Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9d9d8f51-cdbf-42f0-a94b-a934a70ce678.roa
File:                     9d9d8f51-cdbf-42f0-a94b-a934a70ce678.roa (raw, json)
Hash identifier:          CEa0aovSV3O1WTVTqfhyvh790b7hXZ9IlIys9FmvmJY=
Subject key identifier:   B8:77:0B:74:75:C5:8A:35:9E:86:D0:1D:C8:61:78:62:A1:E5:1E:27
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       956C238DFD28780A989656D748D5BC5C621A38
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9d9d8f51-cdbf-42f0-a94b-a934a70ce678.roa
Signing time:             Sun 05 Mar 2023 00:00:00 +0000
ROA not before:           Sun 05 Mar 2023 00:00:00 +0000
ROA not after:            Wed 08 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            95:6c:23:8d:fd:28:78:0a:98:96:56:d7:48:d5:bc:5c:62:1a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  5 00:00:00 2023 GMT
            Not After : Mar  8 23:59:59 2023 GMT
        Subject: serialNumber=05040dbe129ed0d2e6910bc02d252ab1ee94c8ed06cc797738dcc46a5dba6de1, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:49:ef:e4:7e:b1:9b:c2:2b:a6:bf:3a:fe:
                    f8:23:2e:06:8b:d7:15:4e:90:d8:6c:47:b7:75:2c:
                    da:f1:d5:e4:f1:0f:f9:e9:3a:91:41:6c:35:45:39:
                    21:19:d0:b2:b7:e2:be:a3:fd:6e:cf:d3:7c:f5:93:
                    64:b6:db:e5:5c:4d:53:10:b2:5b:c5:70:01:ed:b3:
                    8e:e3:8f:1d:72:f0:c6:06:97:5b:94:56:f6:f1:e6:
                    ef:0c:fb:e5:2b:27:10:1f:83:c4:77:eb:6c:03:6e:
                    d1:5d:75:ca:3a:48:11:8a:64:39:7d:ab:77:87:46:
                    57:fb:13:38:da:d6:3d:67:6a:bb:67:78:e6:ea:98:
                    c6:30:25:da:87:c3:72:df:62:a5:ea:4e:80:ce:bc:
                    05:e8:e5:2e:a8:46:ad:a8:f4:1f:59:99:a4:5b:c2:
                    48:92:d3:05:ab:e0:0c:8b:bd:a2:f3:c7:68:0e:ce:
                    f1:03:3c:9f:44:9c:58:91:e5:df:22:79:08:8d:7e:
                    51:8c:b8:7f:a3:f7:ca:92:5c:a6:4c:bc:8d:60:3f:
                    e6:17:69:36:1d:d9:57:42:d6:6d:03:b1:8a:44:50:
                    32:de:1d:69:e5:96:37:8c:00:af:b6:39:fb:d3:e2:
                    eb:00:a9:22:c8:0a:37:d9:51:73:f7:8c:c4:42:9c:
                    d5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:77:0B:74:75:C5:8A:35:9E:86:D0:1D:C8:61:78:62:A1:E5:1E:27
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9d9d8f51-cdbf-42f0-a94b-a934a70ce678.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:df:76:93:36:76:b3:25:d8:10:3a:52:3d:c1:37:54:9b:b4:
         c7:70:69:05:f8:77:59:b8:dc:ee:e4:6f:8e:46:d5:62:d1:09:
         38:a0:e5:d6:d0:b6:23:74:2a:d3:94:1b:e7:bf:47:d2:ef:2f:
         4b:5c:18:c5:4f:22:58:4b:ae:d0:2d:a7:e5:06:d0:13:24:3e:
         f0:58:45:f4:30:76:20:56:49:cf:22:46:0d:4f:bb:ad:f3:0f:
         4e:a4:cb:76:36:4b:57:0f:64:75:a4:60:b1:b4:78:66:49:a7:
         93:4d:83:cd:ce:b6:13:3c:45:2d:33:63:29:dd:0b:59:14:e8:
         11:a4:8c:98:19:6d:82:ee:b1:56:7d:d5:90:b8:b3:01:4b:4a:
         77:ec:60:4d:00:2e:5b:21:23:af:f9:ca:16:49:8b:a1:17:11:
         ad:56:44:86:30:b1:47:ad:ea:5f:a6:65:33:79:48:d6:13:0b:
         df:f0:cc:c2:fb:a4:e0:c1:88:5e:fc:2a:7b:06:a5:58:5e:2e:
         1a:85:c1:3a:28:87:6b:61:c7:05:62:de:b1:ae:f6:3a:c5:66:
         29:08:ae:9e:a9:d3:9e:30:ec:82:03:ca:84:69:53:0c:94:af:
         41:fd:a0:3e:89:e9:32:d9:18:b2:80:a7:4b:21:8e:a4:3f:12:
         db:b4:ef:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----