Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a16c57bf-2a15-442b-bd5c-fea2782666a8.roa
File:                     a16c57bf-2a15-442b-bd5c-fea2782666a8.roa (raw, json)
Hash identifier:          u3f7qprKDBph1OOeKR+X3aSeK60iXiJ5g4xq1Nk/zzY=
Subject key identifier:   AF:9A:5C:94:DE:5A:5F:F3:39:46:7F:8E:AA:9B:24:1A:4D:AA:C8:BC
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4695F182EEDC13305CA14B991CADAF4425D90D5B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a16c57bf-2a15-442b-bd5c-fea2782666a8.roa
Signing time:             Sun 23 Apr 2023 00:00:00 +0000
ROA not before:           Sun 23 Apr 2023 00:00:00 +0000
ROA not after:            Wed 26 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:95:f1:82:ee:dc:13:30:5c:a1:4b:99:1c:ad:af:44:25:d9:0d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 23 00:00:00 2023 GMT
            Not After : Apr 26 23:59:59 2023 GMT
        Subject: serialNumber=349bfaf199dca0ba5849168afc72cab88171b26517d0a5b08056fbe556eb146b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:05:b5:a8:f0:16:8b:7e:b3:c2:27:27:59:13:
                    8a:bb:12:fc:f5:d1:c9:be:12:94:35:fb:b1:47:96:
                    dc:f6:b8:63:4a:c9:86:9f:83:ad:ad:ca:f6:52:cf:
                    bb:a9:87:f3:9f:13:3c:27:05:e1:62:36:e8:fa:63:
                    7a:87:24:1f:ac:48:b1:44:75:73:70:c3:cc:49:b5:
                    c3:53:cc:ac:6c:48:86:80:8f:15:b1:e9:5b:b0:1e:
                    e7:0f:5f:09:f5:da:84:d6:15:10:d7:b3:83:36:04:
                    d9:f2:9b:44:8b:aa:c0:aa:aa:c8:62:9a:da:c3:c1:
                    14:5b:fe:de:ea:0d:17:4f:09:58:31:80:03:37:f8:
                    3a:ce:98:17:2f:83:a9:08:e8:17:82:74:89:84:34:
                    31:a2:c8:0c:2e:5d:73:86:a2:b2:1d:4b:c4:f1:71:
                    1c:b6:31:3d:83:7f:25:c2:ff:92:f9:a9:91:62:39:
                    dd:0b:f5:b5:24:3b:be:3e:26:d8:bf:50:f4:26:97:
                    13:41:8a:0b:da:b3:50:60:a8:d2:6d:03:99:f3:40:
                    4b:11:75:12:ff:4e:c1:3f:2b:91:11:1c:67:84:de:
                    17:01:da:58:f9:c6:00:b2:7b:e7:69:5f:96:ea:93:
                    b3:ec:08:f8:b3:53:21:bd:92:fd:c4:8d:5f:a8:05:
                    0b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9A:5C:94:DE:5A:5F:F3:39:46:7F:8E:AA:9B:24:1A:4D:AA:C8:BC
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a16c57bf-2a15-442b-bd5c-fea2782666a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:33:db:7c:3d:60:2c:dc:b3:9c:16:a3:2f:44:c8:c8:0d:19:
         42:c1:7f:68:f8:21:16:a7:76:4a:fb:75:f6:f4:53:3a:40:f0:
         e1:a2:0d:d0:43:9b:9a:f4:cc:c2:49:18:3e:db:13:9a:f3:26:
         46:8a:ab:1f:03:18:e8:c6:14:bb:4f:02:76:7f:64:c4:a5:2b:
         d1:67:ed:1e:4e:4c:61:db:af:61:ce:a9:f5:94:3d:d6:a0:a7:
         26:7e:f1:19:66:0f:97:59:f8:f8:27:28:78:63:52:43:38:08:
         92:6c:3e:30:63:05:00:88:3d:cf:ec:fc:07:8b:8e:97:d9:18:
         fa:f5:21:3c:64:87:1c:7d:7a:10:53:ab:aa:39:50:11:f5:b3:
         f9:35:f0:36:d6:b5:f2:97:84:d3:c6:cc:a3:18:ef:19:32:45:
         ec:44:e1:88:46:31:2f:ad:22:39:35:bb:39:8c:48:fb:8f:a8:
         a6:46:b8:9a:90:3b:27:ad:59:96:17:6b:9e:2d:97:56:a0:b7:
         6e:a2:f0:c0:f6:61:8b:e0:2c:2d:a9:3e:2e:a2:b9:c7:ff:fa:
         bd:ad:e5:59:bc:73:b7:18:5f:eb:d4:88:ba:77:cd:f7:6a:e2:
         88:26:f5:01:0d:fe:75:28:2b:0b:3b:60:7f:8d:f2:4f:7f:fc:
         df:f1:67:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----