Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/706c668d-c343-4693-9f0b-8c47022f3529.roa
File:                     706c668d-c343-4693-9f0b-8c47022f3529.roa (raw, json)
Hash identifier:          LGpuRPNBAUr3D2c45Q/E8EAF22nTKl/wf/FsAUEIAPM=
Subject key identifier:   7E:F8:41:1F:00:98:84:C6:97:34:BA:4C:EB:CA:04:F6:01:43:B6:12
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       15142D6C0FE3B37A6982A3629F609A3FB659984A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/706c668d-c343-4693-9f0b-8c47022f3529.roa
Signing time:             Wed 24 May 2023 00:00:00 +0000
ROA not before:           Wed 24 May 2023 00:00:00 +0000
ROA not after:            Sat 27 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:14:2d:6c:0f:e3:b3:7a:69:82:a3:62:9f:60:9a:3f:b6:59:98:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 24 00:00:00 2023 GMT
            Not After : May 27 23:59:59 2023 GMT
        Subject: serialNumber=f4593340eac8ab293c757344020f23e710087937b570759aa826a6d0efbe8c8f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:54:b5:89:c2:7a:65:99:94:fc:92:cc:0e:
                    e2:40:8a:c7:4f:8f:cc:45:4e:6b:d1:bf:bf:b7:00:
                    97:1a:fc:d8:4f:d2:d5:68:48:4d:ae:ec:86:50:ba:
                    8c:17:06:58:41:a1:10:37:fc:c0:e3:84:58:01:f6:
                    60:b5:d0:6c:38:26:2c:26:c4:eb:98:6f:cb:cb:3c:
                    22:4c:41:ee:aa:14:a1:f8:5d:dd:2b:cc:64:5b:4d:
                    33:61:7e:c9:23:ad:a8:4f:08:8c:42:22:ed:74:73:
                    99:02:b1:21:40:00:36:70:ac:d5:75:78:22:79:b7:
                    66:aa:b7:11:ea:d7:43:92:2c:60:c4:c4:f6:f6:8d:
                    76:7a:15:52:5f:30:47:e4:bc:65:79:23:78:9d:b8:
                    d4:ea:25:0f:86:ba:72:40:f2:e8:21:c9:a7:a5:28:
                    e3:a8:b9:15:9d:78:de:45:fe:48:0c:c2:5d:e1:91:
                    00:4e:4b:ba:e4:67:ab:df:18:d0:43:0c:3a:fd:ab:
                    42:5f:24:c5:85:ed:de:9e:b4:22:fe:fc:80:78:dc:
                    13:84:0b:45:67:b5:10:99:7e:a5:7e:d8:f9:0e:cc:
                    d9:92:83:18:6d:ee:10:00:5a:9c:9e:fe:2d:c7:bb:
                    6c:e5:97:02:59:e8:97:fc:16:02:5e:0e:77:f5:bb:
                    40:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F8:41:1F:00:98:84:C6:97:34:BA:4C:EB:CA:04:F6:01:43:B6:12
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/706c668d-c343-4693-9f0b-8c47022f3529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:76:f5:ef:58:77:83:19:30:fe:c4:e7:d8:ea:62:cf:03:7a:
         7f:09:85:49:6f:6a:b4:8e:99:25:57:e5:dd:65:07:7c:af:14:
         01:98:6c:6b:a8:93:e2:c2:b1:7f:b1:18:4a:6b:6a:5e:4f:d1:
         56:59:b0:4e:cf:90:2c:52:4e:4a:5c:33:e2:4a:39:c8:3c:52:
         01:8c:89:42:8c:12:5c:df:27:77:d7:63:eb:2e:c9:3b:fb:8f:
         e5:83:91:8a:44:37:92:33:b3:62:25:12:cb:7f:05:45:3a:40:
         3b:cc:54:d0:c0:6f:68:43:49:41:46:ad:f3:7e:a5:b1:a5:c4:
         28:e4:ec:d2:2f:b4:68:9a:cc:84:f8:28:fb:d5:aa:c1:6f:f5:
         d4:dc:83:35:76:7b:b5:65:77:3c:a5:4d:8c:8f:92:c6:08:2f:
         ec:d6:57:c9:1e:00:b9:29:fb:f8:f3:6f:ae:e6:34:ff:8e:f4:
         77:f2:d5:41:4e:53:e2:9c:56:84:8c:67:e0:f2:9b:51:57:c8:
         98:e4:d0:41:3a:34:28:8e:c4:83:7b:3e:a2:da:94:11:2c:29:
         9a:22:c0:9c:a9:89:be:81:c1:78:5b:c9:02:b5:1f:4f:3b:62:
         c4:26:1f:cd:7d:26:f1:d1:77:72:2f:a7:4e:0c:6a:e3:67:4a:
         06:8f:3c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----