Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/753a95b5-b041-4b56-8c57-618cd8ca3ab2.roa
File:                     753a95b5-b041-4b56-8c57-618cd8ca3ab2.roa (raw, json)
Hash identifier:          Kw+srYzjEQNdQqLcB1zYX9sWNRwG15HIDwK7/KxHq14=
Subject key identifier:   46:57:5B:9E:AC:72:61:F9:67:64:02:AF:E1:86:11:BE:03:27:7D:23
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       29A88E8ED84579BA91AADF989D751261A59E0F9C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/753a95b5-b041-4b56-8c57-618cd8ca3ab2.roa
Signing time:             Tue 28 Mar 2023 00:00:00 +0000
ROA not before:           Tue 28 Mar 2023 00:00:00 +0000
ROA not after:            Fri 31 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a8:8e:8e:d8:45:79:ba:91:aa:df:98:9d:75:12:61:a5:9e:0f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 28 00:00:00 2023 GMT
            Not After : Mar 31 23:59:59 2023 GMT
        Subject: serialNumber=fc8910c793b559ed1048209a51296f4e014fd1bb21b9be7e02123483f0621baa, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:49:e2:77:16:44:5f:d6:d3:54:4c:67:e0:dc:
                    df:a0:7f:3e:e7:98:3f:36:46:ce:8e:f6:18:19:ed:
                    ce:10:8e:3a:b7:af:2f:43:2c:79:a2:c7:6d:a3:9c:
                    af:55:3b:f4:ca:a8:50:7e:96:3b:92:ff:aa:0e:2a:
                    11:ac:e9:46:a9:49:55:68:b4:ca:9b:f3:4c:0d:8a:
                    8e:81:51:89:7a:e5:52:47:29:04:c7:26:fe:41:9f:
                    e0:27:28:50:3c:84:0b:06:22:64:d3:70:b9:9f:9d:
                    4e:b7:6e:38:20:11:9f:6e:82:38:82:94:59:ff:fb:
                    14:58:03:17:0e:08:f1:60:a8:74:93:da:c5:a0:5c:
                    b0:65:0e:61:81:d3:b3:ae:96:ea:de:aa:8a:c7:8d:
                    39:9f:1d:d2:6e:75:14:5c:33:a5:3d:7c:39:02:59:
                    77:7d:18:b1:a1:09:90:ba:e6:49:95:5c:28:58:34:
                    71:b9:46:02:97:2c:2d:14:00:a9:86:2a:50:ce:10:
                    f1:d0:1b:9e:d1:40:d3:69:bc:ed:55:3e:86:00:de:
                    2f:ea:cf:12:29:85:85:15:59:73:2e:14:2c:17:00:
                    ca:0c:e1:29:64:12:75:59:46:85:b9:80:a0:7d:b0:
                    19:8a:c5:21:82:dc:01:1a:39:48:ef:1a:21:ac:6f:
                    77:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:57:5B:9E:AC:72:61:F9:67:64:02:AF:E1:86:11:BE:03:27:7D:23
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/753a95b5-b041-4b56-8c57-618cd8ca3ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:69:00:dc:5b:c9:86:3c:e3:cb:20:9e:36:46:9e:1a:01:13:
         29:29:1f:c8:6d:92:e2:87:35:91:a0:0d:8e:99:1f:78:0e:fb:
         7e:a4:ee:66:a8:c4:7d:f7:00:5a:33:c4:30:63:80:66:e4:8c:
         ce:df:d3:5a:50:42:8c:70:93:41:dd:dc:0d:88:34:d2:37:e1:
         30:3f:af:2c:26:42:be:c4:c8:fc:d7:25:eb:f4:3b:e4:1e:13:
         f2:87:2b:fc:cc:3b:81:f2:11:70:29:bd:56:9a:f4:f4:47:a5:
         98:5e:89:29:65:ba:4b:80:43:77:a2:5e:72:7e:4b:f6:db:4d:
         fa:4d:1f:cd:ee:71:99:fc:18:a3:19:00:0f:bb:eb:71:5a:c9:
         f3:65:c2:81:c0:56:cd:ef:5a:33:3c:2d:81:3d:2f:e6:04:fa:
         2d:fd:e9:10:34:49:67:66:70:60:7d:54:86:c9:ec:ed:46:cf:
         03:00:34:84:50:46:d0:62:83:df:c2:60:60:a7:2c:a2:33:48:
         9b:9e:f9:b6:e7:14:af:db:ce:23:2b:ed:41:60:51:cc:fe:95:
         1d:7c:9a:5e:a4:cd:f0:91:6c:f1:37:b6:36:54:00:c9:95:c6:
         b8:dc:04:ec:49:c5:db:83:f5:df:1a:8c:53:53:99:86:b0:2f:
         46:b7:f5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----