Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bccfbb52-04b0-4711-a79a-27497435cf21.roa
File:                     bccfbb52-04b0-4711-a79a-27497435cf21.roa (raw, json)
Hash identifier:          Nhr3GAP1qvU7mewV2DxaQj3hPcA6CeAsK6GBhWHeJk8=
Subject key identifier:   00:42:54:F8:32:33:C8:41:E7:6F:35:68:6C:45:03:F4:6B:D0:D7:08
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3EA467D6FED76D7D44024A3CE0C5A2676BE55BFC
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bccfbb52-04b0-4711-a79a-27497435cf21.roa
Signing time:             Sun 26 Mar 2023 00:00:00 +0000
ROA not before:           Sun 26 Mar 2023 00:00:00 +0000
ROA not after:            Wed 29 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a4:67:d6:fe:d7:6d:7d:44:02:4a:3c:e0:c5:a2:67:6b:e5:5b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 26 00:00:00 2023 GMT
            Not After : Mar 29 23:59:59 2023 GMT
        Subject: serialNumber=8290bd54fa3590ea159d42a9044cf9bae17c67bff749995035c7f9e696ccbb7d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:21:f1:60:e4:14:73:c2:49:47:92:3d:fb:
                    25:46:0b:03:74:ca:9b:7e:3f:46:5d:a3:6b:7f:d6:
                    90:46:3d:42:ea:da:8e:a5:17:2a:28:11:7d:a1:f3:
                    37:3d:32:ed:8e:d9:a7:1b:50:67:57:5d:84:68:43:
                    76:cc:e8:34:50:a3:fe:ba:f4:d5:10:f4:b2:07:df:
                    83:76:db:0c:99:71:27:92:ad:0a:42:b8:ce:75:1a:
                    46:2c:63:95:64:ea:53:d2:86:5e:11:17:d1:f3:28:
                    2f:5f:a9:34:90:a4:75:62:aa:fb:a2:51:59:7e:9b:
                    ae:26:49:cb:f0:ac:83:3f:82:74:82:4c:26:7d:d5:
                    9c:ce:0c:31:57:9f:66:8e:ae:a2:d2:b2:82:ee:0a:
                    fd:fa:b0:95:7d:43:aa:de:6d:5b:df:a8:9d:86:fa:
                    1c:aa:f5:ac:33:4e:26:50:ac:3b:3d:37:2f:e2:3c:
                    d5:8a:7b:22:28:e5:48:d5:2c:71:64:18:07:92:8a:
                    56:94:f7:59:91:e8:b1:ae:7c:6a:9f:9b:af:a3:dc:
                    20:2e:2b:a1:d5:43:4b:1b:fa:a8:fb:f4:b6:39:05:
                    d1:4a:6a:cf:a1:d4:a4:fe:32:46:8c:72:f6:6a:3b:
                    e6:7e:6c:3a:71:7b:68:92:35:c2:91:2c:02:91:0e:
                    0d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:42:54:F8:32:33:C8:41:E7:6F:35:68:6C:45:03:F4:6B:D0:D7:08
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bccfbb52-04b0-4711-a79a-27497435cf21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:20:7d:82:55:ed:bd:66:4b:70:b4:55:0a:56:e8:83:e6:11:
         f4:27:c9:d0:b1:58:2f:de:69:fe:47:47:d0:64:80:47:07:2e:
         3d:65:5c:93:3a:bc:b2:15:8d:c5:44:6e:ac:42:67:28:5b:56:
         11:73:6a:8e:69:87:54:95:a5:8f:83:d2:00:a4:2e:7d:b7:d0:
         25:31:f1:19:c1:26:47:b7:bd:0d:15:37:19:3a:7b:ee:ad:c5:
         c7:0a:62:0a:76:e0:b1:36:d9:56:fb:a9:c5:87:b2:63:b5:8f:
         c1:19:ba:57:24:97:6c:df:15:36:22:80:76:f1:e1:a5:da:cd:
         67:25:70:bd:bc:95:4d:45:34:4d:0a:b2:c9:e2:29:85:a5:35:
         1e:47:b4:03:5d:46:99:15:d6:87:23:d3:1c:3d:15:78:39:aa:
         73:74:25:79:1a:db:c1:dc:03:1b:c8:35:9c:fe:d3:bc:ee:6a:
         e2:ab:08:79:8e:24:7e:50:11:45:d5:18:a5:d1:50:1f:95:e7:
         92:db:66:1c:37:22:c0:f1:2d:44:63:3b:1c:1d:85:40:80:10:
         c8:0b:9f:1b:e3:67:9c:f8:3a:69:d7:f3:63:5c:73:e3:fe:61:
         1b:a9:59:12:b1:23:24:14:28:e1:61:50:ef:72:91:16:6a:48:
         fe:e8:38:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----