Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c805203e-6f46-4c3b-b631-e209fd0258c1.roa
File:                     c805203e-6f46-4c3b-b631-e209fd0258c1.roa (raw, json)
Hash identifier:          yG+CfvBZwtor/DkTeaQ0X958SQ4g75Wg0mybTmMi4M0=
Subject key identifier:   AE:6E:0B:6F:50:05:81:6E:C5:BE:26:86:6A:EF:74:4F:99:BA:9D:DD
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       480BB7A938E92EA8BDF11F1980872097FB26BF3A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c805203e-6f46-4c3b-b631-e209fd0258c1.roa
Signing time:             Tue 07 Feb 2023 00:00:00 +0000
ROA not before:           Tue 07 Feb 2023 00:00:00 +0000
ROA not after:            Fri 10 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:0b:b7:a9:38:e9:2e:a8:bd:f1:1f:19:80:87:20:97:fb:26:bf:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb  7 00:00:00 2023 GMT
            Not After : Feb 10 23:59:59 2023 GMT
        Subject: serialNumber=0fb830c16a293108b05c6e7b18724ae679302d5f5130376cbee6673d0ca06e31, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8d:ea:e7:78:12:af:10:56:7d:46:44:25:94:
                    7c:4f:62:64:20:6a:54:52:57:a9:cb:30:d9:11:35:
                    bc:5d:d8:80:1c:b2:20:d5:8a:2c:95:c1:ec:b0:8f:
                    67:61:64:8e:f7:a4:f5:4a:b2:d8:d6:7d:82:73:a8:
                    6a:3f:69:65:9b:be:53:22:82:61:63:5a:fa:bb:e3:
                    ba:af:2b:ec:27:8c:c2:2f:e4:cd:82:54:e7:f7:53:
                    4f:16:70:2a:0a:66:04:13:e8:a0:14:fd:64:dd:32:
                    cc:dc:e4:9c:de:e8:f0:38:1f:23:09:dc:4e:04:d6:
                    b3:ff:6e:7a:db:44:f8:9c:95:aa:9c:3b:45:d0:4d:
                    08:b8:5a:dc:60:12:75:ca:64:24:ea:fe:d5:8d:80:
                    1c:71:44:10:15:d7:f6:79:6d:78:5d:8c:fc:34:a3:
                    d2:62:37:b8:65:96:71:d1:4b:21:01:05:49:69:fd:
                    ae:9e:67:e7:2d:cf:5b:81:b7:3b:67:c4:56:52:ec:
                    63:bb:4a:61:16:76:d2:62:73:90:cf:c6:a9:8a:b4:
                    8f:a3:ca:f1:f5:14:ea:9c:a6:be:cb:fd:6e:54:c6:
                    38:e6:6c:db:4c:07:3c:10:0e:c5:8d:de:b9:8d:8b:
                    cc:0d:c4:23:4f:33:b6:01:8c:a8:0a:9c:28:46:12:
                    fc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6E:0B:6F:50:05:81:6E:C5:BE:26:86:6A:EF:74:4F:99:BA:9D:DD
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c805203e-6f46-4c3b-b631-e209fd0258c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:48:f5:e0:4e:08:d9:b4:36:59:f6:1c:ca:30:61:f2:7a:92:
         94:b6:60:e1:50:5b:ba:ab:58:cd:2e:3d:c4:85:c6:7e:25:51:
         75:69:67:a4:ab:bd:2a:45:04:aa:54:db:f1:37:79:13:a4:ee:
         35:17:62:35:7e:82:1c:ec:c3:fc:19:23:1d:37:ac:2a:28:a6:
         f0:14:1a:0e:e0:e8:61:ac:3c:44:7e:d1:19:fa:70:72:ab:70:
         19:8a:ae:74:53:d6:f0:51:26:e5:11:f9:51:b0:b0:4a:08:a6:
         6f:a4:e9:7e:f7:b3:99:3e:28:c4:a4:92:5d:5a:a9:53:7c:db:
         a6:e5:11:36:08:72:f7:6c:5f:64:93:91:4b:15:94:5a:45:a8:
         d8:99:80:7f:82:c5:39:ff:78:bd:4f:d6:36:72:bb:c3:bc:bb:
         7d:d4:0f:cf:33:7e:8c:41:2a:f3:1c:4c:39:91:c7:ee:76:6e:
         1b:84:40:a3:94:4d:67:d4:68:47:4a:22:bc:db:af:8f:42:90:
         a9:40:a7:98:0e:37:fe:b3:80:7f:13:bc:46:cd:20:ca:04:1d:
         b5:cc:c2:e7:f5:1e:94:47:2e:53:12:69:93:c3:93:2c:1e:60:
         46:1c:da:28:53:8b:80:a6:d6:dd:63:c5:25:8d:f0:e9:8b:47:
         6f:3b:84:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----