Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/54571966-0bde-473c-ac1f-aedcc363db12.roa
File:                     54571966-0bde-473c-ac1f-aedcc363db12.roa (raw, json)
Hash identifier:          YxM1JkHJpjp005phxygDPgoZhZ4q4wpXVjtoV+VBAW4=
Subject key identifier:   49:2F:E7:25:44:C0:BC:53:AE:E5:84:C5:8E:0C:DC:26:5C:17:75:CD
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       304556D501E8D8A690B1E76DC493DF6B8D55968D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/54571966-0bde-473c-ac1f-aedcc363db12.roa
Signing time:             Tue 21 Feb 2023 00:00:00 +0000
ROA not before:           Tue 21 Feb 2023 00:00:00 +0000
ROA not after:            Fri 24 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:45:56:d5:01:e8:d8:a6:90:b1:e7:6d:c4:93:df:6b:8d:55:96:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 21 00:00:00 2023 GMT
            Not After : Feb 24 23:59:59 2023 GMT
        Subject: serialNumber=02da16d4dd748745415f120686cbbcd87b40a13a777a0a36d02e86b27e30674f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6a:44:85:b2:3a:59:3c:3f:3d:94:e6:e0:45:
                    9a:ec:79:84:41:6b:8b:ab:bc:00:d3:5a:d2:48:6e:
                    78:62:4e:c3:31:ce:bd:15:20:53:57:89:9c:93:09:
                    01:cc:aa:79:9f:c5:5d:5f:9c:4e:72:91:7d:87:e7:
                    52:91:56:b8:17:6f:c3:f5:b4:11:94:05:a2:04:c3:
                    3b:b2:d1:bf:9b:fa:16:d5:60:e3:4e:68:c2:64:e2:
                    76:fe:1c:d5:57:a9:13:43:62:24:0b:5c:9f:4f:41:
                    88:a6:94:44:e3:ad:2d:af:56:72:02:07:85:97:0f:
                    c4:93:ad:63:54:8b:03:94:43:27:b1:34:9a:da:8d:
                    f7:b8:29:9d:5f:d8:c2:a5:dc:5f:0f:a6:3b:7a:ee:
                    10:95:85:36:b0:af:47:ef:a4:e9:b6:b6:08:36:69:
                    8b:9d:90:1a:de:c2:c0:44:27:23:78:c3:ee:c1:e2:
                    22:36:d3:41:2c:f2:43:ef:7d:0b:6f:4f:3b:5b:b5:
                    7d:1d:87:c6:8d:b6:72:2e:68:d3:2c:ed:41:20:07:
                    14:47:93:8b:b9:25:e9:a3:72:58:eb:6d:05:13:54:
                    cf:df:b1:e2:c6:2d:31:9a:46:56:fd:d1:94:5e:fc:
                    36:2f:de:8c:d9:b5:21:6b:1f:07:cc:7c:88:3b:ea:
                    62:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2F:E7:25:44:C0:BC:53:AE:E5:84:C5:8E:0C:DC:26:5C:17:75:CD
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/54571966-0bde-473c-ac1f-aedcc363db12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:72:a0:7f:19:16:c9:6f:54:b0:ab:87:6e:9a:c3:96:7c:72:
         10:59:0a:99:52:72:7d:03:2b:28:c4:08:c2:d5:54:0f:ce:13:
         41:7c:18:32:3b:40:17:82:04:71:9f:1e:4a:3f:aa:a1:c1:07:
         c9:dc:47:b6:3d:4d:6d:39:94:86:01:8a:43:77:d8:ee:31:27:
         d9:96:b2:24:61:45:8f:d3:c1:f6:3f:14:69:c7:a3:9c:d0:a8:
         c8:f8:05:4b:eb:79:18:d4:64:0a:8d:24:66:74:57:d5:28:0d:
         f9:dc:dc:53:c4:5d:ce:99:53:31:81:87:3d:76:b9:dc:0f:7a:
         0d:93:f9:45:79:76:d2:81:68:81:e4:4d:22:01:1a:38:91:88:
         20:19:99:2e:3c:15:ce:5f:2e:c5:8e:6a:97:60:fe:17:cd:27:
         56:13:58:c2:17:b8:3d:2d:eb:63:bd:9a:b5:57:67:62:ea:69:
         52:0d:4c:09:91:19:4d:28:a7:35:a6:b9:7a:9b:00:c6:ec:e5:
         cd:af:7c:35:26:7e:be:b1:85:26:03:b1:ea:32:f9:70:a6:fa:
         1a:1d:3f:16:d7:81:05:aa:c8:93:98:9e:9e:92:12:1f:45:20:
         3b:1f:c7:c0:63:a5:6e:ca:cd:a5:4f:57:32:ff:14:62:38:ff:
         ea:fd:29:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----