Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/87a3a189-cfb6-498a-a478-83f6bf608a2b.roa
File:                     87a3a189-cfb6-498a-a478-83f6bf608a2b.roa (raw, json)
Hash identifier:          hF6qUTwvCqIbs7QixwM4ge6fLrANhySvVsmIAKqXH+k=
Subject key identifier:   1E:82:97:96:86:4D:84:34:2E:89:4F:EF:69:FA:16:0B:E8:E4:3C:4A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2E8866196E01DDA13025E47A6EB616CAA44E7194
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/87a3a189-cfb6-498a-a478-83f6bf608a2b.roa
Signing time:             Mon 29 May 2023 00:00:00 +0000
ROA not before:           Mon 29 May 2023 00:00:00 +0000
ROA not after:            Thu 01 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:88:66:19:6e:01:dd:a1:30:25:e4:7a:6e:b6:16:ca:a4:4e:71:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 29 00:00:00 2023 GMT
            Not After : Jun  1 23:59:59 2023 GMT
        Subject: serialNumber=949fe6e666ada98e54959348e18808abc4ba9819b1254c24c2ec1634651cd86a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ad:b5:19:3c:e0:9b:f8:d1:58:21:ad:0b:20:
                    fa:06:fb:32:04:da:4b:4d:5c:5e:3b:57:c5:ef:30:
                    f3:e1:ce:07:ed:60:e5:6f:4f:83:92:e9:7b:0d:60:
                    59:12:ed:4c:1b:ab:da:64:64:0b:44:68:4d:54:68:
                    46:af:ae:8b:e3:90:6e:ac:21:c3:30:cb:ea:49:43:
                    e2:c8:21:01:47:f5:1e:a8:b9:83:75:dc:0d:3c:c2:
                    03:58:aa:50:8e:27:75:0c:58:79:0e:db:88:a9:73:
                    f0:a5:4b:e3:28:5b:d1:7c:38:2c:24:94:4d:77:2d:
                    a1:05:a2:e4:a0:b0:2d:98:42:78:e9:5f:f3:d3:bb:
                    9a:55:80:52:19:bd:c5:66:84:ef:cf:a4:75:ed:5f:
                    b2:75:a0:a2:4e:57:37:a4:e8:6c:3c:00:38:2e:e4:
                    c7:76:9a:b1:1c:f7:75:1d:9e:d4:3a:c9:c9:f9:c0:
                    f1:a1:25:92:65:05:4c:01:be:36:bf:99:60:38:b6:
                    0a:70:66:72:fa:32:34:84:6a:8c:ef:12:cf:83:b5:
                    73:77:77:21:ae:74:de:da:1a:07:01:7c:7e:86:8a:
                    c3:b4:a5:f9:b8:56:45:8e:fc:fc:eb:c9:bd:17:3f:
                    87:66:b8:39:bd:a6:db:b4:23:b0:7f:47:6b:9c:24:
                    88:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:82:97:96:86:4D:84:34:2E:89:4F:EF:69:FA:16:0B:E8:E4:3C:4A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/87a3a189-cfb6-498a-a478-83f6bf608a2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:16:84:15:b2:cc:f5:19:b9:52:bc:80:3f:a6:16:aa:b1:2c:
         1e:41:b2:3e:fe:ca:15:38:7a:c3:fd:52:04:9c:7e:1d:ba:be:
         b1:92:ee:a8:d7:dd:d6:ff:44:40:31:d3:28:d3:46:07:29:e6:
         be:67:a0:34:0f:5e:85:0c:53:a0:58:7a:b0:76:bd:90:6d:92:
         f7:56:9c:81:af:33:97:22:ad:ef:05:d7:11:be:94:04:e2:56:
         44:c4:66:5f:7f:98:8a:41:98:d0:e4:3e:94:82:0b:22:9e:4b:
         c5:63:e9:7a:73:26:8d:e4:9e:b0:0f:56:69:11:23:ee:59:ef:
         d6:c9:c4:93:d3:d3:13:05:b6:69:eb:49:28:61:52:76:fa:9b:
         0b:9d:a9:fd:0f:7e:ca:d6:f2:ba:1d:ed:6c:74:77:82:a9:5a:
         08:16:ae:17:5f:f2:7b:41:59:c9:f6:13:29:1d:7d:28:3c:38:
         13:5e:d8:29:b5:15:0c:75:c7:fb:c9:49:33:cd:7e:d9:ac:9d:
         18:b5:35:8f:af:16:91:67:d9:bb:bd:6e:f3:4d:71:2c:34:6d:
         62:ab:02:99:7c:a7:59:68:3e:14:57:3b:67:34:d4:11:b6:6c:
         14:f7:54:29:c2:f0:d1:26:a1:8d:b9:b5:2f:22:03:0b:a9:8a:
         78:07:ec:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----