Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/69cb9229-7937-491c-b4ec-8505b3b51a64.roa
File:                     69cb9229-7937-491c-b4ec-8505b3b51a64.roa (raw, json)
Hash identifier:          4EtF+DEKrUwzKfqr8/14/t1rXiRifQIEI6KCZ5/GZM8=
Subject key identifier:   44:51:C6:76:0E:58:84:7F:84:F4:B4:F8:12:01:88:CD:C3:69:86:C1
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0DBEBAA4A607391B99FEC60ACE83F2D6191D1E55
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/69cb9229-7937-491c-b4ec-8505b3b51a64.roa
Signing time:             Sun 07 May 2023 00:00:00 +0000
ROA not before:           Sun 07 May 2023 00:00:00 +0000
ROA not after:            Wed 10 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:be:ba:a4:a6:07:39:1b:99:fe:c6:0a:ce:83:f2:d6:19:1d:1e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May  7 00:00:00 2023 GMT
            Not After : May 10 23:59:59 2023 GMT
        Subject: serialNumber=8f95b9d41ce821044bb36f7031d99c8e6c7078fdb0b056b07758fae219511613, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:29:39:c3:33:81:e0:6a:b8:72:d8:3e:2d:64:
                    73:1e:ff:21:d7:a5:1b:3a:3a:25:93:30:23:32:98:
                    d1:87:dc:97:6b:0a:e9:76:e4:bc:80:07:b8:5e:de:
                    ab:f7:e3:3b:f7:64:92:99:98:a0:cd:f8:6c:07:04:
                    ba:d4:3a:0a:ee:2b:47:0c:3c:f9:a0:ab:4b:8c:c5:
                    83:86:aa:dd:e2:cf:a1:48:4f:ca:93:3b:43:7d:a7:
                    55:ce:08:ba:fa:1c:f6:ee:5b:6a:ba:8e:96:ba:b9:
                    4a:e2:f4:40:e7:de:dc:e4:b4:50:5f:67:22:37:5c:
                    e6:d4:c6:47:ff:21:b9:0e:65:35:cb:df:27:b0:11:
                    d4:db:19:b7:36:ed:4f:86:d7:69:05:78:23:ef:be:
                    1b:45:0e:e1:fe:72:de:fa:50:ca:0f:74:ba:e7:ef:
                    f7:68:b1:97:fb:8a:d0:ad:99:64:b1:e3:4d:20:7b:
                    95:8e:a4:7f:9d:70:b2:98:12:4e:bc:b1:f3:e2:00:
                    21:c5:83:4e:9e:bb:42:4d:5a:0f:04:80:3f:67:87:
                    c7:d5:a8:17:86:5f:ed:84:4c:70:dc:da:d4:02:78:
                    3a:15:8a:be:9e:51:34:13:3e:8b:65:4d:4f:d4:fe:
                    eb:08:5a:65:14:76:db:4f:2f:a4:62:d6:d8:ee:c7:
                    3a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:51:C6:76:0E:58:84:7F:84:F4:B4:F8:12:01:88:CD:C3:69:86:C1
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/69cb9229-7937-491c-b4ec-8505b3b51a64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:cb:97:ad:68:61:5a:cc:b8:25:45:02:07:b4:5e:59:4d:c9:
         03:9d:d0:0f:bb:ad:61:ac:45:8c:f9:08:ce:51:d1:d3:ff:0f:
         fb:d0:20:ca:72:52:72:8b:65:dc:36:75:2a:99:bc:2e:6e:8c:
         cb:2a:46:98:3d:cf:f0:cc:97:cb:71:78:ab:57:f5:81:aa:fb:
         26:26:e3:7e:f0:5e:23:43:7c:68:c5:ad:08:64:c2:f0:c5:b4:
         f8:76:9d:9b:95:5d:64:fd:0d:62:19:86:7e:20:97:80:e1:fa:
         bd:83:6c:0c:8c:2d:54:05:8c:b3:c2:54:41:57:0a:55:0a:24:
         43:38:dc:ad:66:05:43:6c:ba:20:0f:17:75:45:db:0d:d5:cc:
         df:7a:32:e2:12:d2:73:5a:aa:e8:da:16:70:49:df:f9:cf:23:
         8b:00:a3:44:de:79:78:68:3c:ae:0b:64:2c:ea:14:23:fb:a6:
         40:4f:e7:65:4d:62:8b:1b:a5:a1:d0:64:b9:f9:c7:20:3f:30:
         3c:fb:f4:69:4e:7c:c0:6e:28:fc:58:45:66:a7:97:8c:8b:ef:
         cc:d7:5e:70:e2:2f:fa:1d:ef:f2:01:44:7a:5f:5d:33:45:ed:
         23:a5:b5:a7:43:f1:aa:85:b8:b3:b9:d9:d9:37:4b:61:37:75:
         54:28:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----