Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e44256a8-a764-456c-b570-e5e7742d950b.roa
File:                     e44256a8-a764-456c-b570-e5e7742d950b.roa (raw, json)
Hash identifier:          wkURYlvw18HuaScXfgU4lnM/AxQRNeur2bTKUhCpdPA=
Subject key identifier:   89:B3:A1:C0:FA:53:EB:32:7A:CD:EB:B0:7C:F6:39:56:53:C5:BF:EE
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4F5246C07CCB1C0579CF1C09608D70769F74A155
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e44256a8-a764-456c-b570-e5e7742d950b.roa
Signing time:             Thu 30 Mar 2023 00:00:00 +0000
ROA not before:           Thu 30 Mar 2023 00:00:00 +0000
ROA not after:            Sun 02 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:52:46:c0:7c:cb:1c:05:79:cf:1c:09:60:8d:70:76:9f:74:a1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 30 00:00:00 2023 GMT
            Not After : Apr  2 23:59:59 2023 GMT
        Subject: serialNumber=bb45dd8fe49b45a4a8cb6e8f5646cd0c3f784948b0cdcaabf541b8655a510902, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2a:55:4f:35:34:2e:98:60:28:fc:50:c8:d1:
                    c2:af:15:37:f7:0f:da:61:fb:22:2c:55:44:22:56:
                    e2:cc:43:1c:16:9a:6b:5e:77:e4:07:61:b0:80:70:
                    08:9f:b7:79:db:bc:f0:16:d7:a9:4b:d5:1a:93:87:
                    54:91:15:48:65:7c:0f:b7:64:51:3c:a3:f2:a7:09:
                    fc:f5:c4:96:e4:f9:e8:b2:24:04:c8:3a:aa:78:12:
                    8d:88:2d:a3:50:de:fc:cd:a9:49:ba:e7:7d:c8:0e:
                    c8:a4:8b:ec:4b:87:07:ca:e8:ef:77:17:74:58:2b:
                    36:0a:a2:58:2e:52:86:d3:ee:5c:6e:fe:59:e4:96:
                    86:3a:eb:d6:7b:6d:8b:57:93:dc:bc:4d:b6:01:4d:
                    23:9d:0c:bb:9b:77:4c:93:0b:01:33:2a:1a:65:54:
                    9f:2e:2d:74:1f:d9:a7:68:dd:67:84:db:85:3e:85:
                    e0:38:ca:d4:ae:fe:ce:24:0a:da:78:ab:da:14:ee:
                    33:f8:8e:73:ff:13:c2:db:b7:3a:8c:da:52:34:e7:
                    e4:c6:d4:89:16:11:4a:aa:1f:38:a3:7f:9e:08:a3:
                    29:bc:9d:f4:48:11:57:22:c4:e0:02:25:44:38:a1:
                    e7:36:3a:b2:9f:e1:7b:09:13:9c:5b:ff:64:76:c8:
                    c5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B3:A1:C0:FA:53:EB:32:7A:CD:EB:B0:7C:F6:39:56:53:C5:BF:EE
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e44256a8-a764-456c-b570-e5e7742d950b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:60:52:d9:e6:ef:5a:82:31:4b:75:30:75:d1:33:bc:69:1f:
         e1:ef:a6:21:1b:00:bb:0c:02:55:19:94:0f:1b:c7:be:94:88:
         3c:d2:ea:c7:44:65:5c:71:2d:9e:b0:41:2d:c0:47:92:de:4e:
         b3:54:90:8f:98:ba:d5:af:d1:82:a5:ba:6f:86:fb:9e:7c:ca:
         58:96:16:24:74:97:c6:92:68:48:1b:5c:f9:d9:de:bf:6e:22:
         81:2c:ef:cd:04:1f:09:64:28:b1:6a:b3:05:66:ec:69:9c:a7:
         38:b8:e7:ef:3c:c2:18:91:8a:33:f5:91:73:41:6f:2c:39:ab:
         ad:06:95:59:de:83:52:e4:90:e3:62:e2:73:c6:c2:79:3e:92:
         73:bb:71:1d:55:f4:02:13:35:9e:b5:b0:50:a5:6c:69:50:df:
         b3:ae:6a:87:c9:28:30:29:4f:bf:53:89:74:d2:fb:63:c9:bf:
         60:d3:f0:9d:ca:c8:f8:b4:6b:2b:aa:47:d6:f2:90:e1:b3:64:
         2a:1d:aa:bb:59:38:db:5d:9e:d8:d0:98:93:13:4e:4f:93:7e:
         34:25:e4:53:37:e8:e8:3b:b6:15:64:9b:50:bd:5f:a9:3e:2d:
         a4:23:73:60:6f:bf:ea:f6:a5:2d:96:72:5a:c9:41:35:16:5e:
         84:8a:e0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----