Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e21c7ca7-839b-4a23-b4c3-8a773ab3b507.roa
File:                     e21c7ca7-839b-4a23-b4c3-8a773ab3b507.roa (raw, json)
Hash identifier:          B0bGaujZx5jaH/RZBeog6UCkEAgTJlns/NnpV//l/oI=
Subject key identifier:   5E:18:DE:7A:ED:9D:13:2B:DD:4E:70:A9:5E:FB:6B:CE:B3:7E:AD:36
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6450E7E2B4E106AC86FBC2A43095DC50DF2E8F2B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e21c7ca7-839b-4a23-b4c3-8a773ab3b507.roa
Signing time:             Wed 24 May 2023 00:00:00 +0000
ROA not before:           Wed 24 May 2023 00:00:00 +0000
ROA not after:            Sat 27 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:50:e7:e2:b4:e1:06:ac:86:fb:c2:a4:30:95:dc:50:df:2e:8f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 24 00:00:00 2023 GMT
            Not After : May 27 23:59:59 2023 GMT
        Subject: serialNumber=3eea464f2a30cdde7742a42d93b32ced2173f7c9c1bdfaeaef0e706afcb50d52, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:a6:2f:e5:79:80:71:f5:35:e9:af:e5:55:
                    81:98:1f:08:d4:a5:93:6d:13:7c:1c:71:3d:3c:69:
                    7c:fd:92:86:a8:0e:58:fd:61:97:74:e9:ea:d4:d2:
                    f9:63:7d:9b:c2:2f:63:e3:b0:a8:cd:58:e9:9c:f3:
                    50:d2:7c:55:ae:c0:3b:b2:b3:96:a0:32:71:8b:39:
                    9c:8b:87:ce:e2:b6:77:f4:56:ff:26:17:fc:79:28:
                    0f:5f:d2:50:bc:fa:8a:53:dc:09:f6:d6:06:7a:e2:
                    0f:3d:f4:74:62:81:7c:44:ea:f4:cd:04:45:fb:8b:
                    22:53:a5:d6:68:f1:32:0b:92:61:f3:ce:1d:a0:32:
                    18:b1:74:25:92:00:3a:d1:79:f6:0b:a9:25:15:a5:
                    16:f5:d7:56:b3:f5:08:cd:ec:ae:c3:e3:90:00:f6:
                    26:35:ec:50:de:29:97:e3:c5:15:7e:c9:8f:81:d0:
                    6b:df:fd:77:13:78:a9:50:79:0f:2d:9c:35:04:e5:
                    32:20:92:8c:5e:e0:52:fb:41:0f:f1:31:76:28:59:
                    2a:ee:81:10:e3:b9:a9:d8:88:4d:3f:43:95:19:7c:
                    7d:f0:59:90:91:7b:3e:b7:37:d7:07:ec:a6:f3:21:
                    84:aa:bf:26:5e:69:8a:40:55:89:3d:7c:3d:b4:51:
                    59:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:18:DE:7A:ED:9D:13:2B:DD:4E:70:A9:5E:FB:6B:CE:B3:7E:AD:36
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e21c7ca7-839b-4a23-b4c3-8a773ab3b507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:2d:83:5f:41:ad:46:3e:2c:54:03:a3:91:9d:da:af:d1:eb:
         6e:de:2b:15:80:71:7a:d0:84:37:b6:7c:84:5c:9d:8c:c3:b6:
         2d:a1:92:3b:ea:d1:c8:d8:8f:f0:dd:ce:d1:f3:c9:73:df:c6:
         b5:6e:26:0d:98:7b:3e:c3:98:d7:76:a0:4e:dd:77:75:ea:81:
         a5:bf:25:6a:03:0f:78:d8:2b:1f:d4:a4:05:a9:60:08:1a:b6:
         a4:9d:25:a6:8e:ba:b3:94:ff:10:ec:fa:0c:6e:7b:f8:45:e3:
         a3:d8:4f:69:c9:cd:e8:cb:5b:71:26:12:65:1c:a4:5b:39:30:
         dc:94:34:32:bb:d6:ef:19:bf:22:62:78:1a:5c:04:0a:cb:ea:
         c2:f5:c2:89:d1:3a:36:fc:9b:84:4b:ec:f6:0b:06:19:ab:69:
         43:3d:a5:fe:e5:98:73:c6:ae:b2:55:a7:d2:6a:bf:e4:ee:6c:
         97:4b:18:ee:95:76:40:e0:17:70:98:a5:30:f1:4a:06:f9:51:
         09:f8:38:b4:3b:44:4b:9e:3a:60:57:f1:dd:e3:27:c6:0f:29:
         3d:46:30:60:29:e3:c5:30:a6:e5:d0:d5:d1:43:49:88:77:b6:
         e4:62:d4:07:9f:d2:3d:91:97:14:e9:25:4b:da:63:f4:08:08:
         0b:a7:ca:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----