Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bee955f-9579-4219-b536-8546d980a234.roa
File:                     4bee955f-9579-4219-b536-8546d980a234.roa (raw, json)
Hash identifier:          uhS3YDQMKy6QKRLFNqH4PKdmmgJ78sLb4Y/uIJjVqGk=
Subject key identifier:   42:40:E2:AC:AA:44:94:39:07:AA:58:1A:FA:DA:05:0D:C4:56:1E:9E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0DD97F8830F5C08A6007F09E8968543249A28942
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bee955f-9579-4219-b536-8546d980a234.roa
Signing time:             Tue 17 Jan 2023 00:00:00 +0000
ROA not before:           Tue 17 Jan 2023 00:00:00 +0000
ROA not after:            Fri 20 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d9:7f:88:30:f5:c0:8a:60:07:f0:9e:89:68:54:32:49:a2:89:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 17 00:00:00 2023 GMT
            Not After : Jan 20 23:59:59 2023 GMT
        Subject: serialNumber=0d0c85a417978afd3105480ae23b42351e95e78cc362f8a690946d1a6b3e7145, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3e:2b:e1:da:2c:29:40:8c:e7:cc:5b:aa:9d:
                    ff:55:dd:eb:e3:34:32:0e:5e:ad:6b:83:f5:13:42:
                    a1:20:6e:c8:08:9f:19:b3:59:32:ad:1e:8a:49:b5:
                    14:f3:3e:08:e6:aa:b6:db:45:c7:2d:55:8f:31:66:
                    8e:db:73:54:44:67:c7:0c:dc:da:0e:cb:f7:2b:9d:
                    d7:6b:f5:c6:ed:42:8d:33:d7:43:d2:51:41:b3:38:
                    b1:b5:27:33:57:03:a8:7f:a3:d0:ed:86:49:17:17:
                    72:a7:aa:e8:1c:ca:0a:71:af:2b:7a:25:5b:95:e0:
                    6f:dd:9a:ba:98:70:ea:86:86:ab:ed:51:68:15:68:
                    d1:c4:83:71:cf:21:48:f7:a5:61:c7:c6:be:e0:b6:
                    71:9e:9f:da:23:3a:f7:e1:46:4d:49:01:9a:46:55:
                    51:9f:5f:f6:e1:4f:e3:ce:a9:de:b5:eb:f7:87:af:
                    fc:80:e1:f5:31:fe:75:fc:32:f1:93:79:ea:ba:a4:
                    bc:65:b0:02:45:19:0a:dd:18:04:1c:0b:70:0c:8e:
                    f9:38:b4:bc:75:e0:a6:11:df:cc:75:44:b8:f2:64:
                    a0:94:89:ce:02:82:d4:45:20:5c:82:40:cb:bf:09:
                    33:14:c2:4c:01:d7:b3:40:27:78:4b:71:9b:71:3c:
                    2d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:40:E2:AC:AA:44:94:39:07:AA:58:1A:FA:DA:05:0D:C4:56:1E:9E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bee955f-9579-4219-b536-8546d980a234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:71:39:46:f9:5a:56:62:68:fc:1a:d4:bc:33:87:c8:a8:c1:
         60:86:65:74:72:b3:5e:e5:6a:c2:a8:e7:77:83:2c:3b:4e:37:
         91:05:69:c3:b3:3a:eb:52:42:3b:bb:2e:e4:bc:a1:6f:e1:61:
         0b:89:6d:87:d4:d3:59:5c:cc:99:ce:01:23:8f:47:60:90:e2:
         43:8c:0e:de:9b:44:83:e7:69:6d:2a:7f:ee:d8:37:70:82:a8:
         e9:a4:93:dc:f4:18:52:5b:0f:e9:f1:49:05:06:ca:a1:9a:9d:
         06:a7:3d:3d:9d:f2:c7:f7:0a:92:26:0b:a9:8f:54:f0:10:4b:
         ad:94:5a:05:2a:1a:c8:23:60:9d:49:d3:f9:28:b0:52:60:30:
         07:06:e5:03:67:1a:67:72:02:50:5d:82:2e:a0:e7:b0:bb:a8:
         e7:c9:c2:e5:42:1a:0a:bb:9d:16:3e:47:4c:51:2b:d0:c6:04:
         f3:25:38:0e:39:13:64:e4:1b:1e:b7:d3:09:fe:f8:c2:0f:b6:
         ab:c5:12:e4:cb:ae:d6:80:a1:db:cc:48:24:78:83:9a:a3:c5:
         5b:a2:d8:d5:1c:2f:70:2b:89:ff:a7:68:f0:47:2e:26:e6:03:
         e6:aa:29:e5:a8:87:0c:52:57:38:97:a7:11:ef:63:06:97:dc:
         31:e2:d7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----