Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7a14d9d0-6825-4bfe-a583-22e4b7675d8a.roa
File:                     7a14d9d0-6825-4bfe-a583-22e4b7675d8a.roa (raw, json)
Hash identifier:          fKE8EW54YZbLuwjF5lsq2yQES8APHrQg50BN6nQ/4WY=
Subject key identifier:   37:3C:0B:94:60:A0:8C:2A:07:F2:41:AC:0D:30:FB:72:90:79:31:5D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5C4056204C9B84EA2E0506B5D670A7CCE4C3655B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7a14d9d0-6825-4bfe-a583-22e4b7675d8a.roa
Signing time:             Fri 28 Apr 2023 00:00:00 +0000
ROA not before:           Fri 28 Apr 2023 00:00:00 +0000
ROA not after:            Mon 01 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:40:56:20:4c:9b:84:ea:2e:05:06:b5:d6:70:a7:cc:e4:c3:65:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 28 00:00:00 2023 GMT
            Not After : May  1 23:59:59 2023 GMT
        Subject: serialNumber=6e9e9c71a9b5d62d514319de7ca05b0737f7b04591ff01556d96549b5e030259, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9a:aa:7f:c9:d1:f9:15:6d:e1:0a:81:b6:cf:
                    a1:6e:18:a9:e5:28:8a:e7:fe:38:23:79:a4:e3:d5:
                    ed:c3:77:ec:8d:f9:a9:6a:19:80:ed:49:7c:1c:ef:
                    43:88:0f:e8:f7:8f:61:71:3b:0b:89:67:91:00:bd:
                    94:06:c6:48:fc:9c:fa:26:80:1f:9c:48:7f:82:6d:
                    aa:1c:3f:fe:47:ed:13:9b:f6:4b:99:36:44:3a:5d:
                    6c:f3:62:9f:43:8b:29:2e:3c:16:43:2e:e8:74:1b:
                    b0:86:a0:2f:dc:0a:0e:40:f3:86:1a:6d:5a:57:e9:
                    8c:ea:b2:65:03:01:7d:ba:ce:5a:9f:5c:d7:d8:54:
                    c5:5d:57:f3:5c:f7:1c:4c:de:55:de:e1:0b:44:c8:
                    84:17:5c:1f:35:5b:21:e8:c1:28:8f:7a:28:e0:89:
                    9c:6f:ad:b9:0e:ac:97:91:5e:95:80:de:15:dd:ea:
                    a9:d1:61:5a:61:73:9f:78:04:8b:3e:f8:ad:e1:89:
                    59:5b:9f:07:0b:91:1b:f3:c5:a6:3a:9a:6b:e0:6c:
                    a5:a6:8d:b8:17:80:43:9c:a3:10:4a:7c:09:92:16:
                    7a:b9:fe:ef:89:2e:b3:cc:ef:14:85:06:5e:e3:53:
                    42:c4:d6:52:b3:36:06:b0:09:64:c1:e4:be:c2:69:
                    b9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3C:0B:94:60:A0:8C:2A:07:F2:41:AC:0D:30:FB:72:90:79:31:5D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7a14d9d0-6825-4bfe-a583-22e4b7675d8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:1a:8b:26:5d:53:10:75:d0:63:5a:06:a2:cc:5c:ee:f0:12:
         43:08:cc:80:79:7d:53:08:5b:48:53:e3:f2:fc:ce:6e:ab:b2:
         14:4a:e8:fd:80:58:15:ff:5f:40:68:11:bc:f5:f4:ec:cf:5c:
         0a:b9:26:9e:b1:4c:2b:d7:1d:01:cd:c8:23:fd:70:0a:b0:fb:
         a5:47:aa:58:93:6a:73:68:1b:22:46:42:3e:3b:50:b4:2c:d8:
         b7:a8:98:03:b0:72:4e:e0:59:59:3a:14:9a:b1:b0:79:91:7f:
         85:8f:23:09:92:9a:f2:1c:39:cb:fb:e8:95:02:9b:39:29:14:
         d4:79:f7:3e:a3:a7:02:4a:fe:de:7c:bc:2c:24:62:87:0a:b4:
         b7:42:54:a9:11:4a:99:02:f2:46:19:fe:ea:48:16:70:89:7a:
         85:e1:d4:34:b9:e9:80:46:7c:a1:35:44:bb:bb:c6:5e:a0:9a:
         30:55:58:e4:1a:56:99:1b:50:fe:dd:b5:e7:ac:ab:20:a1:b4:
         51:5b:df:fa:11:ef:78:e2:b2:a2:9f:74:0b:08:1b:e2:4f:d6:
         c4:9a:39:5b:cf:44:b6:55:5d:23:92:3f:33:07:e2:af:b4:39:
         49:a5:f1:75:0a:c7:e8:45:36:43:9f:02:ba:76:d0:9c:f3:35:
         ca:d4:61:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----