Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b1155499-6f58-4aea-9b6b-c3b3153d5a29.roa
File:                     b1155499-6f58-4aea-9b6b-c3b3153d5a29.roa (raw, json)
Hash identifier:          NTT0pgBr/03JHKXWusCvneQjBbvrE7le7fTIfqpJ92g=
Subject key identifier:   AE:29:A8:CA:34:4D:4A:D1:80:E5:3F:2D:E5:26:C6:F2:4C:97:DD:67
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4E6F5E0F89FC9CC16D182B78717F23BFE917ED51
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b1155499-6f58-4aea-9b6b-c3b3153d5a29.roa
Signing time:             Fri 21 Apr 2023 00:00:00 +0000
ROA not before:           Fri 21 Apr 2023 00:00:00 +0000
ROA not after:            Mon 24 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6f:5e:0f:89:fc:9c:c1:6d:18:2b:78:71:7f:23:bf:e9:17:ed:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 21 00:00:00 2023 GMT
            Not After : Apr 24 23:59:59 2023 GMT
        Subject: serialNumber=f9d67ff17b1af967c5333dcaa76e88297a447a38d30eb971cee8bd7f3f9f4de7, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fc:21:0e:85:87:0f:6a:94:a4:fe:19:12:c6:
                    41:28:94:a3:ba:3b:1d:b7:dd:72:12:52:ec:39:c6:
                    f4:84:b7:41:ef:f2:fe:82:d5:b2:7a:b2:86:db:f3:
                    ea:fe:76:b7:9a:46:31:b7:02:6d:5a:29:bc:2f:e4:
                    66:76:90:12:24:a0:d9:fc:a2:52:a8:98:88:38:83:
                    ba:15:d2:fb:f6:36:7f:32:55:c1:ad:bc:f3:e0:2e:
                    16:34:2c:c7:c5:44:40:f1:fb:01:9d:5c:1e:28:ef:
                    a4:52:2c:c5:2a:11:1d:a7:72:b0:e5:90:fc:bd:aa:
                    a3:b2:f0:85:b5:92:6a:b0:d6:69:1f:89:89:96:e0:
                    3f:eb:63:f7:7b:e2:62:2f:0e:a9:f0:d1:0d:09:ba:
                    65:02:30:9c:70:39:9d:d3:63:26:0a:de:1f:4a:52:
                    5d:e8:20:39:52:6a:d5:e3:99:81:c3:81:e6:49:d7:
                    d0:17:cb:dd:b9:73:63:41:b9:14:13:10:f9:1b:f3:
                    73:6e:ba:6b:c9:01:cb:92:44:32:75:26:8b:a6:a8:
                    6e:27:e7:38:43:20:05:8e:b5:e4:0e:a8:47:df:11:
                    28:1c:46:f9:ba:f6:e2:cb:d5:10:84:0d:b9:cc:04:
                    e9:9f:38:c9:58:23:b8:68:ea:70:39:53:d4:b5:df:
                    cf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:29:A8:CA:34:4D:4A:D1:80:E5:3F:2D:E5:26:C6:F2:4C:97:DD:67
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b1155499-6f58-4aea-9b6b-c3b3153d5a29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:16:49:4f:4c:e1:61:c7:c6:e6:6b:c4:d4:4e:48:39:c4:9e:
         f1:b1:f8:41:25:3d:b0:ec:80:9b:bd:cc:01:96:a9:1e:9f:5b:
         b5:bf:1c:37:b3:22:96:99:a7:3f:f4:0d:34:c4:cb:47:d8:2c:
         6d:75:af:25:fb:91:01:bb:2a:b3:8b:9c:e1:c4:7f:d5:f9:7f:
         dd:a8:ef:38:8e:74:d1:78:0d:c0:49:da:f8:fd:3a:6c:34:a9:
         7c:56:33:d7:ae:55:d8:4a:85:8d:df:70:1f:0a:8e:82:1a:f8:
         69:d1:42:4f:aa:0b:a0:b6:0f:de:c7:a0:5e:d7:40:37:a5:8b:
         28:66:ed:36:ed:82:80:d2:a0:e3:07:85:56:38:a1:6f:7f:74:
         57:e1:3d:6b:4b:ff:1a:d9:91:e0:31:9d:16:c8:0c:e8:e2:3a:
         ff:4a:0f:cf:cb:c1:67:0f:72:5f:d3:f6:7a:21:e9:76:23:c6:
         44:ed:31:7f:db:2b:f5:82:f6:ac:c6:29:35:28:90:26:96:57:
         3a:01:59:c6:6b:ce:95:b8:dc:56:dc:ba:ef:ba:f8:02:8a:ea:
         cd:16:23:bb:2e:5d:be:54:18:a0:32:91:f1:b1:29:ea:37:5f:
         70:72:9f:7f:b7:ed:35:7b:bc:14:4f:57:9d:8b:8e:8f:59:ee:
         5b:7e:91:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----