Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ab75f9dd-0c97-4ab7-be45-06828254acc5.roa
File:                     ab75f9dd-0c97-4ab7-be45-06828254acc5.roa (raw, json)
Hash identifier:          k1EMmv/B70kWFoALJL5W+UhPMscFG8zxsV0jRje9r84=
Subject key identifier:   0E:F6:72:0D:59:18:E5:8D:F0:6C:90:54:CE:1F:83:D0:00:AC:E7:3F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       149CF611DBF783D2AD949C99BC474BD9D8A89BA4
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ab75f9dd-0c97-4ab7-be45-06828254acc5.roa
Signing time:             Thu 01 Jun 2023 00:00:00 +0000
ROA not before:           Thu 01 Jun 2023 00:00:00 +0000
ROA not after:            Sun 04 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9c:f6:11:db:f7:83:d2:ad:94:9c:99:bc:47:4b:d9:d8:a8:9b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun  1 00:00:00 2023 GMT
            Not After : Jun  4 23:59:59 2023 GMT
        Subject: serialNumber=05097d36533c52c03b3f04d65edeb0f4229b6cf2a1db4fa0d762240408aea19e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:14:26:fd:37:15:4f:75:ac:dd:0c:c2:45:96:
                    ba:df:32:a4:af:f8:85:dc:fd:57:80:0f:f6:50:91:
                    d6:20:ef:fa:6b:9b:96:0b:56:b7:5a:37:14:13:b8:
                    b4:37:c6:f4:77:f9:a2:50:35:4e:fa:fa:ad:d9:5e:
                    e7:a4:ff:0f:30:be:fa:ce:c3:e1:0e:e6:43:50:2a:
                    e8:2b:33:3e:37:ba:ab:30:68:cb:7e:0a:c8:7a:5f:
                    25:55:40:de:b3:f4:ee:4b:4b:04:21:7a:22:df:9d:
                    48:11:6d:a7:a2:50:73:c5:bb:29:df:73:fc:82:4d:
                    23:e6:de:a2:8c:85:3a:98:c7:b9:7a:40:c8:90:79:
                    01:b0:c6:c9:19:23:ec:4c:41:4d:be:ee:db:09:3e:
                    eb:98:b5:90:5b:fa:33:97:29:6e:b7:9e:75:ff:c7:
                    23:e5:24:ec:b1:8c:93:1b:33:3a:77:35:ef:fd:83:
                    cb:a2:d2:53:ac:0d:13:2e:49:69:55:e4:a0:9f:68:
                    2f:e9:fd:2c:ee:6c:10:f6:1a:2b:22:82:2f:ab:5c:
                    54:d1:0d:ed:87:7a:48:ef:29:fc:08:6e:9b:5f:20:
                    b7:7f:23:5f:00:40:b7:f7:19:9e:b4:21:82:dc:da:
                    62:55:b6:b3:3d:a9:11:89:cc:e7:99:13:75:62:5a:
                    b3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F6:72:0D:59:18:E5:8D:F0:6C:90:54:CE:1F:83:D0:00:AC:E7:3F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ab75f9dd-0c97-4ab7-be45-06828254acc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:02:56:02:81:71:dc:39:ac:ea:3c:61:38:99:52:d9:5d:9a:
         2d:a4:1a:37:42:3e:32:4f:8e:9e:b5:a8:3a:ce:f7:1e:ee:7f:
         41:5d:aa:75:9d:d9:7c:d4:d4:2c:2e:6d:d9:5b:ea:26:0b:a7:
         9d:a4:5d:d8:32:e4:d8:e9:e4:1b:ab:cb:56:80:38:4c:67:70:
         dd:2e:09:97:20:df:6f:3f:9f:68:22:64:82:59:cf:8b:b3:a8:
         ca:80:d9:25:7e:15:83:ad:cd:bb:7e:1a:23:dc:49:8d:28:2a:
         0a:16:ba:83:6d:77:dc:1e:85:ed:66:e4:42:76:9f:f2:09:7f:
         49:42:b0:a3:3a:a4:c8:e4:b6:da:36:bc:52:10:6b:a2:95:56:
         95:7f:f6:be:e5:07:b7:ec:eb:ff:8e:71:7c:ae:8b:4d:3a:7f:
         8d:eb:93:9b:7d:9f:a9:83:df:15:c6:eb:bc:fe:0d:a1:40:53:
         32:ba:1c:1e:cc:6f:6e:60:c4:7e:bd:e1:1e:19:52:0c:68:b6:
         a3:ec:9d:2b:9d:ab:ef:65:46:4c:fe:c6:e5:4f:7e:a8:42:76:
         0a:01:1f:64:66:7b:4f:83:b5:87:af:37:3f:dc:5e:9c:ad:77:
         bd:13:9c:d4:27:b2:78:b3:44:51:7e:8b:b3:1f:c3:e8:ca:cf:
         3b:7d:b4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----