Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6aa19924-37d2-4ddb-a614-edd7f56cb593.roa
File:                     6aa19924-37d2-4ddb-a614-edd7f56cb593.roa (raw, json)
Hash identifier:          TZN4UQt+vLTxeJ2C4+zL3YS+cpX4YOvm7xoT764SEtE=
Subject key identifier:   9C:AF:90:F1:9E:D5:86:9E:88:D1:AB:B5:28:DF:40:08:F2:40:AE:8F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       57913E2C00BF28F1EDF4180EC6E0B0B1665F73EF
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6aa19924-37d2-4ddb-a614-edd7f56cb593.roa
Signing time:             Mon 27 Mar 2023 00:00:00 +0000
ROA not before:           Mon 27 Mar 2023 00:00:00 +0000
ROA not after:            Thu 30 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:91:3e:2c:00:bf:28:f1:ed:f4:18:0e:c6:e0:b0:b1:66:5f:73:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 27 00:00:00 2023 GMT
            Not After : Mar 30 23:59:59 2023 GMT
        Subject: serialNumber=3193ecfda5852a2624a82c29621309acb30cd96750293538fcd1241bd831f77b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cb:7c:9c:45:90:7e:ef:4f:5c:e7:e7:e4:4b:
                    bb:45:9c:bf:53:07:22:68:84:c7:7a:97:1a:7f:bb:
                    ef:fa:48:fd:fa:10:44:51:a1:b7:fd:05:b9:b0:76:
                    6b:84:fb:52:d9:24:32:3b:47:b9:e9:b1:1b:b0:be:
                    f5:27:3d:2e:42:0e:3d:ff:43:e6:c9:1b:29:69:fb:
                    0d:f0:74:5d:d4:f3:19:d8:66:65:e8:e7:83:e8:45:
                    7b:ad:45:b2:5f:2c:01:7a:a6:a4:f9:b3:68:f9:40:
                    42:7e:a1:d2:17:f7:b8:71:b2:20:0e:56:02:dc:00:
                    7a:04:cc:3e:6f:fe:12:67:e0:fa:30:69:a2:81:fd:
                    30:9d:01:ff:8f:6d:26:fe:b0:13:dd:9b:56:ac:67:
                    0d:98:9f:c1:bb:ad:54:a9:3e:0d:5d:b8:ab:c2:26:
                    2f:dd:3f:a9:fc:30:55:55:24:5c:38:2d:55:2c:ad:
                    18:34:8b:9d:31:12:f7:81:8b:58:b7:46:36:82:59:
                    e3:cb:6b:72:d0:eb:a8:73:a4:a0:64:ab:3f:4d:b1:
                    31:a3:83:70:a8:80:00:4a:c4:d8:f7:29:0f:0a:a3:
                    6d:e3:09:12:6f:af:b8:c6:8f:b9:a6:f2:b0:55:17:
                    15:c1:5a:f7:f8:29:f9:da:f6:1d:a1:ca:70:82:80:
                    49:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AF:90:F1:9E:D5:86:9E:88:D1:AB:B5:28:DF:40:08:F2:40:AE:8F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6aa19924-37d2-4ddb-a614-edd7f56cb593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:b1:f1:8c:a6:1e:f6:30:e9:ba:e5:5e:19:9a:99:85:c2:9d:
         f7:4a:8f:d1:aa:ec:74:bd:37:52:76:db:93:04:39:e6:36:4e:
         20:c9:9a:c6:d5:a9:8a:0a:28:03:44:59:59:52:d3:b1:b8:3b:
         3b:7e:c4:68:b8:2c:a0:e5:55:7b:da:87:2f:9c:1f:45:ef:86:
         47:af:ba:46:07:a2:c1:85:a6:22:fb:a9:50:b6:ea:7b:3b:94:
         f8:bb:84:18:76:9e:29:be:b4:32:74:dd:a4:95:e1:ee:cf:f5:
         e9:51:f2:4d:4a:99:e8:1b:c4:1d:29:be:72:b7:1e:76:c0:2f:
         19:35:cb:58:ef:9d:56:6f:e5:33:7d:1e:a2:bf:4d:ba:49:3a:
         03:be:0f:0c:61:d3:7e:aa:8d:43:e9:36:45:54:62:46:c9:ad:
         5d:8c:b6:35:d8:cf:9f:66:39:02:3a:ec:e2:cf:b4:44:a7:ad:
         c9:f9:7c:e0:76:51:36:49:40:cf:14:c2:be:a4:1c:78:d9:d8:
         3b:44:66:62:57:94:3f:51:5d:7a:c8:ef:5d:8c:e8:b4:15:8b:
         81:2d:6e:a1:ab:ff:77:fd:5a:0e:cf:95:33:32:fc:f9:db:45:
         a6:a7:0f:b7:f5:46:bc:1e:91:ff:1d:a5:52:af:2c:d2:c3:6a:
         db:d9:ff:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----