Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4de4ad48-dec6-47a5-a101-f1d268550e2b.roa
File:                     4de4ad48-dec6-47a5-a101-f1d268550e2b.roa (raw, json)
Hash identifier:          /G96jjh0hi53F/BO+GCojs13o7Lq5xh8hgLoTc1iRsE=
Subject key identifier:   0B:7C:20:69:A9:B9:A6:7C:32:A6:71:D5:7C:26:25:AC:95:88:60:ED
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       18AE6B759127DF925CFC13E159CC2ABB34D3C986
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4de4ad48-dec6-47a5-a101-f1d268550e2b.roa
Signing time:             Fri 07 Apr 2023 00:00:00 +0000
ROA not before:           Fri 07 Apr 2023 00:00:00 +0000
ROA not after:            Mon 10 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ae:6b:75:91:27:df:92:5c:fc:13:e1:59:cc:2a:bb:34:d3:c9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  7 00:00:00 2023 GMT
            Not After : Apr 10 23:59:59 2023 GMT
        Subject: serialNumber=4c3796fefe3b6387c84420ef3ab20185bd580c1e21b30a4da8b7f730223926e6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:10:df:84:56:9e:a8:b7:cf:2a:81:92:64:
                    25:3a:0f:a1:46:04:5e:47:be:31:14:de:97:6f:65:
                    13:c9:0e:0e:80:2a:a8:01:25:26:33:af:49:23:52:
                    bb:e0:04:d5:d2:7f:9d:db:fa:a6:2c:30:f4:6a:1d:
                    7f:4c:04:c3:08:fd:77:6c:fa:c1:3f:9b:84:cd:6e:
                    d7:d1:2f:95:26:57:dc:89:2f:02:f3:f2:9f:30:df:
                    cb:1e:2a:dc:0f:d9:d3:40:ab:74:df:d8:27:e2:89:
                    7f:b3:45:0a:fa:9f:15:ee:19:24:e0:a8:eb:de:2c:
                    fe:2b:57:31:6c:fc:ba:88:95:8f:d2:5d:54:97:e7:
                    bf:bf:8b:31:13:16:ab:5d:82:8e:55:7f:14:d4:4a:
                    91:7d:67:9a:5a:5d:16:13:cb:9b:c7:30:0b:39:fc:
                    fb:c7:f9:06:ca:3d:70:3e:2d:ff:40:8f:9e:06:bb:
                    8e:37:e8:d5:1a:c6:aa:5a:36:f8:29:d7:2a:c6:b1:
                    77:32:54:00:6d:9e:ed:7d:9d:83:bb:4b:4b:3b:d9:
                    d1:82:3b:f8:27:f7:2f:d3:3f:b4:a5:71:aa:41:48:
                    3f:66:d2:c1:bb:8b:db:c0:a0:5a:94:e1:06:75:c0:
                    60:54:16:d6:4c:60:9b:3e:d4:94:76:a6:33:98:a6:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7C:20:69:A9:B9:A6:7C:32:A6:71:D5:7C:26:25:AC:95:88:60:ED
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4de4ad48-dec6-47a5-a101-f1d268550e2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:88:37:f7:41:34:09:98:70:fb:e8:71:84:bf:84:59:92:57:
         ed:78:f7:2c:b0:a6:11:e3:8c:a8:00:17:62:dd:22:8c:55:bc:
         02:87:c0:5d:de:3e:1f:35:aa:d2:ae:4b:5d:4a:fc:37:1d:9e:
         1c:ef:aa:3f:18:1a:f2:5a:4c:04:c3:67:b2:8c:20:72:27:bf:
         c1:53:e4:54:39:e8:08:fe:6d:e7:30:68:ac:97:be:ec:f6:5f:
         9a:6b:1e:c8:80:7d:64:24:fe:31:bf:76:c5:03:4d:33:9e:d0:
         cb:cc:f6:f4:ad:c1:1d:7f:92:fe:88:49:b6:cf:ad:6d:42:08:
         20:1b:c1:5d:46:e0:07:e0:ef:22:a7:b3:a1:e7:4c:ce:6a:5f:
         8f:26:ad:ea:59:55:3b:ea:b1:ce:96:44:c7:64:d2:0d:5a:93:
         50:46:e3:98:ff:73:98:81:be:58:d0:e2:42:7f:df:ff:b7:30:
         21:e9:f6:a4:06:ed:96:df:96:fb:19:ce:82:b3:5a:4e:b8:53:
         01:83:d9:75:d0:40:0a:4b:8d:5e:c1:c9:a6:67:27:06:f5:9f:
         3e:69:44:50:d5:93:ab:08:a7:d9:18:39:81:7e:62:66:2f:ce:
         a2:e8:77:d9:91:e9:fb:8b:75:e0:33:42:18:e1:e0:9d:fa:0f:
         e9:3e:5d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----