Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8affcc96-38f8-44bc-991c-569b3690710f.roa
File:                     8affcc96-38f8-44bc-991c-569b3690710f.roa (raw, json)
Hash identifier:          5wHc+460vpn4pAcNCMzbg4h8SwG0Km9lbLHzQppYvg0=
Subject key identifier:   0C:B4:6B:2F:65:86:E2:84:27:4E:DF:56:35:4F:32:AF:89:7D:C3:43
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4BBEC03A08913DC2D40188CE80F4878F668B19C7
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8affcc96-38f8-44bc-991c-569b3690710f.roa
Signing time:             Mon 22 May 2023 00:00:00 +0000
ROA not before:           Mon 22 May 2023 00:00:00 +0000
ROA not after:            Thu 25 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:be:c0:3a:08:91:3d:c2:d4:01:88:ce:80:f4:87:8f:66:8b:19:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 22 00:00:00 2023 GMT
            Not After : May 25 23:59:59 2023 GMT
        Subject: serialNumber=91ae5d0f8db15b9fa6828b96f1af3365ac3457fd43ed442ef4487803c1c1c27a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:39:c4:b3:82:a8:a6:c6:e1:44:b9:93:a3:
                    89:5e:d7:d8:ed:e2:69:46:64:50:f0:53:d9:61:de:
                    00:db:07:e9:05:9a:7b:f3:74:89:21:ba:cc:cf:f0:
                    2a:a0:5b:7a:eb:66:47:40:0c:90:27:ac:ae:20:14:
                    f0:16:b3:fa:62:84:9a:01:36:a3:5f:71:b0:8c:2e:
                    e1:f1:ef:43:72:ff:55:ec:e8:5e:e9:45:b8:68:4f:
                    e2:48:f2:17:86:2a:f0:94:f5:2e:18:5e:ec:2b:8d:
                    22:c0:93:d0:3a:1a:04:12:1a:2b:f1:27:a3:b3:63:
                    d2:3d:f7:0b:76:99:86:e6:40:97:d8:68:fd:d2:98:
                    05:25:87:59:cf:29:6d:26:3e:e2:d3:59:ea:e9:66:
                    67:c0:d7:70:a8:2e:d4:82:49:f7:48:ad:87:b5:38:
                    42:05:4e:18:70:4f:35:4a:24:38:3a:ae:0c:2f:5c:
                    df:f4:d9:f1:c4:1b:a0:22:6e:fb:03:65:fe:4f:89:
                    23:0b:3e:a8:7c:cb:2e:74:3d:da:49:da:8c:f5:53:
                    5e:6e:dc:8c:75:1a:2c:66:8e:13:ec:1b:88:57:6e:
                    34:84:a4:ee:4d:3e:46:cc:b7:f5:d4:50:ab:7e:7d:
                    b1:80:d7:f3:07:d8:38:6f:81:b3:0f:95:11:a4:c3:
                    91:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B4:6B:2F:65:86:E2:84:27:4E:DF:56:35:4F:32:AF:89:7D:C3:43
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8affcc96-38f8-44bc-991c-569b3690710f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:6c:c1:da:5f:73:91:01:85:23:6e:78:41:2b:4b:c6:ac:f5:
         9a:6d:22:45:71:8b:ba:cc:c8:c4:37:3a:e1:5f:1f:6e:76:09:
         27:d9:ca:40:5a:61:15:df:38:70:33:c0:9f:23:22:0d:35:73:
         64:34:a9:31:b6:3f:e0:a6:b3:a7:61:0d:13:41:1f:b7:df:87:
         9a:6e:d9:2b:c2:33:4e:94:b5:d4:45:24:31:39:b0:9a:01:6c:
         6e:5c:10:67:cf:03:04:bb:18:1b:64:e4:71:9d:b3:89:d8:8c:
         3d:bb:3a:72:96:0c:e0:81:72:b5:14:c2:bc:23:7e:b0:b3:ae:
         0a:e4:c8:6a:3f:13:e8:37:66:3e:14:3a:1a:d8:2c:24:5f:af:
         83:68:13:c9:ed:3d:98:58:b3:f3:30:85:0f:e1:d9:21:33:2b:
         02:dc:e7:a4:f7:25:0e:fb:f6:5a:9c:7a:04:36:39:57:9b:e4:
         d5:68:97:8e:3d:19:de:40:5e:3f:71:3d:74:39:0a:55:fa:7f:
         a0:0f:80:4c:9d:e0:cc:98:7b:65:d5:5b:2d:c6:a7:f3:4e:9b:
         6d:e4:4f:27:50:30:db:9e:a4:78:f3:f7:53:d9:3b:3c:d9:65:
         5e:5b:d4:c3:fe:77:3f:68:c8:e9:64:db:cc:a7:27:c2:f4:7d:
         dd:27:cb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----