Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e4c9f888-7068-4c72-beab-c163b3c1db0c.roa
File:                     e4c9f888-7068-4c72-beab-c163b3c1db0c.roa (raw, json)
Hash identifier:          NocDfGV2HoLAMTTWg03iuGmA83d1mfFbwnLADA3Xs6k=
Subject key identifier:   76:A0:C6:3D:43:98:F4:16:92:15:D2:9C:64:72:0C:39:43:F6:41:59
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6B022039569D5E7EBD55372371AD56D59E694563
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e4c9f888-7068-4c72-beab-c163b3c1db0c.roa
Signing time:             Tue 11 Apr 2023 00:00:00 +0000
ROA not before:           Tue 11 Apr 2023 00:00:00 +0000
ROA not after:            Fri 14 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:02:20:39:56:9d:5e:7e:bd:55:37:23:71:ad:56:d5:9e:69:45:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 11 00:00:00 2023 GMT
            Not After : Apr 14 23:59:59 2023 GMT
        Subject: serialNumber=e913da04c973f4feb322d5914b532e197d802ae633258cdf54ecb04fbf682de6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:15:57:d1:31:a8:e3:28:77:3e:67:1c:5b:0a:
                    c2:01:a4:0f:d1:e5:41:32:e9:c8:c3:fd:79:06:80:
                    fd:69:ab:06:9b:43:2e:e3:cd:6b:32:da:62:36:4f:
                    c2:ce:bf:d6:0f:ad:57:b7:14:d9:69:1b:91:db:b7:
                    be:5a:7d:e3:56:88:df:09:4d:ed:a5:88:22:81:48:
                    11:32:75:25:7a:38:c7:c4:21:ae:87:bf:b3:db:41:
                    93:bc:32:65:a1:e4:78:35:8f:af:a6:07:dd:39:84:
                    8b:90:94:02:31:5c:ad:af:62:96:d1:33:02:a0:9c:
                    b4:8b:86:86:c7:30:43:82:07:ff:4c:94:e9:c8:aa:
                    d7:73:f8:ef:76:9d:ef:fe:76:a5:ad:df:de:eb:7b:
                    01:45:9b:f5:d1:27:41:2d:8c:c0:6f:7f:73:71:8b:
                    39:f9:82:67:0d:23:6a:32:b1:e9:ed:4a:fa:b1:9e:
                    3a:a9:aa:d5:a0:2f:17:da:a7:61:34:bf:1e:87:02:
                    cb:7a:f9:6c:8c:06:60:84:fa:81:31:e2:66:85:81:
                    aa:cc:0f:e8:ce:ca:7b:80:67:63:c3:39:6b:ee:42:
                    d9:cb:5b:9a:cf:01:e6:69:da:63:ce:fc:9a:8c:5a:
                    79:5c:9f:82:3c:53:44:cb:2c:15:e3:14:95:6c:18:
                    da:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A0:C6:3D:43:98:F4:16:92:15:D2:9C:64:72:0C:39:43:F6:41:59
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e4c9f888-7068-4c72-beab-c163b3c1db0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:dc:24:7a:36:79:b6:10:1f:ea:5a:01:04:b8:8a:d2:a4:90:
         51:6c:09:d4:e6:b1:68:ec:26:0c:4f:f4:ca:b2:62:fe:32:0a:
         29:af:d6:2c:b6:69:1b:2b:b0:e4:a3:d2:8b:3c:b6:d3:35:0d:
         8a:dd:09:e6:e5:82:4d:21:e2:9a:87:d7:94:73:22:73:d1:d7:
         ca:db:1f:e0:c3:70:9d:30:d9:9a:1a:62:0b:82:4d:26:10:0c:
         17:c7:cc:59:cc:b8:f9:53:98:97:3d:08:a0:e7:35:3d:8d:3e:
         2b:0b:b5:9b:cf:a7:29:4c:6b:14:d7:68:c8:b1:9f:b4:e2:00:
         e2:12:b3:14:bf:f0:4d:4f:b8:85:58:22:e0:3c:d8:24:ee:e5:
         34:88:c3:17:91:6e:16:3f:17:2b:90:8b:8e:0a:84:9c:9f:8c:
         85:6b:da:7f:c7:c9:05:5e:de:fe:a9:7b:51:81:cd:ff:77:0e:
         90:d0:13:14:5c:18:6a:22:2e:1b:15:ce:f7:56:88:d4:ad:cc:
         36:c7:bb:b5:b0:47:95:de:3e:9d:07:73:ec:26:86:52:6d:3e:
         da:8b:fe:a5:06:5b:59:13:4e:6a:c1:d7:59:05:95:af:b9:76:
         d2:80:64:98:1b:b7:5c:13:3e:5e:be:fb:6f:da:72:ee:04:f6:
         7f:ea:1d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----