Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/587ad1f4-eb05-4f7f-8284-2ee3694d4716.roa
File:                     587ad1f4-eb05-4f7f-8284-2ee3694d4716.roa (raw, json)
Hash identifier:          KTxvDjQzZVyuCzdahIYegiVo7hRw6mDx6K+T0GBaQkU=
Subject key identifier:   C3:46:2A:5F:91:59:04:E5:E4:94:85:F0:80:FD:4A:CD:14:D4:21:58
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       58BA76AAE159FB7411E9F37D0839728451E47E5C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/587ad1f4-eb05-4f7f-8284-2ee3694d4716.roa
Signing time:             Fri 24 Mar 2023 00:00:00 +0000
ROA not before:           Fri 24 Mar 2023 00:00:00 +0000
ROA not after:            Mon 27 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ba:76:aa:e1:59:fb:74:11:e9:f3:7d:08:39:72:84:51:e4:7e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 24 00:00:00 2023 GMT
            Not After : Mar 27 23:59:59 2023 GMT
        Subject: serialNumber=1e0e8ae678bf92bb2206ce59968ede5020947459461f376eef912874df86fa82, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e6:89:4b:62:64:7f:dd:02:16:21:0c:cb:c6:
                    22:72:ac:48:01:19:ff:90:dd:c6:50:b3:98:ee:86:
                    ef:4f:c9:d1:9b:ac:71:b4:73:d7:f4:a3:6f:dd:16:
                    1d:12:51:ff:b5:87:4c:56:f2:d1:5d:c8:09:ea:bb:
                    a1:f8:e1:26:8e:47:55:52:f0:a6:dc:7f:5d:6f:62:
                    a9:4a:be:c4:bc:59:a2:94:0d:4f:6b:74:a8:c2:9f:
                    1d:ff:64:fa:35:26:0c:28:cd:a6:a4:46:43:89:9c:
                    e1:eb:9d:bd:c6:62:ce:bf:66:50:d1:ea:e2:97:f2:
                    34:a0:aa:c0:20:b6:ef:c6:1b:ba:44:cf:c8:d5:ec:
                    d4:23:75:45:91:0c:c7:25:98:c0:5e:ea:ed:c2:92:
                    db:77:ce:0c:e5:a9:49:e9:aa:b6:8c:c1:ed:9b:aa:
                    09:25:5c:77:a5:7a:ad:a4:0e:c4:bc:02:eb:71:2e:
                    b8:3e:c9:f1:f5:e6:e6:3e:53:c6:f7:cf:6a:d8:f0:
                    39:95:77:01:e4:55:4a:8c:b8:29:a2:9d:b9:c7:ae:
                    6e:0c:38:cf:77:6f:52:2c:0a:b4:b6:18:d5:ea:78:
                    b3:58:38:a2:31:e5:c9:fe:fb:5c:69:f7:71:bf:97:
                    b4:80:a9:fb:bb:9a:ff:48:cb:32:ec:2f:eb:b6:26:
                    c7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:46:2A:5F:91:59:04:E5:E4:94:85:F0:80:FD:4A:CD:14:D4:21:58
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/587ad1f4-eb05-4f7f-8284-2ee3694d4716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:a3:b6:5c:fe:b5:87:27:bb:13:ed:c6:f3:7b:22:2f:11:41:
         a8:0c:cb:ef:ea:77:6d:12:de:76:a2:8d:5d:88:5f:80:e5:41:
         04:5f:16:b6:79:53:0b:45:7d:09:44:dd:db:aa:cb:20:45:9a:
         7e:7a:28:02:d8:31:7c:85:3c:e2:36:d4:55:59:7b:4e:2a:39:
         0e:ea:c5:23:f9:5d:73:ba:47:f8:af:d3:02:10:66:4a:23:25:
         e2:ef:af:1f:3f:3b:59:c3:46:8b:4d:a4:d9:94:1b:82:09:bf:
         35:c2:4d:76:92:90:3f:0b:42:74:b3:f6:c1:7f:f5:6d:9c:83:
         a1:f9:1b:20:75:a1:a9:24:cf:49:7a:64:99:20:f6:34:6b:91:
         1d:72:c0:7d:88:eb:4f:1b:86:22:a5:02:f6:a6:f1:94:c5:32:
         32:a8:ef:e4:bf:6c:4d:e5:28:f3:85:e4:b3:47:1c:5c:1b:44:
         af:df:08:86:24:a8:56:75:7b:db:b9:8a:95:5c:c7:32:1c:09:
         bc:0a:af:cd:24:11:1a:8b:bd:30:58:3c:1a:47:44:4d:67:ce:
         6b:4b:06:28:fb:35:86:6a:53:f7:27:a8:36:a0:c0:36:d2:02:
         a6:c3:6e:e0:d8:f6:e2:05:3a:8c:ec:72:aa:6e:ac:ad:b2:6e:
         4a:2c:42:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----