Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9e5d71cb-7ed0-445f-a018-fffd4c4bcb27.roa
File:                     9e5d71cb-7ed0-445f-a018-fffd4c4bcb27.roa (raw, json)
Hash identifier:          mlyHJIfSUBSSs3ujm3p3FtfjG0BAOm1rQ6HvqFFlJWo=
Subject key identifier:   61:32:97:B6:9D:F5:5D:11:CC:63:D4:F1:6C:7F:AD:43:53:84:BB:C0
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       660F29106CDFF48183FA4DA2237DAB24C6C37031
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9e5d71cb-7ed0-445f-a018-fffd4c4bcb27.roa
Signing time:             Fri 25 Nov 2022 00:00:00 +0000
ROA not before:           Fri 25 Nov 2022 00:00:00 +0000
ROA not after:            Mon 28 Nov 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0f:29:10:6c:df:f4:81:83:fa:4d:a2:23:7d:ab:24:c6:c3:70:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Nov 25 00:00:00 2022 GMT
            Not After : Nov 28 23:59:59 2022 GMT
        Subject: serialNumber=5482521bdbc3c22e48a1acc04e4b0c991f5046c4bb37be6dac8af60477ba758c, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:19:7b:08:2a:dc:dc:d5:e6:5b:92:e4:7a:41:
                    7a:9b:c6:0d:a6:d2:bb:cd:14:3a:ee:1a:66:f0:c5:
                    d0:5e:57:70:ef:fc:18:6e:e2:e7:91:2a:9a:db:b7:
                    e7:65:35:ab:cc:f9:b5:c7:3a:28:f3:1f:1c:8a:2d:
                    22:73:f8:c5:02:5d:33:51:27:1d:73:8e:4a:8d:e2:
                    06:1a:ff:c2:80:ce:19:78:44:50:11:89:7d:7d:63:
                    cb:8c:f8:0b:5b:d6:71:0a:fb:8f:2f:c6:c9:6c:17:
                    d6:56:6c:36:c4:43:58:db:b8:96:62:97:ee:b2:98:
                    f0:7a:50:90:04:86:a5:ad:b6:42:91:51:c4:2b:34:
                    bd:71:4a:93:21:82:45:09:1e:69:c6:09:a6:ad:2c:
                    3e:11:35:86:13:2d:bd:e9:72:49:5c:a7:e9:9e:c8:
                    93:ad:cf:8b:65:f6:db:b0:2e:6b:24:a0:44:d7:29:
                    9c:49:b5:9c:39:e0:16:37:d8:c2:86:56:ff:91:cf:
                    75:ce:12:8d:5b:78:cd:6f:9d:47:d8:32:50:d2:17:
                    c8:73:b8:e4:5c:85:f0:f2:37:d5:d1:ff:0b:00:28:
                    55:28:c8:3d:8e:a7:be:f5:d8:12:5d:f7:d8:14:ef:
                    3d:80:77:c4:32:84:6e:79:ee:48:e9:2a:13:48:e2:
                    a2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:32:97:B6:9D:F5:5D:11:CC:63:D4:F1:6C:7F:AD:43:53:84:BB:C0
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9e5d71cb-7ed0-445f-a018-fffd4c4bcb27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:e9:ba:59:56:74:da:38:b5:77:2e:be:5e:c3:ba:38:e6:83:
         84:9f:03:b7:2d:9f:39:b1:4b:89:d2:87:c9:77:52:a9:ad:23:
         05:a5:fa:57:bd:24:46:91:77:4a:28:1f:5d:9a:ed:a3:41:8d:
         34:1f:47:cd:9a:11:db:58:3d:ed:16:3e:e2:f5:cf:92:7c:bb:
         59:ce:0b:fa:75:aa:0d:7f:c9:8b:0c:7d:32:f8:93:f4:53:99:
         be:80:e5:76:25:0b:e8:07:b7:9e:fd:df:ff:c8:c3:79:1d:59:
         d3:7e:57:ba:31:53:07:49:d3:3b:46:74:43:5d:d5:97:e1:bf:
         90:46:62:33:b5:f2:86:0c:b8:37:ba:73:0a:a7:25:60:0a:f5:
         4a:a8:54:e9:b8:2d:23:51:d7:5a:b1:31:cc:25:2e:d7:2f:9e:
         1a:48:b8:0b:4c:e5:ab:1e:b9:bb:eb:85:7f:81:83:ba:fb:b1:
         55:b0:96:97:e4:43:d1:dd:d2:f8:4c:7f:6a:a3:5b:b8:3c:d0:
         cd:c9:15:c4:c9:de:ac:78:d1:bf:81:bd:84:9e:25:9a:db:6b:
         51:3f:16:59:3f:fa:b8:d5:28:30:11:67:2f:53:70:c5:25:08:
         78:2c:22:0a:d3:d5:72:3c:77:b5:ca:18:ad:0e:de:a3:40:d1:
         71:22:ca:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----