Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8b59ed82-79f8-482c-a4cd-8d40644da1fb.roa
File:                     8b59ed82-79f8-482c-a4cd-8d40644da1fb.roa (raw, json)
Hash identifier:          Qj27fojm9h5NchtDFNx4HrhvpCfRuEYCHyOBWIF5hqk=
Subject key identifier:   E5:FC:69:D7:69:A5:C2:37:DC:8A:85:25:BD:09:5F:70:7E:72:53:47
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       46C1F2FB3010E3670F086BC57619850C73A645D6
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8b59ed82-79f8-482c-a4cd-8d40644da1fb.roa
Signing time:             Sat 06 May 2023 00:00:00 +0000
ROA not before:           Sat 06 May 2023 00:00:00 +0000
ROA not after:            Tue 09 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c1:f2:fb:30:10:e3:67:0f:08:6b:c5:76:19:85:0c:73:a6:45:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May  6 00:00:00 2023 GMT
            Not After : May  9 23:59:59 2023 GMT
        Subject: serialNumber=2e36d9c3337e6f6e313a7586393ac0495afd20fb0bd1540780d71e50090f79f3, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1d:b7:49:03:5f:05:4c:0a:93:c3:00:07:9e:
                    17:d5:ef:3a:70:2a:d3:4b:a3:f4:dd:df:4c:ed:17:
                    f3:c9:46:43:f6:72:99:0a:e1:38:2e:82:ca:c7:f4:
                    28:fb:c1:eb:55:3c:c8:87:91:da:33:8e:f8:b5:2b:
                    cb:c5:47:d6:04:5e:0a:17:bc:3f:40:b0:78:02:fa:
                    6d:86:c6:6e:a2:1f:fc:89:c7:de:c3:8b:0e:f9:41:
                    1b:71:ba:02:bb:51:c3:b3:f5:3d:9a:9b:fd:2d:36:
                    a2:1f:f6:8c:d9:01:17:51:0e:41:ad:bc:48:8d:36:
                    89:08:d8:36:c7:d2:69:d4:4a:06:88:3d:b4:8d:3c:
                    34:05:25:8c:ee:4e:e9:c1:1c:19:d7:ec:16:5c:0e:
                    28:fe:67:ef:40:9b:a2:24:ab:dc:9d:ea:4c:82:d0:
                    5c:d6:a3:c0:e1:02:15:ae:64:cd:36:0a:42:ae:db:
                    0f:7a:23:cf:c9:78:1a:1e:ae:e4:82:58:3d:37:aa:
                    47:f4:37:46:47:3e:78:96:3b:0e:9f:bc:b8:2f:a0:
                    47:65:d9:2d:79:04:47:09:41:48:5b:17:6e:c6:1e:
                    29:3a:0a:c9:c9:a6:72:b2:cd:31:64:27:1a:4d:82:
                    a5:eb:0b:1a:eb:3d:2c:c8:4c:65:d1:8b:8e:3b:8f:
                    19:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FC:69:D7:69:A5:C2:37:DC:8A:85:25:BD:09:5F:70:7E:72:53:47
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8b59ed82-79f8-482c-a4cd-8d40644da1fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:b6:cd:e5:a2:ba:a7:f9:6d:fe:bf:44:92:e5:13:d3:a4:b1:
         22:8e:e3:f0:40:71:6d:dc:9c:1a:26:d3:dd:21:97:9a:91:13:
         48:c7:7e:83:3e:7b:33:45:c1:b9:6b:e2:a2:0b:63:43:ad:1e:
         c5:c5:f8:45:37:bb:5d:5d:19:2b:cf:69:af:cd:3d:52:c2:f5:
         c1:1a:8e:cc:bd:2a:41:e8:8d:3a:87:c0:f2:20:69:b0:ea:02:
         bc:37:4a:37:a4:5a:7d:89:c8:fa:30:ae:f4:01:9d:9e:01:64:
         db:d3:df:32:21:e6:91:92:2f:7c:97:2c:58:15:4d:9b:a1:ba:
         d3:34:bc:71:cd:61:4a:d7:28:64:65:14:b7:f8:1f:22:3f:16:
         a3:ab:06:90:11:d9:4c:77:0b:5e:38:09:ab:a6:ec:92:02:a4:
         a3:d1:27:88:86:94:9b:b5:9e:e1:09:b1:26:a4:5d:7c:a3:df:
         68:17:fb:54:ac:a4:ad:fd:9c:81:53:8d:16:cc:9e:2b:ac:ba:
         03:4b:c1:35:f5:fc:8d:25:74:f1:9f:e3:de:2d:78:42:b9:a8:
         c4:7d:99:55:1f:80:db:a4:fe:77:9b:d6:85:bd:0b:08:f9:5f:
         15:bb:88:00:a6:03:43:f5:13:b8:52:5e:87:f7:86:12:51:05:
         be:63:90:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----