Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/84519636-e3aa-4e77-92ff-5ca44fe34de7.roa
File:                     84519636-e3aa-4e77-92ff-5ca44fe34de7.roa (raw, json)
Hash identifier:          zBuCGM521v3PkG0MBRKjne/RReXxn+w6RoD1jo++s9Y=
Subject key identifier:   A1:3E:9A:8B:F8:B8:78:25:C2:07:8E:19:75:0D:AF:44:E3:2D:88:8A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       30A03F7892DE36FD1E5981495C52E7842B64A692
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/84519636-e3aa-4e77-92ff-5ca44fe34de7.roa
Signing time:             Thu 04 May 2023 00:00:00 +0000
ROA not before:           Thu 04 May 2023 00:00:00 +0000
ROA not after:            Sun 07 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a0:3f:78:92:de:36:fd:1e:59:81:49:5c:52:e7:84:2b:64:a6:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May  4 00:00:00 2023 GMT
            Not After : May  7 23:59:59 2023 GMT
        Subject: serialNumber=64fe6bdf222e847145728cb689faddd6e38ef40c9d6d15c8c97bbd39af2b2b43, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:af:85:f4:aa:00:6b:55:93:38:60:f5:d2:4e:
                    05:f7:4b:ff:f8:06:48:ac:a1:b7:42:b1:cf:a8:f6:
                    ef:dd:2b:5a:b3:13:4e:2b:93:73:22:94:f2:02:a4:
                    38:5d:cf:16:00:88:ba:d0:3c:b0:f1:8d:c9:31:30:
                    f0:46:1d:09:34:c2:44:50:c7:72:f6:aa:ec:29:a5:
                    f9:e9:d6:18:ca:a5:ca:aa:b8:a1:63:9f:f2:04:4b:
                    14:85:2b:dc:83:c3:52:93:d5:f7:b1:66:84:4d:2d:
                    f8:70:7a:6b:02:38:1d:e8:f7:2b:61:ce:4b:45:ac:
                    89:9f:5d:09:3f:7a:a3:fa:86:e0:da:b2:1b:d3:93:
                    ee:a6:39:36:fe:3a:28:16:7e:5a:9c:7b:d9:02:06:
                    e5:da:d7:1a:49:0c:45:b8:26:8f:01:a4:20:6d:4f:
                    ed:c9:ab:dd:5d:be:fc:4e:d7:40:75:5d:1e:56:6a:
                    a0:90:94:fd:15:77:a5:2b:e0:81:b6:65:2f:08:7c:
                    db:aa:03:a4:32:b3:24:30:8f:ff:2a:a6:7b:a9:e8:
                    15:5e:40:e7:80:27:6a:57:e6:62:ff:f4:71:20:9f:
                    55:89:8c:63:9d:a8:d1:80:ed:53:b3:4d:e7:58:9e:
                    6c:fe:d0:9f:15:d2:09:e4:f2:78:cc:1c:d2:d9:c7:
                    8f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:3E:9A:8B:F8:B8:78:25:C2:07:8E:19:75:0D:AF:44:E3:2D:88:8A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/84519636-e3aa-4e77-92ff-5ca44fe34de7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:4b:21:fb:f4:7d:cc:f9:18:78:25:a0:9b:c9:e4:86:c4:c1:
         54:d4:b5:da:01:69:2b:63:fd:59:30:18:b5:5e:76:92:72:5a:
         12:aa:b1:5d:37:32:80:6c:df:58:5a:3d:e9:38:a0:27:dc:e2:
         9f:d1:49:ae:bc:3d:3d:f3:2a:2e:80:bd:e0:79:4c:47:de:e1:
         cf:b1:43:84:6a:a8:49:4c:90:23:c9:7f:dd:e3:51:90:09:95:
         26:1e:5d:da:c8:53:0d:d5:83:c5:96:34:e3:9c:e5:49:6d:9b:
         90:8f:41:0e:8d:0a:c3:9c:bb:f9:d7:27:4e:da:df:53:38:30:
         5a:bf:2d:b4:19:3f:86:f8:70:84:49:af:1a:d4:4c:e7:64:a3:
         0f:45:af:1b:d7:77:c4:cd:bd:f3:25:76:0c:27:3f:26:49:16:
         9a:07:7f:be:b6:82:ea:d6:72:e5:b2:9f:51:5a:e3:b9:e3:e1:
         fb:33:00:63:1a:cb:8d:1b:2d:d5:9b:12:7c:0c:cb:1d:53:40:
         1a:ea:34:da:08:bd:bb:3e:a1:38:f3:28:40:85:be:78:14:0f:
         23:c7:52:84:e3:07:54:19:34:61:67:58:66:e9:09:98:52:d6:
         56:ba:c6:ba:c1:52:78:7d:97:4c:bc:1c:38:06:f3:2f:b6:67:
         e0:a3:4f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----