Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/154ea125-1086-43f0-8f06-8611461e9d56.roa
File:                     154ea125-1086-43f0-8f06-8611461e9d56.roa (raw, json)
Hash identifier:          LCHLWFnU2oGyfMwoWM1GlTF4mvj+RJYJif92skEXBs0=
Subject key identifier:   89:5F:98:6B:65:09:B6:34:85:B4:6B:A3:71:AD:45:57:16:1E:BF:88
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       65C2A64231D110B1F678DE28AF99A223DB3560B8
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/154ea125-1086-43f0-8f06-8611461e9d56.roa
Signing time:             Mon 14 Nov 2022 00:00:00 +0000
ROA not before:           Mon 14 Nov 2022 00:00:00 +0000
ROA not after:            Thu 17 Nov 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c2:a6:42:31:d1:10:b1:f6:78:de:28:af:99:a2:23:db:35:60:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Nov 14 00:00:00 2022 GMT
            Not After : Nov 17 23:59:59 2022 GMT
        Subject: serialNumber=8557a2dffa823ad7a3e4884c3d8ddeb3264dd243825488267a28292bbbe869ac, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6b:1e:38:e7:69:b6:b3:dd:b1:dc:bc:a4:a5:
                    9b:78:da:d8:1b:d9:7f:75:52:c8:38:f8:9c:fb:58:
                    bf:c9:72:d7:a1:07:9a:e1:7f:24:fd:04:05:53:47:
                    f5:6e:2b:ae:11:63:cf:a5:82:19:d6:d2:a7:1d:f7:
                    0d:a6:7e:8d:c4:89:be:10:13:78:03:91:dc:2b:3d:
                    10:46:cc:14:04:f0:9b:3b:8c:ca:86:68:3b:d4:a2:
                    4f:4d:c3:d9:50:77:b4:f4:e7:f7:35:62:a9:13:11:
                    d8:1e:09:3d:d9:db:5d:58:90:b8:94:f5:0c:7b:d7:
                    ed:d9:0a:82:86:81:e5:e8:40:ed:aa:b9:55:7e:60:
                    13:cf:00:99:32:24:de:55:5f:ed:cb:d9:a6:70:c4:
                    04:f1:b1:91:ef:73:4e:04:a1:47:fe:e8:46:a2:95:
                    93:74:2b:88:f8:4f:89:28:5e:f7:b7:2a:a9:1a:a2:
                    d2:a9:75:d4:9b:d0:d8:55:4c:5e:32:eb:e5:d8:17:
                    28:34:4a:f0:7d:40:ed:cd:4c:d1:ea:39:07:e6:31:
                    85:0a:d2:26:66:0f:5d:5c:19:28:4b:10:80:22:66:
                    9e:71:9f:8a:56:32:af:d4:25:37:fe:80:9d:9a:f5:
                    05:ab:da:16:97:b9:3d:23:0c:a7:f7:6f:28:49:83:
                    a5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5F:98:6B:65:09:B6:34:85:B4:6B:A3:71:AD:45:57:16:1E:BF:88
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/154ea125-1086-43f0-8f06-8611461e9d56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:80:06:c7:eb:92:c9:02:c7:98:d2:0f:e7:a2:a1:93:c0:d3:
         ad:fd:50:ca:9f:7f:4c:df:0f:31:08:7c:63:28:fc:7d:49:7c:
         43:aa:e2:25:a7:63:e9:4c:27:23:e2:3f:72:a9:5b:8c:98:f4:
         46:df:13:73:33:98:5c:4a:9d:4a:4b:56:a5:2f:c7:fe:5b:47:
         96:0d:d1:72:d7:9e:68:85:03:59:25:e0:f4:93:20:ee:36:bf:
         90:1e:71:a5:33:0f:6c:f7:57:b7:80:d5:0a:b6:f8:49:73:d7:
         1e:0b:06:fe:23:e6:c1:b7:16:98:1e:b3:7d:5d:53:65:0d:6b:
         3d:b5:ae:b1:41:5c:ce:1a:36:9c:5f:53:58:97:c1:55:fc:aa:
         64:0a:96:69:db:56:7c:ff:f8:8b:00:f4:38:48:2b:a4:fd:01:
         27:ea:87:2e:ab:a7:3b:e0:10:a3:78:4c:65:bb:13:e2:6d:81:
         6a:1b:4f:7a:1d:9d:7a:7e:54:e9:a2:66:60:18:99:53:76:65:
         34:85:a2:a8:66:20:77:34:16:57:15:2d:74:ef:91:15:ae:a7:
         da:ce:98:5a:06:d8:6d:5c:71:69:78:3e:c6:67:e9:88:78:92:
         39:50:37:78:f9:7f:ef:af:27:d3:87:4d:6c:f8:b4:be:41:28:
         2f:31:2d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----