Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7e07667c-496f-4812-b566-479ec8704494.roa
File:                     7e07667c-496f-4812-b566-479ec8704494.roa (raw, json)
Hash identifier:          Erz7aGn4OsGW+T5cKl5FVrafpmjupcubguTeBo3HPtE=
Subject key identifier:   71:70:44:8D:78:D8:DC:29:0F:BB:D1:2F:7C:D3:70:1A:C0:18:D2:FB
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       30CC43F9BC8A7473BB92E6055051F619D90D4562
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7e07667c-496f-4812-b566-479ec8704494.roa
Signing time:             Thu 02 Mar 2023 00:00:00 +0000
ROA not before:           Thu 02 Mar 2023 00:00:00 +0000
ROA not after:            Sun 05 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:cc:43:f9:bc:8a:74:73:bb:92:e6:05:50:51:f6:19:d9:0d:45:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  2 00:00:00 2023 GMT
            Not After : Mar  5 23:59:59 2023 GMT
        Subject: serialNumber=de7955c58388df8d7ee74844581462f3c28a603f65dd22fdb493d8450f2b9079, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3b:4c:ff:d4:d3:f4:69:15:df:b8:b0:f2:24:
                    19:37:96:5e:66:83:63:fa:85:74:2c:7f:ff:a3:dc:
                    fc:58:df:6c:5c:81:a1:3c:ef:91:dc:74:23:b0:b0:
                    94:20:20:af:8c:c1:70:cf:fa:ef:54:9e:19:b0:6f:
                    ec:76:2a:d6:4d:ed:0e:51:b0:f5:d2:41:36:a5:1c:
                    4e:d7:42:04:62:f9:4c:01:3c:ae:4d:e7:64:3e:1f:
                    c1:48:f6:b6:70:4f:e9:e5:bc:db:6e:dc:dd:08:52:
                    a8:40:6b:dc:12:05:29:f9:5d:d2:6e:a8:83:6d:46:
                    70:78:32:04:28:c0:63:4e:54:57:07:37:f6:17:43:
                    10:a0:51:e3:77:18:34:5a:3b:16:4e:a5:51:28:43:
                    22:ef:e2:71:14:37:bb:1d:57:9f:1a:36:8b:dd:41:
                    79:5d:5e:e0:02:02:03:d6:5e:2b:80:9c:ce:98:90:
                    b8:87:c9:3f:91:63:07:76:42:e2:6d:4f:a8:45:55:
                    18:56:0c:65:ba:97:41:0e:b1:02:8e:26:6d:cd:06:
                    3f:73:9d:e3:db:0a:8b:61:58:4f:4c:1a:80:b5:c4:
                    c2:31:88:7c:91:cb:fd:81:67:81:c9:a4:3f:b8:df:
                    94:07:1f:91:ee:3d:a9:5d:98:f4:be:2d:0e:dd:61:
                    57:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:70:44:8D:78:D8:DC:29:0F:BB:D1:2F:7C:D3:70:1A:C0:18:D2:FB
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7e07667c-496f-4812-b566-479ec8704494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:a9:77:df:74:a9:04:7e:16:95:06:54:d4:3b:a3:b7:f4:ed:
         ef:23:67:a0:d0:35:ec:be:8c:82:ef:7a:0d:9c:f1:7f:b5:3d:
         d8:96:15:19:75:11:80:5d:ec:0a:a4:4d:93:e9:c6:40:90:1e:
         d9:33:4e:36:af:5f:1c:09:45:e9:e0:39:f8:86:39:98:e4:f6:
         59:c3:1e:7e:2f:1d:0d:6d:04:e0:9f:89:b5:f0:9a:a4:5c:42:
         68:37:2e:b0:39:dd:1e:ec:20:ba:67:ab:2c:d9:6a:af:3f:52:
         d9:78:e1:20:c3:02:58:f5:c9:1a:e0:15:68:2e:21:5e:63:38:
         db:67:d5:0e:cf:13:72:e4:64:2f:b8:5e:2f:93:7b:9b:f7:62:
         5f:a5:24:dd:ab:f3:b0:14:c3:23:27:29:76:5f:4f:68:1d:77:
         98:ce:10:3b:15:42:39:10:1f:8e:e9:66:68:3d:3d:64:db:34:
         4c:7e:c2:92:9c:08:5f:7e:3f:c2:ae:e0:4b:d3:23:f7:21:a2:
         2a:7b:a7:ce:95:b1:f6:53:b0:03:cf:81:62:f7:6b:c0:bb:cb:
         ad:86:07:dd:25:a0:0a:cd:62:d1:60:cb:08:4d:0c:1b:06:a9:
         5e:6b:c0:6d:6d:aa:8e:79:7a:3c:40:56:66:b1:79:2e:a5:dc:
         30:1a:84:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----