Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/aa8fc226-fc31-4d18-9b0b-758270d2c879.roa
File:                     aa8fc226-fc31-4d18-9b0b-758270d2c879.roa (raw, json)
Hash identifier:          idghADwn0kDjPpN9DkD/AR3VY5B4+iJ/KpkvbESNjXQ=
Subject key identifier:   CE:FA:E3:A8:AB:DD:A0:1D:93:A4:56:F2:37:F2:50:98:7A:57:89:C7
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7FE795D859B13528C7B3261F29B67F4AEF5E9CF7
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/aa8fc226-fc31-4d18-9b0b-758270d2c879.roa
Signing time:             Tue 11 Apr 2023 00:00:00 +0000
ROA not before:           Tue 11 Apr 2023 00:00:00 +0000
ROA not after:            Fri 14 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e7:95:d8:59:b1:35:28:c7:b3:26:1f:29:b6:7f:4a:ef:5e:9c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 11 00:00:00 2023 GMT
            Not After : Apr 14 23:59:59 2023 GMT
        Subject: serialNumber=5c40ac4d252991779b2336da5f9d3c293cf4b2373098f7d637fc78817048539a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9e:8b:57:6a:0d:71:ec:e2:6d:6a:ce:6b:99:
                    b5:8d:3c:50:db:be:8e:70:b3:75:c6:7f:41:d8:d9:
                    16:d4:17:45:55:e0:fd:13:bf:e6:37:ed:f4:84:ac:
                    e9:fb:2f:2f:e6:fe:21:9e:93:88:9e:0e:2e:f0:b2:
                    36:fb:b5:52:51:94:6f:f5:6c:88:3b:27:ab:fc:82:
                    7e:c1:af:fb:60:9a:f6:4d:12:55:0b:16:4f:e3:79:
                    5a:56:62:b8:93:1d:5f:9d:bf:af:65:f9:50:2a:8a:
                    e4:b5:49:db:71:59:99:ae:a7:66:41:d5:3d:7e:d7:
                    2c:5f:5b:cf:6f:fc:e7:65:b0:f1:51:3c:6f:23:d5:
                    62:f5:47:57:e3:1c:45:47:0b:89:f1:b2:15:98:79:
                    3d:9f:62:24:7f:02:0e:6c:98:d3:92:b3:99:f5:0f:
                    54:7c:42:11:e7:20:73:a0:ef:6a:48:96:38:bd:92:
                    ea:42:62:5a:67:39:ac:95:2d:e5:45:d9:ea:d7:f9:
                    04:9e:46:a8:6c:be:6e:90:9b:d9:6a:af:5a:2f:af:
                    70:20:94:5d:7b:cf:7f:bb:07:6c:62:87:df:48:1e:
                    56:bb:90:79:5f:dc:1a:18:8b:c7:7f:56:db:12:a2:
                    02:a8:cb:8e:6d:11:4f:68:84:88:73:49:68:12:bd:
                    34:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FA:E3:A8:AB:DD:A0:1D:93:A4:56:F2:37:F2:50:98:7A:57:89:C7
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/aa8fc226-fc31-4d18-9b0b-758270d2c879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:16:73:2a:a2:44:69:af:76:ae:f3:65:73:7d:d6:2e:eb:64:
         6d:c8:13:53:e7:ea:a9:a9:9e:04:ee:8e:f5:1c:a6:7e:16:57:
         8b:e7:b8:d6:0c:82:9b:d3:6d:46:08:95:ef:9c:41:75:8f:26:
         c5:cf:96:0f:ea:5e:56:d9:7e:c6:56:e4:3d:dd:06:2f:44:02:
         e9:a8:fe:c5:b8:7e:29:f1:d6:a0:77:85:8e:63:bd:da:33:a3:
         58:2f:b9:48:f8:4a:f4:2c:06:2f:df:ee:51:f7:c4:6a:f8:e2:
         0b:79:ae:7e:d7:9d:8b:87:c8:ef:67:b3:fe:27:7e:a9:41:8e:
         c1:2a:21:f1:21:33:40:c9:c5:18:38:1d:a9:8b:af:d2:9a:ef:
         ba:43:54:d2:bb:53:93:c2:d3:91:84:f8:a3:fe:a1:36:5d:42:
         45:77:90:c3:42:b9:6c:99:63:b0:c5:31:7a:29:bb:97:b7:3e:
         43:c1:61:14:ae:11:b9:32:30:19:1b:84:b7:c0:d7:ad:33:44:
         7d:11:a0:26:20:48:65:9b:6b:ac:91:19:85:75:2b:fa:01:1b:
         ee:52:60:91:36:d3:f3:23:af:21:1b:ad:83:c9:a2:08:14:b7:
         dd:67:d3:1e:d8:8f:ea:59:cc:59:83:d4:a8:e6:17:bf:4c:ff:
         ec:8c:e5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----