Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6fd87ebb-ca0a-4fae-9b21-b44b1c64cc1d.roa
File:                     6fd87ebb-ca0a-4fae-9b21-b44b1c64cc1d.roa (raw, json)
Hash identifier:          j9i+rohKcRE+49SokAgFS8NdTQSxt+C3+NKDnY3huWo=
Subject key identifier:   55:1A:71:42:A7:4F:84:60:4F:70:3A:B9:FD:81:03:78:E3:86:DD:58
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       111941AE565D5EE6D41918231114C5FB6F75312C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6fd87ebb-ca0a-4fae-9b21-b44b1c64cc1d.roa
Signing time:             Tue 21 Mar 2023 00:00:00 +0000
ROA not before:           Tue 21 Mar 2023 00:00:00 +0000
ROA not after:            Fri 24 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:19:41:ae:56:5d:5e:e6:d4:19:18:23:11:14:c5:fb:6f:75:31:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 21 00:00:00 2023 GMT
            Not After : Mar 24 23:59:59 2023 GMT
        Subject: serialNumber=e740fbbb930f36c98212e6eb44b264674df898579ae4cd1adce665611eaec6be, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:09:1e:3d:08:53:03:c4:d3:1c:ae:eb:39:fe:
                    e5:ea:cc:19:c8:d7:ea:32:ae:f2:c2:b0:34:10:99:
                    bd:38:9f:8c:1e:4a:f4:06:b2:84:e8:d2:75:a0:5e:
                    25:07:ab:46:a3:d1:20:ee:76:41:99:f8:ee:f8:32:
                    7d:fe:bd:60:a6:0a:31:9e:60:b1:9c:cb:22:ec:ca:
                    51:65:17:0c:a2:7c:d7:25:bd:45:9f:da:17:4c:41:
                    87:3e:fc:bd:bd:51:e5:4b:dd:5c:de:52:d7:83:4d:
                    1e:3c:7a:14:78:34:65:e5:15:9d:63:f5:d6:bc:1a:
                    65:ba:ee:81:b1:15:ed:87:bf:51:5c:3f:58:e6:82:
                    89:e2:6e:ca:db:e1:69:6f:b0:2a:7e:a8:9c:7f:8a:
                    37:1e:22:49:f7:10:17:bd:21:92:37:36:cf:51:18:
                    f9:a5:bd:41:de:b8:6a:38:61:15:62:2f:5e:21:bd:
                    5e:ed:a7:92:c0:17:24:f8:6f:b9:e1:1e:ab:a4:4e:
                    4b:59:f1:ea:2b:84:1c:49:7c:23:7e:e4:02:1b:9a:
                    6b:e7:d4:af:18:85:b9:b1:74:61:89:3e:ad:b8:14:
                    18:49:4b:ea:a3:ef:b6:fd:1c:a2:4c:f0:5b:9d:b1:
                    87:70:2a:79:21:ee:67:3c:f4:8b:5c:9a:5a:ef:28:
                    4e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1A:71:42:A7:4F:84:60:4F:70:3A:B9:FD:81:03:78:E3:86:DD:58
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6fd87ebb-ca0a-4fae-9b21-b44b1c64cc1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:63:17:cd:65:54:1b:64:74:cc:29:b0:56:0c:a7:c4:a8:24:
         ad:77:3f:cc:fd:36:b8:b4:d5:73:9c:df:2e:18:d6:f5:2b:45:
         8a:dd:ee:3d:62:6a:4b:01:f1:c3:f5:5e:3e:cc:1f:18:c3:87:
         8f:44:cf:1a:b2:28:8d:bd:d1:fb:a2:5c:d1:0d:b8:b9:62:a3:
         44:d5:71:ad:a0:ad:1f:df:48:da:b7:4d:33:56:c0:39:93:9b:
         bf:99:c6:df:06:ea:29:ed:57:fd:cc:30:f2:14:b8:82:c3:66:
         2c:65:07:6d:b9:dc:46:d0:29:4d:ac:d8:8a:c3:a4:70:1f:ba:
         0e:08:22:61:4c:76:f1:ec:10:1b:b6:0c:d5:07:f1:c2:23:93:
         71:69:a5:df:eb:d8:00:1a:22:44:52:53:35:90:54:6b:7a:c6:
         d8:3b:cf:1b:8b:2f:6d:8f:d0:b6:39:d7:00:08:bf:15:1f:bc:
         62:52:f3:24:ec:e7:2a:bd:1c:21:20:01:0c:b3:7c:96:7b:df:
         79:9f:ea:f7:b3:e4:fd:79:dd:b8:d2:5c:b5:f4:5c:4e:9a:8a:
         5e:e3:ad:d8:c9:f3:eb:6a:6b:fd:4d:50:37:82:a3:f8:f1:d3:
         99:4a:77:7d:fd:0f:09:00:20:8b:b3:0d:85:e4:09:51:69:b4:
         e6:2f:08:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----