Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a9506602-9f52-4232-b29d-1a8a382ab350.roa
File:                     a9506602-9f52-4232-b29d-1a8a382ab350.roa (raw, json)
Hash identifier:          pt6SMHGUOI4h5UfR6AocO69fWJkwFybkJgq4tRslaoM=
Subject key identifier:   63:7B:B9:60:E0:07:05:F2:3A:93:33:F8:21:FE:6E:EA:16:7F:32:F3
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1D5D94B766B24345A00DCDB48946C8348B09F4F9
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a9506602-9f52-4232-b29d-1a8a382ab350.roa
Signing time:             Sun 28 May 2023 00:00:00 +0000
ROA not before:           Sun 28 May 2023 00:00:00 +0000
ROA not after:            Wed 31 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5d:94:b7:66:b2:43:45:a0:0d:cd:b4:89:46:c8:34:8b:09:f4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 28 00:00:00 2023 GMT
            Not After : May 31 23:59:59 2023 GMT
        Subject: serialNumber=2d7c12fdd393ae3c50851dd5ed28492657b802a80819c2349cee794a0f5975fb, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:04:03:fc:fd:3d:b8:9b:c0:f5:de:82:a7:16:
                    a2:bd:9e:47:59:80:a8:ad:4a:80:99:68:40:53:9b:
                    0f:ac:92:74:85:cd:79:79:8e:b5:13:59:6c:f3:ed:
                    1d:22:e6:0d:cc:01:cd:c1:82:f5:d8:4a:9f:a1:10:
                    ae:f7:0d:4e:ec:b2:ce:bf:ba:2d:c5:b2:cb:09:6a:
                    3b:8b:47:f8:e6:3d:5c:86:15:88:64:63:67:15:2c:
                    f5:b0:bc:c7:21:3d:f7:e3:97:2b:6d:9d:b6:75:b3:
                    c3:1a:59:31:41:93:05:0f:1a:97:92:fd:07:19:46:
                    15:41:e8:5a:0c:8b:e9:d5:76:a6:d3:c5:70:a5:be:
                    12:66:1f:52:c2:40:59:70:81:92:28:73:04:54:49:
                    6e:d9:63:7a:56:e3:ac:88:44:39:81:78:bb:b4:4e:
                    26:91:1d:4e:61:53:13:4d:f8:4a:14:1c:ae:64:6c:
                    b3:27:7f:d7:fc:b3:84:59:ea:91:81:a5:87:74:66:
                    cb:87:f3:8e:84:b8:85:9d:5a:25:c7:f1:6e:b0:05:
                    ff:5d:33:55:35:58:9d:60:1c:1d:ec:6c:68:34:2a:
                    a0:8c:48:16:95:5f:8a:57:7b:e4:b3:4b:39:fe:d8:
                    a7:0d:ff:16:f7:02:cf:42:d8:49:fb:03:b6:4b:f2:
                    08:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7B:B9:60:E0:07:05:F2:3A:93:33:F8:21:FE:6E:EA:16:7F:32:F3
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a9506602-9f52-4232-b29d-1a8a382ab350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:63:41:26:d3:53:91:a3:7f:2d:7e:41:fb:6e:6a:b0:a4:41:
         a5:9a:71:55:8c:4e:81:2f:f3:6a:07:ab:c4:4c:81:dc:e5:53:
         5a:05:d9:21:21:7b:ab:c1:36:ca:d7:de:d8:34:60:f5:01:1d:
         b7:9e:24:64:02:54:ae:21:aa:7d:82:35:13:7c:62:21:19:66:
         a9:a3:2c:ad:d4:e5:43:d3:66:54:41:80:ed:d0:5c:bf:5d:fc:
         a4:bc:0b:01:fc:a3:ec:60:5f:bc:43:d2:b2:14:c2:d8:29:09:
         3a:67:72:f2:b1:e0:9d:8b:12:a1:e8:39:f5:4d:dc:55:a7:de:
         ce:fe:78:e9:bc:f6:7c:0a:cf:aa:92:67:2c:fb:ee:58:08:e9:
         05:29:9c:3b:4f:73:f5:04:f9:7b:0b:15:60:11:21:bb:b5:55:
         40:d9:51:14:2e:1b:4f:ba:e6:7a:9f:6c:73:b4:a9:83:57:a2:
         0d:72:30:2d:28:86:55:bd:54:8a:70:fd:32:ef:9c:9f:d9:b7:
         07:52:65:be:5a:2d:27:42:e0:e0:f2:d3:36:a4:7a:ce:85:31:
         75:7f:80:64:ef:55:5b:9d:12:ab:74:5a:e0:99:63:97:c3:4f:
         61:82:09:98:4b:fd:b6:bd:b5:87:86:98:a9:00:e8:fe:25:2c:
         fe:e3:22:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----