Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a6dbd885-b2fe-4906-ba9d-bfd83676a40d.roa
File:                     a6dbd885-b2fe-4906-ba9d-bfd83676a40d.roa (raw, json)
Hash identifier:          igLyxbL45c0w6y1BJBSd7VT1VAtG3B9pFYSbVssC8Hw=
Subject key identifier:   91:16:02:39:7E:B1:4C:E9:47:5A:CC:24:1B:39:2E:4B:F6:92:29:A4
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6B481B20703DAB7A1698A8339FD895E79A19C16D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a6dbd885-b2fe-4906-ba9d-bfd83676a40d.roa
Signing time:             Mon 01 May 2023 00:00:00 +0000
ROA not before:           Mon 01 May 2023 00:00:00 +0000
ROA not after:            Thu 04 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:48:1b:20:70:3d:ab:7a:16:98:a8:33:9f:d8:95:e7:9a:19:c1:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May  1 00:00:00 2023 GMT
            Not After : May  4 23:59:59 2023 GMT
        Subject: serialNumber=2a660a699bf3bfc56ab71b530d1062bcf824ee1876e96c7c142d45f384f948c7, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8c:54:b3:f9:68:cb:50:7a:a2:2d:c8:3d:82:
                    b9:3f:c9:ed:a0:f0:45:de:fd:0c:c7:05:1a:8c:af:
                    ce:4c:1c:aa:8c:09:1a:e1:ef:42:3f:91:fc:1b:f1:
                    92:77:6d:38:d1:c2:7d:0d:40:a1:e8:23:69:65:0d:
                    10:c7:de:65:5a:8c:45:27:cf:12:5c:c2:cd:05:a4:
                    78:e3:13:7d:23:e8:b8:bd:18:70:32:f7:1c:81:8d:
                    f3:ec:c5:a2:87:1a:1f:98:10:75:ab:bc:6b:66:b3:
                    62:a4:7b:e4:eb:91:a6:a6:84:23:5c:1c:98:65:0c:
                    18:98:c0:da:40:29:8e:3d:7a:d2:21:32:7e:9a:ea:
                    e8:b6:52:13:42:ad:c3:1d:60:d7:45:3c:0c:5a:b5:
                    56:a1:a2:d1:50:6f:55:1e:c1:a2:78:72:de:c1:84:
                    b2:6a:65:72:1f:cf:9b:18:35:e6:88:1c:e8:63:6d:
                    10:38:3d:37:0b:6d:85:e5:e6:55:88:3a:d7:8d:7e:
                    68:7b:d5:40:73:bc:11:dc:b7:5c:20:f8:a7:c7:bc:
                    cb:b3:40:14:8d:52:68:3b:54:91:c8:9a:8c:e5:18:
                    e6:f2:56:d7:5f:a5:0d:f4:d2:46:98:05:df:66:c0:
                    89:b0:cf:b9:2a:fa:a5:07:41:bc:94:fd:6e:04:bb:
                    e7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:16:02:39:7E:B1:4C:E9:47:5A:CC:24:1B:39:2E:4B:F6:92:29:A4
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a6dbd885-b2fe-4906-ba9d-bfd83676a40d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:24:d2:9d:01:ff:0a:25:ba:ff:fd:7f:e6:bf:52:bf:36:5d:
         fa:cd:fe:08:ce:5a:35:89:0b:71:ff:29:9f:ac:13:c6:49:5e:
         90:3a:b4:82:89:ba:f7:5f:6b:13:e1:56:94:f7:ea:00:c9:60:
         98:a6:80:66:93:de:e0:39:da:a0:1b:7f:55:f1:22:c9:c2:84:
         5e:05:13:fa:62:d7:e1:70:36:06:4b:f6:92:d6:74:78:90:68:
         22:ca:2d:0c:a4:46:8c:de:8e:ca:30:3a:2d:e4:78:dc:40:20:
         1e:c6:bf:09:18:f5:a9:4f:c1:4d:34:7d:17:f6:12:86:e4:b5:
         41:66:5a:0b:7c:24:5d:e8:94:a7:8e:c4:47:1d:0b:eb:70:d0:
         eb:60:69:bc:a3:12:7d:c5:df:f5:74:fa:14:6b:68:dd:b7:d3:
         cc:0c:37:2f:b4:99:66:fd:c9:be:a8:e5:2a:72:36:5e:5b:17:
         32:af:fd:19:87:88:5c:ac:51:df:7d:4f:62:58:fc:4d:0d:fd:
         52:79:a2:a5:e1:19:18:17:91:28:94:b1:b1:0f:d6:56:79:d0:
         69:9d:f0:8c:12:a1:60:58:6b:28:cf:09:5c:be:97:43:f5:05:
         d1:7c:24:0b:b8:cb:c8:2f:ba:94:29:3e:83:20:ac:40:8e:1d:
         37:e5:4a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----