70:49:15:03:
                    7a:7b:61:18:8a:8d:dd:a6:8e:9f:71:3a:92:1e:55:
                    f9:1d:26:d5:ad:bf:9e:a1:03:ec:2b:39:ba:c9:66:
                    42:69:60:b6:9c:38:fb:ff:bc:97:dd:d0:3a:00:11:
                    64:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D9:F7:1D:36:5D:D1:48:77:8C:CF:08:CD:54:0D:88:69:5F:BC:9B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4c737c56-6f14-487e-9fae-7f8a1fea4bb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:b3:e3:77:9a:bd:28:17:f7:37:7a:da:64:d0:fa:96:cc:fb:
         49:16:d5:f9:8e:a0:ca:21:e9:64:93:3c:97:81:c5:c7:94:c5:
         43:fe:7f:04:52:d6:4b:f1:64:85:a2:0e:ca:e7:20:1a:9e:f7:
         b6:34:77:89:34:db:fd:aa:2c:bf:0e:a7:7b:bc:40:d6:10:9e:
         d8:45:50:c3:55:88:6b:6e:3d:a7:29:84:0d:14:7e:37:32:f4:
         2d:f9:89:93:d3:eb:8b:f0:75:e1:bf:83:b3:af:83:aa:4e:76:
         8d:39:32:c0:b7:39:b2:0b:a5:fb:0c:30:4c:33:8e:1d:77:ed:
         8b:f4:00:53:3b:10:a8:d3:44:e2:ba:06:5a:e0:f9:ee:53:0d:
         94:7a:48:fe:7a:1a:40:86:5c:f9:af:1d:4d:22:c2:dd:8e:5b:
         e8:aa:5b:25:ce:f3:52:86:82:12:18:c2:38:44:76:05:18:b5:
         09:86:b1:37:85:33:a3:8e:15:76:e2:f7:41:86:1b:0b:f9:16:
         dc:5e:36:cb:b8:3d:f3:bb:fe:0d:77:f0:3c:94:92:e2:2e:b0:
         38:78:de:89:a4:38:53:57:92:44:3e:c7:a5:c8:22:a5:fd:82:
         a8:d7:68:89:60:76:50:79:6f:d4:6f:46:30:b1:47:4f:52:6e:
         94:a9:a0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----