Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/90fa6623-bfa3-41b6-89c0-4270cf9c77f1.roa
File:                     90fa6623-bfa3-41b6-89c0-4270cf9c77f1.roa (raw, json)
Hash identifier:          s+b33mUwYB6Zns4oKiIplllvvv50e/rwS23pRC1j8fk=
Subject key identifier:   FF:BD:FE:EE:CC:7A:D8:F7:B4:8B:BB:38:5B:F2:F6:1F:CD:EC:23:2A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6F6DC231453EDC251F147905E51E821C985B0F1C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/90fa6623-bfa3-41b6-89c0-4270cf9c77f1.roa
Signing time:             Wed 22 Feb 2023 00:00:00 +0000
ROA not before:           Wed 22 Feb 2023 00:00:00 +0000
ROA not after:            Sat 25 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6d:c2:31:45:3e:dc:25:1f:14:79:05:e5:1e:82:1c:98:5b:0f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 22 00:00:00 2023 GMT
            Not After : Feb 25 23:59:59 2023 GMT
        Subject: serialNumber=55ce6bd9d7db70404b8774b6bcc9d99d6b7d31175e6e6b9cc0519f3875f1731d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:54:d5:91:81:05:2d:60:c5:a4:e2:69:8f:fe:
                    4c:33:72:04:b9:db:3c:d9:80:b0:76:a7:4e:2f:c8:
                    97:8e:8f:51:dc:52:b5:ed:0b:a8:17:30:07:02:d3:
                    45:ca:8c:4d:79:42:6e:5e:93:d0:0b:9b:cc:10:52:
                    62:08:b4:b0:00:61:3b:5c:f7:9a:67:2e:26:40:f5:
                    10:28:2b:bd:66:b7:96:cd:b6:d4:21:5f:b1:2b:2b:
                    08:9f:a8:57:58:96:32:0c:77:cf:da:2e:dd:71:b0:
                    df:1f:c2:41:e5:d1:e8:e2:f1:0b:3b:a9:d2:79:0e:
                    e1:8a:d6:bf:29:8d:1f:fb:eb:c8:6d:26:6f:c6:46:
                    8c:3c:76:88:1a:d9:e6:2d:43:24:63:60:11:c3:92:
                    e1:0a:fa:58:c2:d4:2b:9b:ce:f3:62:48:fe:64:01:
                    23:ae:1c:28:dd:06:9c:d3:3c:ff:11:c1:ea:5b:07:
                    ad:7e:12:a3:8a:de:60:ef:a3:7d:52:bb:ce:dd:ed:
                    5a:07:9a:f8:4d:f1:58:b3:5e:2c:0a:d4:6a:14:de:
                    42:61:36:4a:8f:e2:38:dd:a2:48:ab:46:05:b9:6c:
                    2b:92:dc:c2:67:de:e3:2a:95:ee:19:47:db:59:07:
                    89:68:42:dc:21:3b:f8:06:61:ee:12:a8:43:07:fe:
                    3e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BD:FE:EE:CC:7A:D8:F7:B4:8B:BB:38:5B:F2:F6:1F:CD:EC:23:2A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/90fa6623-bfa3-41b6-89c0-4270cf9c77f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:08:bd:f9:8d:ca:58:6d:ad:db:8b:96:34:5e:75:ef:a7:03:
         a2:ba:0f:8e:6c:83:b4:79:c4:e5:b2:e7:4c:7f:4a:78:b1:2e:
         3a:ba:85:91:5d:fb:63:04:21:d5:50:da:00:96:7a:d7:34:65:
         6d:57:34:6a:09:0c:c0:d7:17:11:a6:55:54:f0:ec:25:38:22:
         17:a2:4b:01:f0:27:84:5e:a3:e6:66:a5:f9:35:54:49:43:f7:
         e3:bf:d6:7b:a9:74:a4:f0:31:0e:d7:48:28:05:40:7d:f5:07:
         2a:ea:f2:39:47:13:57:26:e7:e2:e4:04:eb:0d:ef:ed:29:fc:
         fc:ee:93:34:73:c0:ab:ab:f0:88:34:d6:5e:c0:87:c6:42:97:
         69:e6:36:63:55:95:d1:75:9c:22:dc:ed:47:88:f0:21:a7:4b:
         8e:95:1b:1b:33:53:d6:db:b4:09:8f:f0:db:9f:18:a6:d1:39:
         d6:d2:e2:3a:df:42:51:1a:00:18:b8:b9:dd:f6:47:1d:88:39:
         1f:9f:90:ba:05:5a:c2:6f:ec:6c:6a:47:15:7e:71:ef:ff:f1:
         02:e2:84:aa:1c:23:a1:d7:e0:73:dc:0d:5e:bd:00:0c:1d:cb:
         f0:fb:ce:92:95:c5:8f:f0:74:e6:cb:9f:7c:3f:68:d0:59:ad:
         3e:f5:a2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----