Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7387a14b-41c3-49fd-b908-eefc26b01b5b.roa
File:                     7387a14b-41c3-49fd-b908-eefc26b01b5b.roa (raw, json)
Hash identifier:          8LW53WpTKAhaITJMe2P9TzmK1gHbviFeo199Kund1hY=
Subject key identifier:   44:28:BE:46:53:22:9B:EF:AA:B7:F3:CC:8C:FD:BF:C0:CD:94:99:3B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5CFE04F79C2EE458843821F95F12AA65730269F1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7387a14b-41c3-49fd-b908-eefc26b01b5b.roa
Signing time:             Wed 22 Mar 2023 00:00:00 +0000
ROA not before:           Wed 22 Mar 2023 00:00:00 +0000
ROA not after:            Sat 25 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:fe:04:f7:9c:2e:e4:58:84:38:21:f9:5f:12:aa:65:73:02:69:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 22 00:00:00 2023 GMT
            Not After : Mar 25 23:59:59 2023 GMT
        Subject: serialNumber=608a98bb3659cea565ab066a548e6e64d54dc9dfec6718107c80aa03582bf668, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a7:94:cd:73:18:3a:0d:f5:43:a9:90:36:74:
                    94:ef:b5:74:b1:df:3e:81:9b:ab:9f:16:55:17:ff:
                    13:b1:ac:01:c2:ac:79:9c:c8:4d:f2:af:92:1e:79:
                    9b:e4:a3:e0:9f:4c:d3:64:0b:2e:ca:53:e6:9d:98:
                    74:39:9a:9c:bb:84:c7:ab:d3:de:6d:b9:f5:64:ac:
                    49:6c:94:a4:d8:e5:bb:92:0d:c3:0f:ea:dd:7a:49:
                    20:81:fb:d8:4d:37:ba:73:b5:94:09:36:35:d9:2d:
                    fe:4a:c6:10:8f:de:61:f6:57:b8:55:17:6f:e2:3e:
                    00:90:fd:c3:41:fc:33:f3:91:79:4b:c1:72:18:1f:
                    07:74:d7:8d:2e:1f:ca:9c:ad:99:83:74:44:26:3b:
                    eb:ba:26:0d:88:0e:83:46:e5:7a:82:d2:47:71:28:
                    82:11:99:d0:32:8f:42:d2:f4:b1:63:fb:c5:78:48:
                    4a:8c:16:66:0e:8d:3a:8a:a8:f5:13:16:b4:08:31:
                    df:af:0f:f4:22:5d:5c:ff:97:dd:a1:e5:92:80:c8:
                    49:d8:c8:63:21:4c:e5:8a:6b:16:dc:79:fd:10:9b:
                    41:a7:6c:67:71:1c:4b:c1:10:40:f0:a5:4a:26:9e:
                    2f:ee:db:6d:19:bb:ee:4c:74:6e:df:bc:d5:2c:b8:
                    70:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:28:BE:46:53:22:9B:EF:AA:B7:F3:CC:8C:FD:BF:C0:CD:94:99:3B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7387a14b-41c3-49fd-b908-eefc26b01b5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:43:37:95:d4:54:69:63:9c:8e:60:70:63:53:b7:4a:6d:96:
         bf:7d:1b:fa:be:02:8e:dc:e8:e9:4f:fb:01:e7:2b:12:7d:c3:
         ca:7f:cf:9e:e7:74:2a:80:0d:04:dc:91:2b:2a:10:8f:5c:a2:
         b5:e1:f1:d6:57:56:d5:1e:5c:ad:d2:f1:20:99:01:0c:57:3c:
         28:35:95:d9:70:de:75:ea:f6:a2:9d:b5:4d:02:fc:10:f9:1e:
         48:d6:ed:1c:2b:ca:dc:64:69:43:37:90:75:fe:c5:cc:1a:61:
         79:52:92:2a:58:a2:d1:e8:b4:e1:55:87:20:e1:91:b5:0b:e9:
         83:d3:64:6c:8f:ef:8e:a4:db:b5:57:6e:c7:80:85:20:c6:60:
         a5:4b:7d:01:34:12:25:1d:68:58:58:85:30:3a:dd:e2:97:e1:
         87:de:99:bf:a3:8d:b3:6f:c2:24:38:d3:0c:72:45:78:d9:d3:
         e1:cb:54:bb:f9:d9:de:f0:8e:b0:62:c9:7e:d0:6e:a6:12:31:
         1d:cf:d0:24:fc:77:76:88:2a:dc:55:be:0c:e4:4a:84:c4:4f:
         db:16:74:69:8d:90:96:d8:e3:b5:8a:6d:c1:c5:b5:44:7d:b7:
         62:be:9e:5a:e5:00:08:b8:a3:2b:4b:54:70:09:73:8e:ff:b6:
         22:50:16:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----