Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/54d26aad-2838-4e9e-9a78-3b653bc3a7a5.roa
File:                     54d26aad-2838-4e9e-9a78-3b653bc3a7a5.roa (raw, json)
Hash identifier:          up49DwkXxosAiQQtUiB4O8nWcxy41uag44JlrY0cCpw=
Subject key identifier:   13:1C:15:6E:A1:6C:1D:72:D9:D9:9F:57:D0:5A:B8:4F:AB:09:88:06
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       013724C3542B6DBF1CD9EF3E133B18BD742497B9
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/54d26aad-2838-4e9e-9a78-3b653bc3a7a5.roa
Signing time:             Thu 16 Mar 2023 00:00:00 +0000
ROA not before:           Thu 16 Mar 2023 00:00:00 +0000
ROA not after:            Sun 19 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:37:24:c3:54:2b:6d:bf:1c:d9:ef:3e:13:3b:18:bd:74:24:97:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 16 00:00:00 2023 GMT
            Not After : Mar 19 23:59:59 2023 GMT
        Subject: serialNumber=2abfc2cae28a99fd2b2071d24f81143f1a56630d337196a54e707f0292592e4e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a2:c7:ee:5a:68:1a:8b:51:52:9a:ee:75:2a:
                    7e:90:69:66:c5:d9:32:2c:3e:24:07:df:5f:0e:80:
                    56:53:e0:e8:92:72:48:85:da:40:cb:00:7e:90:c7:
                    cd:c5:06:d9:0a:eb:f7:d1:4a:bf:23:85:c7:cd:d2:
                    ef:da:db:ed:a4:38:46:9b:89:41:cc:a4:87:03:6b:
                    8d:2a:2b:1c:ae:5c:94:6c:f3:89:ce:2f:71:db:d8:
                    57:0a:c6:e2:5d:e5:d5:d9:f0:bf:b2:d7:0b:57:1d:
                    bd:47:fa:5c:b6:ae:07:3b:7a:b2:44:92:13:50:f5:
                    f5:5d:25:dd:f9:33:f3:30:05:8f:90:a1:57:d4:4f:
                    1c:ad:62:a7:ae:87:5d:1f:99:ae:ff:60:d9:38:7d:
                    29:a4:93:63:1f:27:23:70:94:85:be:be:77:3e:d5:
                    59:8e:06:5c:73:c3:ae:b8:05:e7:46:77:0b:ae:96:
                    eb:89:47:45:e5:bd:ef:27:9a:63:77:36:60:13:45:
                    02:b2:ad:f9:14:df:93:6f:00:d2:ac:fa:5a:2a:fa:
                    c2:e6:3c:61:d1:4c:47:1f:cd:de:b6:2c:c4:7d:cf:
                    00:f0:8c:6e:ae:f5:73:8d:51:32:6a:a4:9f:b2:15:
                    32:a8:58:2a:63:3f:3a:72:68:6e:62:fc:29:1c:ff:
                    97:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1C:15:6E:A1:6C:1D:72:D9:D9:9F:57:D0:5A:B8:4F:AB:09:88:06
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/54d26aad-2838-4e9e-9a78-3b653bc3a7a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:80:6d:4e:a4:be:ca:88:67:35:d6:4d:4c:50:1e:3b:85:2f:
         c6:1b:07:15:6d:10:ad:ae:2d:6a:a3:95:ad:10:0d:a7:73:d1:
         1f:41:9b:ce:55:a8:fa:7c:b1:d1:85:bd:21:d8:d2:4e:8b:ef:
         21:fc:26:6d:d1:70:1f:6a:26:f1:87:0c:0e:d2:46:3d:fa:95:
         27:1a:d4:84:29:74:31:6f:b7:96:4a:50:58:98:30:1a:29:bc:
         4a:8d:06:b4:bc:d9:43:58:e3:4f:15:ba:3a:83:48:05:8f:4d:
         15:d3:ec:10:77:da:0a:48:9c:82:a2:1e:5e:03:82:9d:74:01:
         1c:92:54:3b:84:7e:43:39:e9:64:96:c2:f4:f1:8f:e7:04:9f:
         32:99:8c:4c:2d:58:7c:c4:ba:b7:89:48:83:e3:a8:6e:40:11:
         99:3d:cd:c9:47:7f:1b:2e:f6:b3:cf:2a:21:c5:b5:ba:e8:f4:
         83:39:e1:77:ea:8a:63:36:9c:35:3d:4f:3f:de:a4:18:19:dd:
         87:c0:79:2a:76:d8:0f:70:87:23:da:38:a5:4c:e2:d1:a9:21:
         dc:24:be:20:db:e9:52:41:54:d6:25:d8:d8:28:83:6e:32:7d:
         fb:f5:07:29:c8:fc:d7:be:7e:fa:10:dc:1c:2f:61:20:2f:6b:
         67:70:11:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----