Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/666ead70-619a-42ea-b5b2-7da91fddd6b9.roa
File:                     666ead70-619a-42ea-b5b2-7da91fddd6b9.roa (raw, json)
Hash identifier:          hqHD9/FR+Lqx3y/9epYJ70xIwoGxg9PLkvCswemhIqs=
Subject key identifier:   67:0E:8F:DE:C4:AF:A4:EE:35:C4:B2:53:F6:1C:25:55:89:EC:17:C9
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       69A6FC6258414432924E3EE58AB3209519689B68
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/666ead70-619a-42ea-b5b2-7da91fddd6b9.roa
Signing time:             Wed 15 Mar 2023 00:00:00 +0000
ROA not before:           Wed 15 Mar 2023 00:00:00 +0000
ROA not after:            Sat 18 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a6:fc:62:58:41:44:32:92:4e:3e:e5:8a:b3:20:95:19:68:9b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 15 00:00:00 2023 GMT
            Not After : Mar 18 23:59:59 2023 GMT
        Subject: serialNumber=28a7c14b46b4d846c72c202f4dcc6adcbe6e2c53d34654040d8f7a41c19432e3, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:8d:d1:57:d1:32:6e:ec:a9:68:45:f5:d6:
                    5a:a4:fe:8b:05:e7:a2:4b:13:ab:c3:4a:f1:e3:e2:
                    50:9d:7d:a2:00:c6:72:e5:39:3e:10:49:7f:e9:5e:
                    c0:56:98:30:1c:5b:19:a0:d3:7b:8c:51:26:3e:f4:
                    d2:a6:62:bb:1d:6b:00:07:00:52:8b:e7:7b:98:a5:
                    fd:2d:f0:0f:e1:b7:e6:2c:ac:f0:e7:33:c4:aa:51:
                    54:8a:94:3a:d6:64:84:5a:12:b7:6c:a0:43:0e:cc:
                    66:f7:79:d2:4c:d0:4b:ed:f6:f1:f7:f0:70:64:50:
                    79:71:a9:6f:88:d5:b2:6b:bb:5a:0f:df:87:f6:2b:
                    e5:e3:62:03:e6:df:b7:0b:b4:df:bf:34:50:9e:fe:
                    7b:a7:88:4a:94:7d:b3:e6:a6:52:52:fb:72:54:de:
                    c1:c0:3e:d0:5c:e5:03:5d:18:4d:2a:54:4b:10:2b:
                    42:be:b4:f9:07:67:3f:39:19:20:eb:18:06:05:a6:
                    63:53:ec:bd:65:bf:62:3c:98:16:d8:e7:3d:24:6e:
                    b0:86:49:60:04:44:1e:0a:76:cc:6e:c7:c5:de:cd:
                    1a:d7:4c:d0:04:b0:79:e6:8f:ce:42:be:bf:17:19:
                    97:96:a7:3e:25:a5:5e:1e:24:0f:89:f2:bd:6c:73:
                    67:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0E:8F:DE:C4:AF:A4:EE:35:C4:B2:53:F6:1C:25:55:89:EC:17:C9
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/666ead70-619a-42ea-b5b2-7da91fddd6b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:8f:7d:ed:de:43:fd:83:58:19:95:8b:35:dd:e0:71:4c:a4:
         1f:5c:9e:bd:93:5e:a3:22:56:50:75:11:46:78:24:32:9b:8f:
         f2:4f:a1:42:f1:72:c7:d4:1d:7b:84:63:f1:be:3d:9a:72:76:
         20:8c:44:2c:0e:56:cb:4c:5e:61:45:92:a4:29:f0:a9:b5:e7:
         77:3b:da:db:87:1f:e3:50:8c:5c:19:60:ec:10:76:d9:a9:c1:
         36:19:a5:b8:e7:94:4d:87:08:3d:47:48:d4:fd:bc:d4:cc:76:
         ae:d1:f7:15:9b:c3:3d:a0:d2:fc:11:8e:0a:a7:6e:53:23:ef:
         0e:0c:23:6a:a3:ef:97:1b:a5:86:54:d7:c6:94:cb:df:9d:e2:
         28:33:a7:1e:63:5f:08:04:97:88:82:0d:4e:1b:ec:84:25:51:
         4c:69:d1:62:f9:e4:66:c9:24:6b:36:10:73:fb:07:86:55:92:
         09:0e:eb:49:18:7a:ec:cf:9d:2d:95:2d:19:13:32:9f:7b:1f:
         86:da:50:43:c0:bc:96:13:b3:40:07:60:af:81:84:00:9f:55:
         54:2b:f6:74:b7:0f:e6:48:07:a1:b2:ef:3f:62:01:db:b3:99:
         93:b2:10:78:dd:22:58:ac:f7:03:1b:04:b9:08:6e:dc:d5:69:
         8e:2f:48:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----