Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/89ec8faa-803e-49d7-8c89-0ea619d8cbda.roa
File:                     89ec8faa-803e-49d7-8c89-0ea619d8cbda.roa (raw, json)
Hash identifier:          Imx7JfOnPFvOvGT9Ct4EteKpnWlFFalO0GnqQ2uHLZs=
Subject key identifier:   A0:CF:A0:9D:EC:FC:36:33:59:C3:AE:CF:99:70:BC:A8:EA:AB:E2:52
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4958C1B2B02B0DB3CE8DC73387B7C5103167BC35
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/89ec8faa-803e-49d7-8c89-0ea619d8cbda.roa
Signing time:             Tue 14 Feb 2023 00:00:00 +0000
ROA not before:           Tue 14 Feb 2023 00:00:00 +0000
ROA not after:            Fri 17 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:58:c1:b2:b0:2b:0d:b3:ce:8d:c7:33:87:b7:c5:10:31:67:bc:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 14 00:00:00 2023 GMT
            Not After : Feb 17 23:59:59 2023 GMT
        Subject: serialNumber=6a1f4b6d6172db24fc40cf9d9452f81e6ed9c11a2f7407cfc37ddacf5602a9c2, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:87:d7:12:83:d0:f3:fd:c7:6a:c3:99:fc:61:
                    5e:0a:75:30:3d:8d:81:9f:d6:b8:84:51:b0:1e:98:
                    17:93:18:57:98:3d:f0:81:02:d1:72:c7:47:1b:b4:
                    4f:40:3e:f8:ca:c5:9e:12:1f:36:55:f6:06:cb:d7:
                    42:80:ea:8d:34:7f:bc:57:05:7b:1e:15:45:2a:41:
                    e5:bb:c0:2b:58:ea:ce:50:97:c5:b1:14:3a:5a:5a:
                    23:df:bd:e6:e8:c7:22:eb:7f:a7:4d:d8:4c:e4:ee:
                    e5:53:e9:cd:ca:48:85:ab:5e:b5:73:cc:6b:c5:d5:
                    8a:dc:fa:29:03:0d:6b:5c:f4:11:34:19:14:da:d6:
                    ce:fd:bf:0b:ec:bb:a1:50:6a:7f:a2:0b:de:7b:2e:
                    05:70:24:bf:54:1f:75:d3:f9:3c:e8:47:dd:a3:e6:
                    dc:04:65:98:40:85:5c:e4:1a:3b:d9:2a:ec:25:97:
                    45:49:73:32:82:ff:4e:a8:47:69:fd:90:8f:6b:91:
                    63:71:c9:bc:da:56:b7:ea:ec:4a:90:13:7f:6d:0e:
                    45:e6:d3:d5:52:8b:6c:49:16:57:a1:32:79:f6:a5:
                    15:49:c6:84:9b:f6:99:35:9b:0d:2f:31:93:29:ba:
                    5e:e4:ec:62:48:d7:90:e3:dd:4a:60:2f:5d:50:02:
                    73:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CF:A0:9D:EC:FC:36:33:59:C3:AE:CF:99:70:BC:A8:EA:AB:E2:52
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/89ec8faa-803e-49d7-8c89-0ea619d8cbda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:05:d0:87:69:ca:31:a6:01:fd:fd:7a:e6:7c:98:74:82:98:
         d3:54:6e:79:51:17:cb:c4:58:27:32:2f:38:0d:83:b9:3d:47:
         64:7e:81:ec:f0:fd:93:09:9c:40:94:24:91:9f:23:d8:61:a0:
         28:59:e5:64:6e:93:1f:3d:11:71:d8:4a:b9:f5:c5:65:e2:01:
         eb:de:b5:52:e0:38:c6:1f:16:2e:e3:0e:6a:b8:c8:dc:c6:a2:
         4f:b9:b6:1d:10:71:84:1f:35:0f:0b:69:56:29:3f:df:3f:48:
         78:80:4c:f5:5c:17:2b:b4:5f:16:dc:10:d8:f9:73:1d:53:d6:
         86:2a:a6:bf:09:f7:e9:f8:12:1d:ba:dd:ce:0f:85:e4:9d:3f:
         c1:0d:4c:88:d7:8e:c1:12:72:4a:6a:d2:f1:d0:d1:8b:71:fc:
         38:03:11:2d:6b:4b:77:29:23:ae:6a:a7:ac:08:bd:97:c0:9b:
         0c:62:a3:ed:d7:3c:6a:77:1b:35:ca:c9:81:82:9f:7d:49:7d:
         bd:d8:bd:e3:94:22:d7:02:ef:3d:8f:30:b8:3b:78:21:3d:4d:
         7c:22:91:c0:95:f3:d4:7a:7d:8e:04:de:b4:26:a4:9f:e1:a6:
         e1:18:d4:f9:06:09:c5:c4:e0:3e:d1:87:a2:a2:1d:01:c2:f7:
         d9:e2:79:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----