Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/15742c75-ba48-469e-a707-130019267eb6.roa
File:                     15742c75-ba48-469e-a707-130019267eb6.roa (raw, json)
Hash identifier:          KjnqjTOBI+9+Rj0sqyYuhXLDHt2PY1pa8mApl5Pi3gk=
Subject key identifier:   BF:5B:3F:53:3E:1A:66:88:05:3E:73:D2:48:37:E3:E7:42:E9:DC:89
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       471BEE692194159000C0807324E2F1697E35F8D5
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/15742c75-ba48-469e-a707-130019267eb6.roa
Signing time:             Mon 20 Feb 2023 00:00:00 +0000
ROA not before:           Mon 20 Feb 2023 00:00:00 +0000
ROA not after:            Thu 23 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1b:ee:69:21:94:15:90:00:c0:80:73:24:e2:f1:69:7e:35:f8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 20 00:00:00 2023 GMT
            Not After : Feb 23 23:59:59 2023 GMT
        Subject: serialNumber=5267bf902988f062e5106899d756287ecbe77588513e6df91998f54b233b8630, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:d0:23:4a:51:ed:f8:cb:b8:b5:d8:06:ac:
                    49:43:e5:2c:1e:31:58:85:cf:b5:2c:02:ca:1e:b2:
                    43:fb:7d:66:99:f2:17:d7:58:21:ac:97:ed:ee:41:
                    60:fa:b4:d5:4b:7d:1f:77:69:46:c1:01:c4:6f:27:
                    60:6a:e1:6f:93:0d:44:a0:3f:0e:c5:82:f1:7e:30:
                    f6:19:9e:e8:91:6d:70:fc:2e:e8:38:56:94:43:85:
                    cf:09:b1:5a:01:89:0d:e8:12:e4:2a:42:b7:38:2b:
                    b9:52:17:b5:4a:83:94:34:99:86:52:3d:08:59:47:
                    0a:5b:68:f2:2b:6f:79:0f:57:7b:00:2d:97:5e:3c:
                    16:b5:e6:30:ec:83:be:32:9f:7a:c2:7f:f7:cb:93:
                    08:45:b8:ee:03:98:d2:f7:07:e7:66:e0:24:b0:97:
                    2e:bc:c2:f2:d8:44:88:9a:91:41:8f:76:ca:c7:c0:
                    8d:c7:88:81:28:78:a7:90:b8:06:35:8c:7a:6e:51:
                    45:21:39:49:8c:51:80:2b:6d:01:60:b9:ca:20:55:
                    8f:a2:96:b9:07:04:5c:26:5f:da:fc:1c:f8:82:76:
                    df:89:a3:89:14:82:43:cb:d7:b5:55:4a:aa:cf:2b:
                    62:0b:bd:b3:09:08:5a:ae:ed:63:55:45:00:c6:79:
                    92:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5B:3F:53:3E:1A:66:88:05:3E:73:D2:48:37:E3:E7:42:E9:DC:89
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/15742c75-ba48-469e-a707-130019267eb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:4d:fa:d5:0b:88:b4:b9:04:8a:2c:37:4a:2a:4a:7e:67:57:
         90:b2:e0:a8:3a:6a:28:13:c7:d9:ee:ca:0d:80:3c:a5:41:ea:
         58:25:40:e1:e9:27:0b:6d:05:9e:5e:1f:5c:f3:9f:29:98:9f:
         48:03:68:08:00:29:45:24:9f:1b:f2:a0:a8:9a:a4:b7:cc:fc:
         2c:25:ed:e6:ea:28:2d:01:d0:f0:f3:dd:ba:d5:a9:60:e2:94:
         14:0d:3c:81:8f:7a:c2:ee:26:d2:eb:e4:b6:97:d7:45:b3:9b:
         57:22:cb:0f:37:7f:7c:1c:44:32:ef:61:89:d9:81:7c:be:59:
         32:ec:07:25:1d:c8:0c:b2:69:06:83:a0:2b:3d:80:e0:31:3f:
         53:b2:04:39:82:e1:3b:87:3a:4c:96:e2:f2:40:87:63:4d:28:
         6d:86:61:05:ca:3f:f1:28:1c:f3:a7:c0:ef:47:fa:fb:09:62:
         be:50:67:d6:dd:6c:7d:4b:1f:c2:88:2a:a1:88:0e:cc:a2:88:
         82:4a:48:77:d8:cb:b2:2b:d1:51:47:b2:12:75:b9:4c:0e:a6:
         80:e2:ae:77:db:9b:03:be:4e:7e:37:56:f0:12:2b:11:a3:1a:
         aa:60:35:c8:a9:5d:a4:09:ce:f3:d6:da:8f:c8:a8:47:18:11:
         0a:83:60:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----