Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/53086a4b-54fe-4b75-ba63-a795ab13975a.roa
File:                     53086a4b-54fe-4b75-ba63-a795ab13975a.roa (raw, json)
Hash identifier:          Bca6iclvbmIDR09I0SlOYRnJieETsmvyjPDWH//MHac=
Subject key identifier:   F1:EC:AA:2D:45:BA:95:E7:D6:2D:C8:D5:90:0A:99:52:27:23:90:5D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6BF7AC2948BEADB8C01E071B283FF8940C2234FD
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/53086a4b-54fe-4b75-ba63-a795ab13975a.roa
Signing time:             Thu 11 May 2023 00:00:00 +0000
ROA not before:           Thu 11 May 2023 00:00:00 +0000
ROA not after:            Sun 14 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f7:ac:29:48:be:ad:b8:c0:1e:07:1b:28:3f:f8:94:0c:22:34:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 11 00:00:00 2023 GMT
            Not After : May 14 23:59:59 2023 GMT
        Subject: serialNumber=557496f5adf3905ee919895476a43c4cb4cdef5184b34e4977562a6b7ebc877b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:bc:07:93:ac:73:a5:25:d3:e0:6e:1b:80:
                    94:05:1b:29:bf:15:f5:65:a7:85:8c:ec:7b:27:53:
                    1b:ac:ab:a9:76:9e:47:07:bb:9c:be:aa:c4:a2:4f:
                    c7:c6:e1:24:82:b5:30:34:20:74:43:4f:e0:9d:19:
                    38:a9:87:73:86:18:db:34:5a:5c:70:4c:d3:58:77:
                    a7:3d:2d:0f:c4:89:5c:50:64:34:58:06:ec:36:ac:
                    4b:f1:78:59:4c:5b:60:e0:ac:80:74:d3:4c:32:19:
                    ef:5d:e5:f7:e1:8c:90:6b:a5:8d:82:13:8f:01:2c:
                    12:5c:84:aa:71:bc:cb:57:ad:9b:ff:b3:5f:41:19:
                    8e:4b:ae:54:66:5a:48:df:94:3d:8c:59:70:0c:a5:
                    98:0e:56:fa:e7:e5:8a:c1:b4:cf:b3:08:2f:9a:e0:
                    a7:ae:3d:f0:2e:41:e5:8b:0c:0c:fa:61:a6:c9:66:
                    a6:c2:b3:26:28:91:ac:0b:67:68:87:b6:7e:8f:45:
                    8d:67:1e:c4:d4:91:4f:8f:00:15:f7:a0:a8:ed:84:
                    ef:9a:e7:ab:9d:87:82:a1:b2:09:58:f0:16:e8:a3:
                    24:25:f6:3c:21:7c:2e:e2:06:28:dd:15:06:f4:46:
                    a3:8e:39:0a:a4:58:68:3b:c7:35:49:ab:a5:3f:8b:
                    21:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EC:AA:2D:45:BA:95:E7:D6:2D:C8:D5:90:0A:99:52:27:23:90:5D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/53086a4b-54fe-4b75-ba63-a795ab13975a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:89:ea:26:8a:e5:0a:34:cb:83:71:f5:67:db:3c:e9:8a:8b:
         d0:7c:4c:c0:90:8f:5c:4e:c1:9f:c4:2a:19:3f:5e:d8:6d:7a:
         74:0c:62:40:52:23:df:24:31:61:82:0f:8e:26:bb:7c:49:9e:
         07:8f:7f:59:2b:59:f9:38:ba:63:d0:ff:d1:b7:e9:73:6a:22:
         4b:79:30:25:58:c4:37:21:3d:1b:e0:bb:7a:d2:75:a7:d5:c3:
         38:ec:ce:a0:a1:c7:84:16:05:89:4c:88:16:20:39:8d:7f:71:
         17:9c:db:35:e2:d3:33:71:fa:ef:38:eb:95:80:ab:32:d0:97:
         66:ee:13:cb:b4:ad:bd:ec:e6:59:aa:a7:d0:ed:af:19:30:a2:
         0b:6d:ea:5e:17:a2:08:9a:8f:ab:3a:6f:6c:ab:f2:ed:58:ba:
         87:c9:2f:22:2e:01:04:e3:7c:7f:96:35:ee:3d:c4:b3:5f:5b:
         6a:7b:7c:a9:cc:5c:c2:2c:a2:9c:0a:64:13:0f:2e:c2:40:3a:
         e5:a3:2b:09:99:c6:dd:d5:cb:96:73:c0:08:90:51:7d:23:cd:
         43:cb:73:42:b5:23:2b:f4:fb:5f:58:ac:51:d6:f1:97:38:2c:
         01:e7:c0:ed:e1:93:dc:9b:ea:df:97:1f:d1:51:94:82:08:b6:
         88:4f:cd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----