Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e15a52cf-b4a4-4ef8-9e81-02f3aefd8290.roa
File:                     e15a52cf-b4a4-4ef8-9e81-02f3aefd8290.roa (raw, json)
Hash identifier:          yLqEDMd10pqTzni4IZW05hDyGZSEIxSWMd7sNo2MDuE=
Subject key identifier:   BD:1A:A6:51:1A:C1:A3:18:37:AD:E0:DE:20:42:C9:20:81:09:E9:8B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4178FB2D96594DB1F707F5EB6013D6B5136C53F7
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e15a52cf-b4a4-4ef8-9e81-02f3aefd8290.roa
Signing time:             Mon 24 Apr 2023 00:00:00 +0000
ROA not before:           Mon 24 Apr 2023 00:00:00 +0000
ROA not after:            Thu 27 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:78:fb:2d:96:59:4d:b1:f7:07:f5:eb:60:13:d6:b5:13:6c:53:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 24 00:00:00 2023 GMT
            Not After : Apr 27 23:59:59 2023 GMT
        Subject: serialNumber=078bca963c5e0fb0563c76e843d368d900fbd23e56a732b088fecb05358659ad, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:82:cb:cf:68:81:ab:95:df:72:5d:24:61:90:
                    3f:e0:a9:cf:1b:a7:4a:ea:72:54:97:4e:4f:f4:e9:
                    7d:f6:21:9e:34:29:00:09:3c:70:7c:24:b5:8d:3d:
                    e9:ad:be:37:ea:23:7d:c0:97:50:23:6e:48:84:c6:
                    b6:56:c8:84:a4:42:3a:a6:01:b3:05:ba:0d:b1:96:
                    f1:eb:95:ea:9b:18:0f:17:84:2e:81:46:8c:e5:e3:
                    97:9b:0c:b3:b6:1b:7c:28:22:59:79:d8:47:25:7e:
                    a6:64:cd:68:7b:60:e0:26:49:53:68:9d:80:10:3f:
                    74:d5:5e:4a:66:aa:d3:89:57:14:4c:41:6b:9c:03:
                    6d:c5:d3:3f:2e:6f:d8:17:af:2c:c1:d2:83:64:a5:
                    64:5c:4e:72:16:b9:fb:7a:10:56:f7:9d:e2:a6:c3:
                    56:c6:ba:d2:29:a9:d7:b6:8b:f6:ce:5b:c7:53:a8:
                    94:6a:7f:46:16:1f:24:2a:ec:3f:91:b8:0e:21:ff:
                    bf:76:28:10:44:25:79:fd:a1:02:fc:49:23:fb:c1:
                    30:d5:e9:af:1e:e3:a3:6e:01:2d:a5:c7:5f:c3:2b:
                    87:57:24:9c:62:02:53:ad:4d:8e:1a:ed:40:d8:8e:
                    1d:8e:3e:3f:6e:9a:f0:1e:cf:56:d4:1c:71:c1:ff:
                    39:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1A:A6:51:1A:C1:A3:18:37:AD:E0:DE:20:42:C9:20:81:09:E9:8B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e15a52cf-b4a4-4ef8-9e81-02f3aefd8290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:0d:f1:a3:bf:f8:fe:c9:8f:14:64:2f:24:2a:2e:6a:79:7a:
         54:d5:ef:7a:20:a1:81:09:00:c8:5d:03:11:60:29:be:47:e0:
         01:e4:8a:02:98:98:00:df:5f:b5:57:7b:5a:5a:df:45:f0:ed:
         95:72:a1:ea:9c:10:66:b0:8a:b3:40:18:e6:11:50:d2:3b:54:
         6a:e8:ed:b2:cb:c7:cf:68:da:1a:f7:da:ed:13:18:e9:ad:1f:
         63:be:d4:dd:89:ce:23:d8:5b:53:67:1f:27:26:9e:4e:f8:3c:
         fc:ee:58:e0:e0:04:50:b0:9e:1d:92:0b:16:e6:ce:5e:bd:de:
         74:29:e9:98:bb:b4:e9:34:ec:e1:82:00:ff:2d:52:28:9c:31:
         98:1c:e2:d8:73:eb:f2:31:97:70:15:bd:81:62:04:40:c1:79:
         03:ae:32:69:d7:6a:7f:38:19:fe:57:3c:d5:ef:d1:20:03:97:
         ff:bf:5f:22:eb:d3:9b:bf:f5:6f:1a:f7:aa:36:68:b6:ad:b5:
         dc:ca:5a:4a:17:b3:3e:eb:a0:b7:94:e7:8d:85:85:0a:aa:bd:
         9c:91:40:dd:92:18:ea:7c:e6:d8:6c:be:66:e6:05:ad:c1:ab:
         92:79:31:53:dc:a1:49:cd:d7:34:06:f1:f1:4a:6e:d1:5a:b7:
         e7:36:1c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----