Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/730a9f43-413e-4291-951d-422ed2072e30.roa
File:                     730a9f43-413e-4291-951d-422ed2072e30.roa (raw, json)
Hash identifier:          08kTtkmtWx2pDCPr6uuRgBoPcZ195I3I9Z3LHkicAcY=
Subject key identifier:   75:A9:99:8C:63:8B:CE:4E:7F:32:14:BC:5F:A6:1B:B8:AD:F6:93:13
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       01948B81761B09125EDCEFB5FD7792725A9EDFC5
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/730a9f43-413e-4291-951d-422ed2072e30.roa
Signing time:             Tue 02 May 2023 00:00:00 +0000
ROA not before:           Tue 02 May 2023 00:00:00 +0000
ROA not after:            Fri 05 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8b:81:76:1b:09:12:5e:dc:ef:b5:fd:77:92:72:5a:9e:df:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May  2 00:00:00 2023 GMT
            Not After : May  5 23:59:59 2023 GMT
        Subject: serialNumber=42611dd1970170d42e3d2a5ce607bef1eb051e35c746f676b7cd4cd1da8a7a41, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fd:ee:f6:66:1e:65:1e:68:41:82:1c:75:c6:
                    f9:d4:6b:ab:b4:27:46:e9:6a:49:d3:7e:f9:6b:f0:
                    33:d8:2c:0c:11:dd:05:a5:33:c8:fd:0e:5b:16:c4:
                    df:3f:f8:5e:3f:25:25:60:8d:f9:89:0f:6f:b1:e1:
                    76:e2:53:b9:81:83:5e:3e:10:04:ea:e1:db:2e:0a:
                    ee:18:33:95:ee:57:a0:86:05:d1:8e:c2:ea:f0:13:
                    84:b9:cf:4f:61:17:af:1d:89:5a:82:cc:54:89:e6:
                    e8:4c:bb:80:f0:ba:05:95:ec:91:14:f9:a7:c5:ce:
                    c2:ae:fc:66:09:0e:d8:5a:c6:26:cd:53:ea:ea:e7:
                    ed:60:3b:1d:0b:fb:16:db:60:ee:f2:c3:04:7b:fc:
                    75:3e:2d:30:6a:e5:2e:3b:82:63:08:cd:84:af:4b:
                    9b:cf:3d:24:43:c8:ef:25:b3:ca:c7:7e:08:d7:cf:
                    95:09:9d:48:7c:b6:e3:de:d5:8e:23:50:b0:7a:7f:
                    22:1f:f3:db:98:61:2f:f9:a0:66:86:bc:44:d4:bb:
                    5d:a2:59:3f:e3:ce:c2:be:70:93:2c:1e:9f:4d:05:
                    a5:db:98:f5:2e:6a:3f:95:21:45:f0:30:90:f0:c2:
                    63:44:0b:e2:d5:93:28:b3:6a:a1:f8:b3:8b:0b:04:
                    1a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A9:99:8C:63:8B:CE:4E:7F:32:14:BC:5F:A6:1B:B8:AD:F6:93:13
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/730a9f43-413e-4291-951d-422ed2072e30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:c9:f0:a6:dc:d9:b0:2d:b3:7a:0e:31:88:f1:94:db:40:fa:
         31:a6:18:06:8e:ea:23:22:ba:68:73:79:2d:7a:bb:75:b0:9d:
         fe:86:45:a9:d8:9b:27:e5:ad:03:b0:aa:70:a2:f7:e2:60:6e:
         ad:58:c1:ac:17:ab:1f:ab:da:af:b7:f5:71:4b:61:3a:c1:79:
         ac:71:1a:ed:07:f9:9c:a9:e6:2f:9d:8e:0b:3c:6f:44:e6:07:
         92:6d:19:f4:d3:43:34:11:9b:3a:7e:97:bf:9b:3e:06:01:50:
         0b:fe:b4:6a:c4:f3:c6:57:79:a3:b6:82:65:0b:2b:8d:01:da:
         4e:0b:4c:a6:b5:28:e1:59:38:13:61:e9:3e:f2:71:84:71:c7:
         08:7b:1b:5b:c1:a1:86:be:2c:62:94:f2:5b:4a:89:b9:ae:db:
         23:4c:64:c0:07:7c:32:97:11:19:9b:96:9c:b9:1f:fb:99:b4:
         32:3c:95:21:0b:27:b1:c2:32:fd:c3:d6:44:79:99:84:d6:8a:
         12:9f:86:12:26:fd:e6:e1:67:76:d4:64:f4:ef:1e:00:9a:95:
         5f:0c:8b:9c:67:49:b9:86:d1:34:90:ef:59:59:7f:6c:55:4a:
         bd:60:1a:dc:0f:33:76:2a:ab:93:3f:e1:f5:37:19:08:75:3e:
         55:87:57:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----