Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cb159209-a041-497b-b057-923dc5597407.roa
File:                     cb159209-a041-497b-b057-923dc5597407.roa (raw, json)
Hash identifier:          HnTQq7Ylp5BkdmBBlxcyeJ4f/roq3hkt+yvkMidJi98=
Subject key identifier:   87:70:86:C6:6A:A6:BD:F1:B0:7D:21:34:92:F1:A0:E3:93:8E:18:E0
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2E5663715BA6B6237A7B2159FB37CEDCD2F18F23
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cb159209-a041-497b-b057-923dc5597407.roa
Signing time:             Thu 27 Apr 2023 00:00:00 +0000
ROA not before:           Thu 27 Apr 2023 00:00:00 +0000
ROA not after:            Sun 30 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:56:63:71:5b:a6:b6:23:7a:7b:21:59:fb:37:ce:dc:d2:f1:8f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 27 00:00:00 2023 GMT
            Not After : Apr 30 23:59:59 2023 GMT
        Subject: serialNumber=a93088fc0d6b3fe3f8f49b4a33b137500ed63db889dc1ce0c92381a4ba51ad14, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:a2:14:1e:1b:7d:4e:85:77:0c:a7:bc:01:
                    6a:f7:3a:52:c2:ef:5e:18:0c:a8:52:26:48:c1:5c:
                    ff:cd:77:8b:70:1d:dc:c9:77:05:3d:c0:36:f7:db:
                    0d:8e:2b:d5:9e:97:bd:e3:ec:db:b0:79:52:c3:05:
                    b1:f6:1a:01:c9:4a:3c:19:58:4a:13:75:90:31:81:
                    51:d0:f2:ae:54:9f:5f:56:e6:44:94:23:0f:0a:74:
                    3d:51:d3:a5:c8:93:e3:bd:d6:8c:8b:d6:c2:41:5b:
                    ee:01:b1:05:e4:c4:40:c5:86:12:d7:61:1e:b8:aa:
                    25:a3:6e:9f:f0:a2:8d:6b:45:2e:06:f3:d3:e1:cd:
                    51:ef:2d:bf:f3:5c:d7:b8:67:09:16:32:b5:39:84:
                    d7:8c:9d:eb:3c:91:3e:6c:9d:eb:de:db:42:2e:8d:
                    7e:f8:d6:e6:06:8a:fa:3b:23:06:07:b5:8f:28:8d:
                    1a:22:cb:38:1f:56:33:20:c5:7a:16:50:49:8a:64:
                    87:18:72:e3:d1:5b:d7:8b:c0:6f:56:60:f3:32:1c:
                    12:40:44:f1:5a:1a:5e:31:83:fc:23:c1:5c:5f:b8:
                    fd:21:ff:05:52:93:0f:c2:e5:fe:f1:5f:af:16:60:
                    4b:03:d1:6a:65:2b:9b:a9:ed:64:c1:cb:73:ca:c6:
                    31:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:70:86:C6:6A:A6:BD:F1:B0:7D:21:34:92:F1:A0:E3:93:8E:18:E0
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cb159209-a041-497b-b057-923dc5597407.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:b0:1a:37:78:27:0f:d8:3b:79:4d:51:99:8b:22:0a:39:e9:
         16:74:fb:fa:ca:f3:79:b3:7e:0a:ec:60:5d:60:3d:a5:92:23:
         9e:35:9c:3f:71:be:c6:55:e0:13:cd:1b:ac:8d:07:ff:38:a9:
         ac:d2:95:98:17:76:5e:c6:d4:6c:57:5f:50:64:90:bc:61:2b:
         32:af:55:b7:b7:5e:72:24:a7:a5:57:7c:90:71:1d:75:52:ca:
         95:0c:c0:f7:e7:35:25:25:84:20:1f:5d:ec:a5:b6:20:8b:7a:
         3d:d5:e4:ea:54:7b:34:8e:8c:ea:00:8d:d6:d8:59:d3:b5:ef:
         25:db:a7:a6:2f:88:42:dd:df:28:7b:1d:4c:13:af:8f:dc:ca:
         94:03:c5:df:c2:0c:cd:94:de:4d:15:5f:81:90:8c:69:81:2b:
         b1:a9:59:1c:7c:b8:d7:83:ad:06:d8:c9:83:4f:9e:e3:46:35:
         8f:b7:05:96:b0:73:d3:da:56:b6:fd:14:bb:cc:86:64:36:bf:
         41:be:a2:65:95:30:b9:bb:e0:66:1d:0d:46:b0:71:c8:59:0a:
         4a:00:f4:fc:73:7e:1d:08:c2:ec:38:c0:ff:45:27:52:28:56:
         28:49:3a:43:96:8e:36:e1:c6:de:2e:32:ee:19:de:73:ed:8b:
         7b:f1:a9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----