Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/aa5a67b1-843b-4a83-b476-37911c002827.roa
File:                     aa5a67b1-843b-4a83-b476-37911c002827.roa (raw, json)
Hash identifier:          RJwODcSdyAGbV104YVmpW2lwtDaFPB29tqz85Y3KSBA=
Subject key identifier:   71:E6:75:C7:2C:D0:FF:8F:0F:89:98:F8:CF:4A:4C:E9:3F:F2:B6:93
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4CE96155FF20D490452CCAD15344B776DD0499AE
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/aa5a67b1-843b-4a83-b476-37911c002827.roa
Signing time:             Sun 14 May 2023 00:00:00 +0000
ROA not before:           Sun 14 May 2023 00:00:00 +0000
ROA not after:            Wed 17 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e9:61:55:ff:20:d4:90:45:2c:ca:d1:53:44:b7:76:dd:04:99:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 14 00:00:00 2023 GMT
            Not After : May 17 23:59:59 2023 GMT
        Subject: serialNumber=7632ad5959d07e792fd8aaac83dcc00ac94349119c2b856f4a46968cbded1558, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:eb:b5:81:2c:03:ac:c9:d5:ef:2b:43:06:07:
                    b0:11:cf:1e:8e:1a:27:31:11:16:b4:35:31:d5:ee:
                    48:50:da:d7:8b:a1:8b:f0:1f:0c:41:67:9f:6d:49:
                    8f:50:f9:ec:33:37:19:70:b4:1c:7b:e6:a9:c7:59:
                    91:84:76:b6:02:27:0e:44:41:c4:7f:0d:9a:4d:f7:
                    d5:38:79:ba:2f:22:e3:68:9d:39:a8:f8:44:fc:87:
                    c6:44:1a:c4:ff:f4:c8:aa:6f:cf:0c:93:e3:87:d7:
                    ca:a7:92:5f:47:a4:1a:44:b9:0c:f7:a1:fb:cc:70:
                    b9:e9:f6:e8:77:54:1a:e8:54:8e:df:fa:ab:5d:ff:
                    30:6a:73:01:79:1a:b4:b2:78:65:6d:64:82:61:ee:
                    63:95:fc:ad:33:50:19:0f:4a:a7:7e:b8:43:42:8e:
                    a7:3a:29:7c:ed:8a:84:84:40:24:c2:9b:cb:57:9d:
                    41:94:1f:40:8d:4c:e8:36:b0:88:d5:71:e5:2a:52:
                    01:74:a1:53:d7:f1:09:cf:9f:07:ea:24:f9:00:61:
                    fa:f9:7b:9e:b8:12:79:d0:50:ff:76:9f:0a:0a:f3:
                    c6:6f:34:44:fb:c2:8c:74:9a:ec:f0:92:5d:a2:6c:
                    1e:32:f6:0b:5c:9c:59:4b:cb:e4:bc:24:bd:14:70:
                    d0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E6:75:C7:2C:D0:FF:8F:0F:89:98:F8:CF:4A:4C:E9:3F:F2:B6:93
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/aa5a67b1-843b-4a83-b476-37911c002827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:b1:cf:0c:ba:99:8a:21:01:bb:f8:da:e6:69:2f:74:fe:5e:
         2a:04:e1:1b:b9:0e:ec:d6:aa:7a:df:6f:3c:46:27:93:eb:7d:
         26:dd:51:d8:8f:7b:be:7d:a4:97:22:13:60:3e:7e:bf:6d:f7:
         0a:7d:31:4a:ca:a3:15:dd:e7:0e:e0:f6:98:1b:58:7d:b3:94:
         ae:d7:54:88:1a:58:14:9a:a6:00:51:ba:5f:3a:76:f9:4c:d8:
         19:ba:6e:8f:9f:e3:6b:1d:ab:b9:7a:e4:47:0a:d1:0f:a9:31:
         e7:85:c8:61:17:76:d4:d9:6c:fb:20:6c:42:98:d4:23:73:30:
         1d:45:94:bd:05:41:3b:be:d4:69:61:3f:17:c9:64:9d:80:42:
         9d:a1:5c:cf:7d:36:3b:bf:68:0d:f3:4c:3e:58:d9:c3:5b:2b:
         71:2a:a3:c6:0b:1c:01:46:be:ff:9c:39:ac:e9:a4:d0:a6:5a:
         3e:7e:0a:88:52:9a:8a:dd:84:a9:59:55:11:e6:24:80:40:c4:
         c6:55:33:aa:56:ef:90:4b:ef:67:af:a5:1a:bf:8b:a1:61:88:
         cb:0a:bc:f8:36:f9:34:bf:b4:2d:97:32:52:57:43:d8:75:77:
         ad:e7:a7:fd:4f:94:ef:e0:82:c5:8a:6b:7e:01:e3:bb:ac:f6:
         e6:56:fb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----