Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9ad649d3-872c-460a-bd3f-34c238d2c8ff.roa
File:                     9ad649d3-872c-460a-bd3f-34c238d2c8ff.roa (raw, json)
Hash identifier:          68vLilgn753qEPIMw9uHqlZm2yTrZPejRvB0ZskmHkA=
Subject key identifier:   19:14:A6:82:6A:CD:E8:73:75:5C:7E:70:94:CA:1B:4B:E2:4F:C3:B6
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3B2A8E1F1F990C29F4DC95076D72B632EC6680E1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9ad649d3-872c-460a-bd3f-34c238d2c8ff.roa
Signing time:             Tue 25 Apr 2023 00:00:00 +0000
ROA not before:           Tue 25 Apr 2023 00:00:00 +0000
ROA not after:            Fri 28 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2a:8e:1f:1f:99:0c:29:f4:dc:95:07:6d:72:b6:32:ec:66:80:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 25 00:00:00 2023 GMT
            Not After : Apr 28 23:59:59 2023 GMT
        Subject: serialNumber=3b4ec3b47012453b7d13b8c711ef5af114c5458c1c451b85e23b258649a7eb11, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b2:b4:7f:71:40:2a:21:50:2e:ab:6d:22:ce:
                    63:7a:d1:c5:c7:c5:a3:34:ca:eb:28:d9:ee:a1:98:
                    08:58:66:a5:2a:b2:ba:17:84:99:2b:62:b1:bf:39:
                    ac:f2:7f:fa:4a:d3:2c:f3:95:13:77:25:26:e2:4d:
                    9d:71:50:93:97:2e:00:87:af:6d:02:ec:37:bd:52:
                    fe:15:fc:0c:f6:4e:10:71:04:ed:a0:6c:36:3f:86:
                    35:2f:78:3d:2e:62:2f:55:b2:25:ff:14:79:1d:f8:
                    63:de:c5:92:48:42:bb:59:8d:87:ab:c5:62:d5:83:
                    f8:df:43:0b:76:73:67:10:85:4f:1f:fb:5e:e2:e6:
                    60:13:98:e2:94:05:d6:e9:49:56:02:cf:bf:06:a2:
                    39:50:fe:a3:c8:eb:82:a7:3d:a3:91:ee:82:d5:97:
                    12:6b:8c:05:ac:5d:dc:c2:34:3e:a9:96:8a:2d:74:
                    54:14:31:01:04:8f:52:4c:63:28:98:17:1e:d2:ac:
                    6c:44:ce:73:cc:40:ae:66:0a:a2:a7:3b:dd:11:0a:
                    55:af:ef:fc:5c:46:fc:34:de:b2:bb:46:90:15:e1:
                    be:71:96:65:b6:1d:6f:57:4e:7e:8d:db:74:ab:89:
                    7d:f5:aa:8b:10:e0:95:37:98:89:bf:75:d6:29:b3:
                    42:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:14:A6:82:6A:CD:E8:73:75:5C:7E:70:94:CA:1B:4B:E2:4F:C3:B6
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9ad649d3-872c-460a-bd3f-34c238d2c8ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:41:2b:b3:e1:11:ba:31:25:55:3c:30:72:d9:80:7f:fb:79:
         89:bd:05:c9:1e:d7:13:e6:32:85:5e:d1:ef:4a:34:a8:d4:29:
         92:5d:fd:61:3e:92:15:65:08:8b:8e:c6:76:3f:9a:da:ff:e4:
         e0:2a:b8:2f:97:f7:41:e2:c1:84:16:da:b9:e0:40:e2:b0:b5:
         89:d1:d6:05:f9:db:40:e9:fb:27:9c:0e:02:46:03:c7:4f:21:
         69:d3:00:a0:0a:a9:4e:cb:9e:62:93:83:39:ab:f1:2d:fa:ff:
         80:b8:d3:97:97:3d:e2:76:57:0d:ff:d4:77:b7:9d:0d:58:fd:
         55:a8:73:5c:74:be:ea:7f:c5:35:c5:9a:0e:27:d0:a7:23:ba:
         ef:70:63:bc:f2:b0:2b:2a:54:10:4b:32:7a:7f:0e:ae:0b:db:
         30:2d:85:6c:41:02:7e:88:33:20:b7:8d:71:a8:09:e2:31:d6:
         68:ef:94:33:95:d1:c6:44:89:02:41:4a:ad:74:0a:56:94:3f:
         9f:1d:38:c9:af:c3:85:37:9b:a2:6e:53:f9:24:e9:cc:4f:ac:
         4e:3b:ec:8f:72:5a:32:e8:46:2f:14:b3:73:a7:a7:30:89:bb:
         fa:08:4a:11:3c:6c:b0:d7:f1:b6:69:e7:28:2e:38:b4:35:b9:
         70:92:14:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----