Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1a8ea202-f745-4bd5-9695-a2dddd51fbc8.roa
File:                     1a8ea202-f745-4bd5-9695-a2dddd51fbc8.roa (raw, json)
Hash identifier:          ycNJ0+4BzZoNe9VhcBU3XmIyff9xBWciEYuFpwe6kCk=
Subject key identifier:   E0:02:8F:22:EC:BB:90:CE:77:F5:B4:E9:B7:07:45:41:F0:D9:38:64
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5BAEED7DA14D536441106694453A869CBFD374FE
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1a8ea202-f745-4bd5-9695-a2dddd51fbc8.roa
Signing time:             Mon 13 Feb 2023 00:00:00 +0000
ROA not before:           Mon 13 Feb 2023 00:00:00 +0000
ROA not after:            Thu 16 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ae:ed:7d:a1:4d:53:64:41:10:66:94:45:3a:86:9c:bf:d3:74:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 13 00:00:00 2023 GMT
            Not After : Feb 16 23:59:59 2023 GMT
        Subject: serialNumber=1d455e60ff43a5af5c2c9e9432465bd3a25e3e39312523a46d7ccc7b0968667c, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ee:6c:4d:ba:34:90:b2:71:22:84:d9:6b:2f:
                    3c:6e:0f:7f:1f:59:63:9a:95:4f:b5:dc:6e:17:7a:
                    2b:21:10:ae:9b:3f:0e:25:30:a2:e0:76:90:e6:d8:
                    96:75:25:f6:45:c1:3f:8c:d6:6a:59:1c:bb:1d:4f:
                    e5:c1:36:7f:ca:4c:29:78:c7:5f:10:73:53:ea:9f:
                    c3:59:c4:47:c1:69:24:06:fe:b0:13:54:55:50:11:
                    68:e1:8a:70:f8:05:df:2e:32:d2:ae:10:a9:9f:cf:
                    b2:81:39:f4:0d:78:30:a0:90:44:30:96:6e:75:f7:
                    30:5f:7b:79:4e:61:a0:29:02:5a:91:b6:5b:5c:85:
                    55:c6:d6:ac:4c:9d:76:63:0f:9c:4a:b4:68:a4:63:
                    4a:b3:b1:5a:1b:f3:61:80:e6:f4:2e:5b:4d:59:89:
                    26:28:89:40:32:5a:d3:12:63:27:ff:49:70:65:63:
                    69:ec:0a:bf:4b:0c:56:d7:0c:25:2f:7f:40:00:18:
                    79:2a:7f:86:d1:d9:3a:5e:95:8b:d3:83:cd:90:10:
                    e9:f8:e1:1f:87:d1:05:cb:3a:dd:a7:0f:bf:79:ef:
                    1d:db:1c:86:9c:21:42:04:d8:b5:18:e5:43:b3:2c:
                    ca:fe:03:7b:e0:84:93:2e:08:4e:f6:1e:49:77:cd:
                    76:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:02:8F:22:EC:BB:90:CE:77:F5:B4:E9:B7:07:45:41:F0:D9:38:64
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1a8ea202-f745-4bd5-9695-a2dddd51fbc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:38:83:39:0c:58:ea:cc:da:00:19:c4:35:3d:63:2e:5d:f4:
         15:c8:63:7b:dd:41:c9:fb:fc:67:39:f1:02:cc:a3:c8:47:e7:
         89:10:dd:59:9c:8c:7a:1a:9f:8e:1c:c8:0b:64:7c:0c:41:36:
         37:60:08:18:52:78:73:7a:dc:64:a6:94:fb:4e:e3:5e:66:75:
         86:74:51:b3:32:69:e0:50:f1:d1:55:21:2c:67:3d:ee:35:28:
         b4:3a:65:fe:94:3f:a6:3a:3a:12:be:ba:75:61:cf:b2:5f:b7:
         16:4f:d8:ac:0e:9b:86:45:09:3e:11:13:dc:01:4a:8a:dc:14:
         be:1a:73:de:b8:19:16:3c:93:d1:de:06:90:d1:59:6c:4a:21:
         8b:a4:bb:58:d3:5c:bc:1e:69:ab:7d:7f:ba:3d:75:f1:54:07:
         6b:14:92:84:01:91:1d:66:0f:fa:a3:c2:a5:87:7e:27:26:2b:
         43:f0:95:fe:b2:f3:56:76:33:5b:47:a4:0d:fa:93:00:e1:e9:
         65:95:8f:ec:0b:fc:ea:ae:3d:6f:fd:50:1a:6c:cb:43:f0:9c:
         0e:6e:8a:12:7c:9f:af:9c:40:da:4e:db:09:58:b7:52:32:31:
         37:75:28:f4:a3:cb:e6:44:78:6c:2c:cb:7a:ba:1e:e3:92:24:
         26:cc:7f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----