Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9113d2c1-55d6-4895-a23f-8f9a94b0fde4.roa
File:                     9113d2c1-55d6-4895-a23f-8f9a94b0fde4.roa (raw, json)
Hash identifier:          4CXOk6wfKUjYBIFnYHkL6Pde+GgwHFthvCt4IJe7GKw=
Subject key identifier:   ED:F3:84:A8:08:42:AA:DA:10:F5:65:0D:68:6A:16:7B:53:69:06:29
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       087525AF3A3EC865189D42908238ED7D9C8532E8
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9113d2c1-55d6-4895-a23f-8f9a94b0fde4.roa
Signing time:             Mon 15 May 2023 00:00:00 +0000
ROA not before:           Mon 15 May 2023 00:00:00 +0000
ROA not after:            Thu 18 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:75:25:af:3a:3e:c8:65:18:9d:42:90:82:38:ed:7d:9c:85:32:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 15 00:00:00 2023 GMT
            Not After : May 18 23:59:59 2023 GMT
        Subject: serialNumber=d66de143316d4fd9d1e4971c1b85d3564a7afef3dab0a76ab6754860f3879ac1, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:fc:20:3c:a8:06:40:13:ba:9c:ab:a5:03:
                    b9:3d:80:c3:af:7d:7f:ef:1a:e9:f7:b3:58:3c:a2:
                    ff:e3:8b:ee:7a:f0:a7:c2:12:ad:0c:14:a7:70:71:
                    12:16:25:86:35:80:65:31:76:c4:c6:80:3f:7f:79:
                    08:9b:aa:12:65:2f:e4:f0:45:c7:8c:04:cb:35:86:
                    69:80:c4:b3:15:64:95:dd:1b:a1:a0:39:6a:36:95:
                    44:8b:c9:ce:7f:db:3d:1b:db:db:b1:74:85:4d:9b:
                    e9:8b:db:98:7e:a7:89:0a:02:62:45:b0:1d:d4:bd:
                    12:9d:7b:05:c3:c2:18:5f:01:c8:f0:5a:1a:ae:79:
                    41:58:84:a7:f1:5d:e9:80:e3:02:55:a9:d0:24:be:
                    ba:4c:df:f5:43:92:64:54:32:82:4a:ad:77:47:fa:
                    39:b9:90:e1:b9:35:c2:07:39:dc:6b:93:03:aa:11:
                    65:1b:d9:70:bf:41:54:93:ce:61:55:12:ac:48:d9:
                    7e:b9:5d:20:60:6e:fc:c0:a9:b2:0b:d6:33:2a:11:
                    e0:b8:e5:dd:40:09:70:e6:92:40:f6:7f:d3:f9:c2:
                    25:07:fc:18:27:fa:f6:d9:0c:35:e7:4e:30:68:88:
                    35:80:87:67:5e:b0:49:5a:10:aa:b9:c8:dc:ff:b2:
                    95:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F3:84:A8:08:42:AA:DA:10:F5:65:0D:68:6A:16:7B:53:69:06:29
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9113d2c1-55d6-4895-a23f-8f9a94b0fde4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:f2:52:04:04:85:95:fe:d1:07:64:45:29:82:a1:71:8e:ea:
         e0:f7:a3:bd:ef:22:15:4b:a3:69:37:07:34:75:75:a2:4f:5f:
         83:54:8b:78:98:c4:c1:c2:33:c5:32:6f:ec:51:0b:aa:38:c5:
         f1:3f:88:b8:20:65:ee:c1:cf:0c:16:7d:38:c4:74:ca:9b:ce:
         53:72:97:15:50:02:b4:38:3d:ab:dd:d2:95:ba:ad:c9:90:b3:
         1f:5b:72:04:dd:65:8e:ec:65:9f:c5:ee:32:74:c9:0f:25:65:
         13:e7:c2:11:5e:83:b0:65:93:33:28:20:e3:18:51:ea:3f:92:
         24:2a:aa:7c:e0:3f:a5:fa:eb:18:e0:09:b0:43:04:cd:ef:49:
         b0:9d:ad:63:cb:75:d8:e6:75:72:48:ad:7f:96:16:9b:88:1f:
         1e:47:ea:1e:fc:89:6a:e2:3a:bc:d8:e6:54:68:c3:dc:4d:ee:
         4c:7e:7b:ab:ed:f7:71:a2:39:fc:21:2f:85:19:da:16:27:fb:
         fe:cf:4d:cc:82:87:f7:64:cc:25:0c:47:fe:14:ef:48:80:ad:
         ea:81:9c:46:ec:4a:11:eb:5d:f1:65:fb:4a:7d:d2:f0:a6:f5:
         69:5f:dc:dc:41:93:f8:30:f7:25:79:6d:44:69:88:62:5e:7f:
         fb:72:6c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----