Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d88032d9-f954-409a-885c-ebd70834146a.roa
File:                     d88032d9-f954-409a-885c-ebd70834146a.roa (raw, json)
Hash identifier:          RFcJ8cbzyHFGMsVpjg9THJRm4idR8KfjixIO0ZGcZkk=
Subject key identifier:   B0:BE:7A:75:44:31:E5:3B:44:D1:C0:ED:0A:F8:A8:7E:81:5E:DB:99
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       46D1679FBAF9CDDAAE541C13E5216C2A233AFE27
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d88032d9-f954-409a-885c-ebd70834146a.roa
Signing time:             Thu 06 Apr 2023 00:00:00 +0000
ROA not before:           Thu 06 Apr 2023 00:00:00 +0000
ROA not after:            Sun 09 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d1:67:9f:ba:f9:cd:da:ae:54:1c:13:e5:21:6c:2a:23:3a:fe:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  6 00:00:00 2023 GMT
            Not After : Apr  9 23:59:59 2023 GMT
        Subject: serialNumber=493a7de016415e468548442366b4f82e3afce9bc2f9f1e9da2d9cbefb9d4fe24, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a4:29:36:ac:b6:41:6b:e0:22:b5:d5:f7:f2:
                    63:79:48:16:5a:f8:a3:4e:51:e5:c5:4b:c7:e2:26:
                    d0:81:b9:95:d5:2d:b4:82:8f:91:dc:b4:e9:8f:b6:
                    b8:73:a1:26:95:a2:ea:48:b4:db:59:3c:d2:0b:33:
                    0e:f2:31:f7:cd:3b:cb:32:2f:3b:79:9a:e7:75:db:
                    8a:4f:4f:25:73:92:9b:07:cc:1a:99:77:e3:ff:be:
                    bd:50:53:29:d1:bb:ed:91:84:42:96:c1:d5:9e:05:
                    ec:e9:dd:0d:c1:c2:0c:7c:08:7a:18:71:39:ee:94:
                    cc:d0:e5:ba:83:3b:47:0a:d4:bd:1e:8f:27:23:46:
                    aa:cc:ae:34:fa:90:a3:02:46:66:44:9c:62:b2:94:
                    7c:60:6a:98:c7:c8:c6:ea:7a:76:1f:66:02:a4:9c:
                    17:59:01:e5:86:62:95:a7:8f:e2:8b:38:2a:2a:2f:
                    72:72:ce:c9:52:2b:1b:9d:e9:65:1d:f3:13:0c:ac:
                    3c:85:8e:21:29:3b:1e:84:e2:43:b2:23:b0:a9:b2:
                    ec:ed:4a:e5:98:d9:d3:0b:0d:7f:85:86:4e:4c:c8:
                    78:5d:17:e1:d6:ff:1b:2a:de:91:e0:69:25:68:1d:
                    5c:e5:be:25:0f:91:73:c4:e2:26:60:91:bf:b4:9b:
                    31:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BE:7A:75:44:31:E5:3B:44:D1:C0:ED:0A:F8:A8:7E:81:5E:DB:99
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d88032d9-f954-409a-885c-ebd70834146a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:8d:87:ae:44:16:aa:b9:38:42:d3:36:a9:be:64:c7:a9:6f:
         b8:92:fc:31:70:78:15:58:c4:c0:2c:5e:bc:8b:b1:73:11:68:
         18:a7:6e:fd:32:52:70:b5:b8:a8:c9:66:14:19:49:d2:d0:31:
         5d:6e:45:ec:a4:e8:c1:f9:fc:69:c3:52:c8:1a:2a:03:93:bc:
         17:80:2d:9a:90:60:89:be:bc:18:ac:c0:39:19:01:2d:51:df:
         6d:d3:0d:08:44:91:fe:94:40:fb:d6:83:e0:a7:df:a3:32:63:
         12:b9:6d:54:9b:a2:64:50:c4:b9:e6:f6:cf:00:69:52:d1:11:
         6e:ee:5a:ff:42:55:21:7a:56:ec:ef:ba:ee:4a:3f:1b:46:bb:
         e3:41:0b:6d:85:f1:2b:40:c5:a6:3e:a3:d5:01:70:ef:61:b7:
         39:5d:08:f2:fb:36:72:45:1b:5c:78:20:83:00:be:7d:e0:47:
         95:9e:c7:5f:ba:7b:9b:86:78:6c:7c:9a:a1:ab:2e:a2:77:23:
         f9:56:50:87:46:c3:37:54:74:c7:bf:67:3e:df:24:07:f1:9a:
         73:f0:20:ef:83:53:60:46:16:60:ac:c6:4e:19:6c:6d:92:aa:
         d3:9b:3d:6a:65:2f:18:6e:8d:c0:3b:1b:79:82:44:ba:98:c4:
         09:8e:5b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----