Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e16e2547-f746-4e24-8c3d-0c12f61b1261.roa
File:                     e16e2547-f746-4e24-8c3d-0c12f61b1261.roa (raw, json)
Hash identifier:          eCoq1zQJo1S5cIUuKMS1tSw/NFvEqWVvq5BQbYrviv0=
Subject key identifier:   F7:27:E9:0D:6A:60:C6:2F:61:47:1D:62:44:53:5B:4E:0F:0E:C1:51
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2B650E273F67150D47AC25CC186F9A8C6A482C4D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e16e2547-f746-4e24-8c3d-0c12f61b1261.roa
Signing time:             Fri 28 Apr 2023 00:00:00 +0000
ROA not before:           Fri 28 Apr 2023 00:00:00 +0000
ROA not after:            Mon 01 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:65:0e:27:3f:67:15:0d:47:ac:25:cc:18:6f:9a:8c:6a:48:2c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 28 00:00:00 2023 GMT
            Not After : May  1 23:59:59 2023 GMT
        Subject: serialNumber=e22ff552ed3701a87d1fdc4a9299e19c8cc06f4913fb638032743d2134f3dd7f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:15:77:d7:e9:df:40:ae:a1:59:30:68:25:54:
                    7a:2d:39:ab:b8:3c:9a:53:5c:39:5d:b8:61:25:f0:
                    b4:56:90:10:6d:4b:69:9c:3f:3e:1e:8a:89:96:d3:
                    c3:02:8f:cf:ef:de:c2:55:55:f6:c9:5f:78:b0:78:
                    d5:d4:21:a4:da:8e:f4:e5:46:7d:46:21:21:ef:43:
                    9b:95:01:1d:51:bf:0b:f9:94:3a:60:a7:53:11:17:
                    7b:c2:e4:04:3f:df:75:e9:1a:1b:8c:dc:98:49:c8:
                    d4:8e:ab:7b:9d:7e:22:a4:62:ec:a0:b9:35:83:63:
                    b3:75:b5:44:1a:9f:1d:80:af:a8:77:b2:48:61:30:
                    57:f7:ee:8e:5c:0f:3f:23:e3:39:8f:3c:b8:4d:de:
                    a3:23:ab:7b:57:b9:f2:52:fe:2c:e1:fd:a0:70:85:
                    83:40:5f:97:9b:e7:35:a5:5d:81:0c:b7:13:c4:ec:
                    85:3b:06:bd:5c:4d:53:c7:88:86:00:fa:90:fd:2f:
                    1f:f6:37:44:89:e1:ce:79:ab:79:2a:01:a1:dd:9e:
                    8a:46:dd:32:fb:cd:7c:46:9c:c6:7e:ea:a9:46:7c:
                    15:33:62:3c:41:1d:f2:4c:a8:67:9f:71:13:f6:c3:
                    dd:64:82:a1:b4:f5:96:fa:8a:69:6e:65:8a:56:a2:
                    f9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:27:E9:0D:6A:60:C6:2F:61:47:1D:62:44:53:5B:4E:0F:0E:C1:51
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e16e2547-f746-4e24-8c3d-0c12f61b1261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:79:df:ef:7b:2b:9d:8a:77:d1:62:f2:9a:b3:27:fb:08:a6:
         8b:08:ff:96:ae:a6:d5:de:c1:4c:5f:fa:15:13:0a:5a:1a:54:
         18:12:2f:37:d5:76:26:93:2e:8d:80:fc:63:09:95:8d:e0:fd:
         13:c1:b2:25:c9:f6:78:8f:89:b3:7f:91:2e:f8:27:42:32:26:
         53:58:27:76:9d:87:c3:de:8c:fc:8e:9c:b5:0b:2d:10:ab:fd:
         0a:19:af:4f:7b:d7:58:c6:8b:ed:d9:cd:9d:e1:b2:d9:e7:fb:
         b1:3a:d8:38:23:02:fb:d7:fe:b6:3b:84:dc:d8:1f:c5:bb:69:
         e7:db:bc:34:d8:97:1d:b3:01:ab:57:d7:23:7f:cf:f1:00:d7:
         c1:2e:89:0e:3f:e5:61:4f:e2:82:e5:c8:16:06:91:ee:26:c5:
         ef:64:7f:25:df:1c:b9:56:73:1e:bb:86:4d:e3:7a:48:04:b9:
         d4:d5:30:9a:5a:1e:62:8c:8c:12:20:13:7d:a4:21:fa:33:50:
         7b:de:2a:b4:97:39:cd:4f:e6:b2:bc:58:b7:c1:8c:47:5d:d3:
         82:87:24:f8:d5:1d:83:2b:83:82:8a:30:b9:67:3a:73:11:62:
         52:36:62:52:08:8e:b9:a5:05:1a:d1:71:a0:99:7c:1a:d4:6b:
         19:76:2b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----