Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a6cde279-9260-48d1-892a-e428848fe9f9.roa
File:                     a6cde279-9260-48d1-892a-e428848fe9f9.roa (raw, json)
Hash identifier:          z9SCszONuHV+T6gc277ZP7agn2gbtInBfcFr3IxvFTc=
Subject key identifier:   54:D3:AA:56:89:77:F1:5A:B9:D9:66:A1:0D:36:9B:B2:4E:00:3F:6A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3F10C1964628A262C0E239DEB020C45DDC191015
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a6cde279-9260-48d1-892a-e428848fe9f9.roa
Signing time:             Thu 04 May 2023 00:00:00 +0000
ROA not before:           Thu 04 May 2023 00:00:00 +0000
ROA not after:            Sun 07 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:10:c1:96:46:28:a2:62:c0:e2:39:de:b0:20:c4:5d:dc:19:10:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May  4 00:00:00 2023 GMT
            Not After : May  7 23:59:59 2023 GMT
        Subject: serialNumber=8e181578f4e692f890983c9c34f19c9dcb42987c83ff570565356e7ec897a2c3, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a6:e2:86:ed:07:00:ac:07:ee:90:8b:d4:08:
                    63:83:75:4e:f4:ad:5f:14:a2:4f:dc:8c:3b:1a:f9:
                    d0:06:96:51:f7:0b:24:0f:06:74:8c:fe:64:04:73:
                    3c:0c:a9:a7:48:70:ca:15:99:70:33:d8:a9:fc:7c:
                    dd:66:76:cb:3b:43:08:df:2a:e5:9d:09:5c:a7:8b:
                    ab:3d:fe:de:b7:02:14:d4:19:fb:65:35:49:c1:23:
                    f8:25:56:34:47:e3:77:a3:08:db:42:88:37:9e:55:
                    ae:f4:be:2e:5b:dc:29:04:ef:28:f2:bc:1e:f3:13:
                    c0:a2:1f:f1:7f:57:34:0c:81:96:e7:e2:93:ba:ed:
                    e6:8d:6c:3a:e3:2c:3b:94:b8:14:8f:5a:cf:4c:40:
                    72:7e:f7:fd:7b:d3:93:57:32:91:73:ed:2b:c4:cb:
                    84:54:4f:1f:4e:6d:cc:81:0b:0e:c9:a3:c5:4e:2e:
                    e5:dd:a9:4b:b2:6d:a9:57:80:0e:fc:79:f0:9c:0d:
                    24:e5:fc:dd:d7:34:11:7d:94:06:99:f3:ac:2c:2a:
                    0b:aa:42:26:c4:48:32:d6:c4:4c:17:b8:47:be:86:
                    f3:c8:83:41:c6:ef:4a:f3:ba:77:5f:cb:92:fd:fe:
                    7d:a0:4a:46:d1:23:47:27:25:0a:97:be:cb:55:a8:
                    ef:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D3:AA:56:89:77:F1:5A:B9:D9:66:A1:0D:36:9B:B2:4E:00:3F:6A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a6cde279-9260-48d1-892a-e428848fe9f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:7d:04:7b:a9:39:65:e3:70:dd:f5:ca:44:9b:08:1e:4e:1e:
         b6:70:6f:50:22:e1:cf:a2:33:c5:88:1d:42:fb:30:12:4e:d8:
         84:3c:84:78:bc:cf:37:84:02:d5:80:dc:5b:ad:24:62:ce:77:
         5b:e3:89:0b:ed:78:b1:2b:19:45:4d:74:0c:91:e7:69:3f:ae:
         04:97:fa:7c:95:14:68:95:c8:f5:29:23:3e:0a:99:15:6b:ba:
         0f:4e:dd:6e:5f:f6:a8:19:32:3c:26:95:fc:fa:fa:1f:15:0c:
         2d:a2:af:53:ff:df:9a:50:f8:00:3d:89:b4:bf:cc:86:97:03:
         b2:06:64:55:52:29:b9:bb:79:a5:a4:e1:e0:e5:5d:5f:59:c7:
         98:fe:66:5c:7f:81:25:85:eb:fe:7f:66:44:8d:ab:2d:4d:fb:
         23:91:89:54:28:9d:db:d5:03:5c:11:1e:51:f5:70:d6:73:89:
         fb:0d:11:c0:72:77:84:aa:52:a6:11:33:6f:94:c5:a5:65:6d:
         dc:e5:c1:a5:b5:20:57:cd:43:e8:e7:ae:86:13:7a:76:48:f2:
         df:0f:44:61:61:94:ca:0c:4b:3a:44:39:25:3d:10:b0:65:4e:
         08:9b:23:66:70:3c:a1:55:46:0a:44:5b:a7:35:18:aa:73:be:
         77:d9:f0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----