Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ca4a5f7e-00c1-4732-86ae-e8a56769f4ee.roa
File:                     ca4a5f7e-00c1-4732-86ae-e8a56769f4ee.roa (raw, json)
Hash identifier:          l9IgneamI7gv3McHXD/gP/i/pSCiVcfeOjWvFvEUWBs=
Subject key identifier:   C7:6B:55:5B:11:69:CA:72:B0:54:BA:7F:A3:F1:F5:6D:B6:EF:BF:72
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4BFD8A3B6752E5B1800D46D41B4BEDAC826CBEF0
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ca4a5f7e-00c1-4732-86ae-e8a56769f4ee.roa
Signing time:             Sun 02 Apr 2023 00:00:00 +0000
ROA not before:           Sun 02 Apr 2023 00:00:00 +0000
ROA not after:            Wed 05 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:fd:8a:3b:67:52:e5:b1:80:0d:46:d4:1b:4b:ed:ac:82:6c:be:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  2 00:00:00 2023 GMT
            Not After : Apr  5 23:59:59 2023 GMT
        Subject: serialNumber=10e7ecc93a53325b6b2dbdd7efc7a91761e5b6b57d576cf0f6e3f00f742e74d5, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:36:75:6a:88:08:ea:46:72:0c:a9:79:74:
                    5e:1a:bc:7c:64:08:7e:16:f1:e0:4f:95:51:ff:3f:
                    99:84:6b:6e:06:a9:52:2e:cf:02:ff:af:f6:7e:39:
                    94:2d:e3:d9:80:9f:fa:83:8f:ea:cf:c0:da:8a:62:
                    34:f0:1d:f1:fc:0e:1e:b1:90:c6:61:61:2d:58:80:
                    4f:ae:fc:00:a2:1a:c3:47:e2:6f:42:2c:98:dc:91:
                    cd:f6:0f:33:f8:91:43:c5:f9:92:20:35:f5:32:b9:
                    01:f7:2a:c7:f9:3f:34:2d:7d:e9:36:24:29:4b:c6:
                    f6:73:d2:8f:18:9f:42:e7:fc:04:7e:2a:ad:69:6a:
                    03:da:e9:f3:5f:f1:c9:3d:a0:40:65:c5:f6:55:5e:
                    90:49:14:cd:f2:6a:c0:93:67:8a:e5:32:33:9f:eb:
                    36:f1:b9:a4:5a:8b:d3:86:8c:4c:9e:66:78:17:59:
                    9a:6d:b4:e1:03:5a:90:6b:cf:3c:10:a1:76:db:94:
                    db:61:8b:5f:7c:d6:d4:62:7b:13:f0:d1:09:61:7f:
                    d1:84:53:96:57:b6:e5:40:ac:f2:90:f9:c2:b5:c0:
                    f7:47:7d:2b:77:75:a8:1f:a3:98:d5:50:24:58:7a:
                    77:60:3b:f8:e5:e2:fe:2b:19:63:8a:2c:ca:3c:ba:
                    b6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6B:55:5B:11:69:CA:72:B0:54:BA:7F:A3:F1:F5:6D:B6:EF:BF:72
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ca4a5f7e-00c1-4732-86ae-e8a56769f4ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:e7:bd:83:6d:d5:ee:b6:9d:55:a1:43:d5:09:95:54:11:19:
         ba:0f:f9:40:d4:14:1c:72:7e:d9:b4:83:e3:df:9c:86:c0:4d:
         35:36:a0:49:7a:91:27:55:3d:a8:19:53:77:33:97:20:32:0d:
         df:e4:16:d8:45:d9:ef:71:61:04:a0:98:f3:1f:d8:8c:b5:0b:
         45:30:89:0a:42:c8:fe:fb:d5:a2:1f:42:83:b4:19:94:76:5d:
         aa:1e:19:31:df:65:8e:19:00:57:41:e7:22:51:d0:3b:2f:9b:
         6f:bd:89:bb:ad:08:36:8d:d0:f6:79:24:d8:b0:d2:e7:65:c4:
         87:c7:55:fe:be:c9:d7:4c:11:5c:05:39:1e:23:45:8a:71:a6:
         79:61:e4:cb:60:ac:ee:f4:e1:25:b8:33:79:33:ac:7c:0a:a3:
         9b:54:55:20:4f:16:24:d0:0c:36:ec:ad:6b:aa:b0:fe:75:3e:
         72:ad:10:a3:75:da:49:3c:6d:93:dc:29:32:09:ff:b7:56:8a:
         44:02:f3:42:dd:77:26:54:b0:53:82:10:74:db:92:6f:60:36:
         f4:75:03:8f:41:97:3c:bd:54:45:db:71:e6:89:b1:6b:b0:94:
         b8:71:19:9b:31:77:7a:8b:c9:7c:c6:a0:78:4d:d3:a2:5c:90:
         52:30:d4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----