Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/aeb185c9-8994-438d-8e5a-a24df869e1ec.roa
File:                     aeb185c9-8994-438d-8e5a-a24df869e1ec.roa (raw, json)
Hash identifier:          86mwPajEDhieBRqokyPD8jM10nfF7YlBEI4k3RxHHDI=
Subject key identifier:   BD:E8:F7:C0:7A:72:D2:F2:22:F6:B9:F0:A7:F0:FB:6B:A5:4C:B2:92
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1CE339B124D11E5BE81C696ABB6EDF1DA18C9D76
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/aeb185c9-8994-438d-8e5a-a24df869e1ec.roa
Signing time:             Tue 28 Mar 2023 00:00:00 +0000
ROA not before:           Tue 28 Mar 2023 00:00:00 +0000
ROA not after:            Fri 31 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e3:39:b1:24:d1:1e:5b:e8:1c:69:6a:bb:6e:df:1d:a1:8c:9d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 28 00:00:00 2023 GMT
            Not After : Mar 31 23:59:59 2023 GMT
        Subject: serialNumber=7ded5ab4c8b2eea0eec94dabb507ce1296e04981e0eb5e6092dfbbda50178263, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2b:a7:57:40:31:2a:cd:d9:fe:76:a6:45:ce:
                    19:6e:08:1f:f0:7e:b1:ed:a4:d3:31:9e:a6:67:9e:
                    b0:86:0f:ab:2c:ef:d8:f9:b7:04:c3:7b:dd:00:79:
                    9f:86:83:62:c7:87:8e:cd:19:69:9a:1a:f6:6a:70:
                    a7:85:5a:02:d7:55:f6:f0:80:f1:a0:6c:b5:a7:60:
                    64:62:c6:62:5c:55:7e:fc:2e:ac:1c:87:30:97:02:
                    dc:9f:64:fc:f9:9d:d4:83:1f:fa:b6:9a:42:4e:d6:
                    fd:fe:21:a8:26:c4:09:27:1c:a3:7c:15:54:f6:5b:
                    2c:b6:b8:87:37:95:9e:d5:ff:1d:3f:c6:7c:9f:c7:
                    85:4d:1c:5a:15:a4:f4:5f:d8:d6:49:72:dd:d9:2f:
                    7e:48:6b:9f:2b:71:82:2b:b7:00:e9:64:e4:19:59:
                    be:05:59:7a:b7:7c:da:c4:50:ce:06:9b:ac:4d:5a:
                    71:87:73:a7:8c:d1:3a:c7:eb:84:a6:d3:98:77:11:
                    5a:00:1e:5a:2d:55:4f:ab:cb:0e:0d:e6:ad:b3:bd:
                    62:55:4c:ad:4b:f3:7d:b4:bc:15:d1:7b:4f:f8:dc:
                    7f:e9:47:5c:b3:5f:31:80:5a:a9:22:37:c0:22:01:
                    ca:47:7d:d1:df:60:ec:4d:64:d4:41:74:21:b6:a1:
                    80:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E8:F7:C0:7A:72:D2:F2:22:F6:B9:F0:A7:F0:FB:6B:A5:4C:B2:92
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/aeb185c9-8994-438d-8e5a-a24df869e1ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:54:96:6e:77:0c:6a:e6:46:2f:90:eb:a5:b5:ef:95:c4:73:
         b5:21:90:ac:d3:0a:2b:2f:4c:04:0b:74:c3:50:54:dd:6f:cb:
         7f:ab:61:5a:cf:ca:52:28:4f:e8:9e:54:81:fd:a9:98:a8:71:
         8f:e9:37:70:04:bb:8f:aa:5f:54:08:b5:88:d1:da:d2:fe:38:
         8c:57:14:d7:34:31:93:78:23:3b:e8:71:cc:b4:27:95:ff:76:
         dc:7c:58:01:dd:5c:11:db:cc:4c:db:04:6d:81:78:43:1c:cd:
         d7:80:10:41:98:14:52:d1:42:69:46:8e:42:6a:bb:bd:e1:2a:
         ca:58:a3:28:f8:7b:50:f2:bb:8e:00:18:54:7a:23:98:d7:19:
         f3:ce:0f:74:7c:37:41:e9:26:1b:db:6f:93:ff:5b:9a:c3:e3:
         2c:be:bd:e6:da:5d:c6:2e:28:cb:25:75:56:5d:ff:13:6c:6f:
         6b:32:b2:70:87:f2:23:ea:7d:90:1e:60:cf:7e:ec:50:61:7d:
         0e:61:50:86:72:41:d4:ba:46:5d:9f:3c:13:1b:78:4b:8a:95:
         be:68:2b:6e:d3:d4:50:34:3a:9b:99:0e:d2:77:ed:74:be:27:
         31:79:3c:a6:97:59:13:e5:43:1a:6e:ff:89:b0:82:70:6a:6e:
         0b:ef:eb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----