Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d2e6fda5-92f7-4822-a650-7de69b00cba8.roa
File:                     d2e6fda5-92f7-4822-a650-7de69b00cba8.roa (raw, json)
Hash identifier:          JkX76eNA7D76hMiyBpqlKqp3z2WgPYWbbaYz7ka23HM=
Subject key identifier:   0E:69:DE:60:65:E2:EA:1C:FB:49:26:47:A7:50:6B:1F:2B:58:22:06
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       397D70232D4C4EDD4459C6A8DF513682960F04BD
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d2e6fda5-92f7-4822-a650-7de69b00cba8.roa
Signing time:             Wed 22 Feb 2023 00:00:00 +0000
ROA not before:           Wed 22 Feb 2023 00:00:00 +0000
ROA not after:            Sat 25 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7d:70:23:2d:4c:4e:dd:44:59:c6:a8:df:51:36:82:96:0f:04:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 22 00:00:00 2023 GMT
            Not After : Feb 25 23:59:59 2023 GMT
        Subject: serialNumber=40f6525ce2da6743ac97f3546c4cc3c93a5ef63698c4e5dcc7d9d3e23474d2b0, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:99:b0:79:5d:13:1a:64:e4:c4:f1:57:b5:15:
                    06:73:d7:4b:30:65:10:42:c7:9f:8d:d7:cc:6e:28:
                    21:23:c9:fa:04:20:ad:a9:38:15:69:6d:05:1f:76:
                    09:01:81:fe:92:d7:2a:02:61:ce:87:75:8c:3c:87:
                    70:2d:dc:bd:9f:77:a2:bd:63:ce:34:66:2d:57:12:
                    30:44:d7:9c:2d:56:1a:4a:11:c3:3f:41:c8:bd:00:
                    bf:57:29:05:18:e3:8c:d5:fc:e8:3e:fe:32:77:4d:
                    6f:78:ad:54:e2:dc:31:9d:ce:3c:b1:86:1e:aa:cb:
                    49:66:fe:cf:2c:71:15:ce:c7:15:f3:02:ff:3b:d4:
                    31:4d:c4:2c:67:d2:8f:01:f0:a2:a6:86:c3:26:18:
                    eb:7f:91:22:db:76:b1:f9:c1:05:95:94:12:e2:95:
                    63:50:ee:fb:d8:84:b2:f9:4d:d2:7c:ae:00:ea:04:
                    a9:c0:e5:78:a0:87:27:a7:4d:2b:73:9c:a8:70:04:
                    81:e2:13:e4:64:e7:35:da:ff:36:1e:dd:bd:72:88:
                    0a:45:1f:45:1e:f3:97:e1:5c:17:63:29:d9:11:f1:
                    eb:03:b7:f1:fc:04:5a:30:7b:d1:8d:4a:f3:4e:01:
                    c6:2d:ab:3f:ef:35:38:29:7d:f4:42:a0:80:b6:3f:
                    7e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:69:DE:60:65:E2:EA:1C:FB:49:26:47:A7:50:6B:1F:2B:58:22:06
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d2e6fda5-92f7-4822-a650-7de69b00cba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:d0:87:e9:5e:bc:e4:0c:06:8b:de:31:03:03:ab:fa:b2:b0:
         dd:08:68:b2:9e:b1:26:a9:6e:aa:a7:cf:ac:c2:75:4b:ec:88:
         72:2a:77:29:44:4f:f8:81:c3:ff:cc:76:6f:51:92:65:14:c3:
         d9:2c:90:68:cb:9c:4a:47:a5:fe:43:07:b3:57:e5:88:08:87:
         ff:77:6f:ca:e3:fb:66:cf:76:fe:a8:b1:aa:1c:7b:94:4e:b0:
         38:d6:03:eb:bc:73:c4:7a:77:11:fc:c9:53:a4:06:48:f6:97:
         51:c3:21:c5:c7:92:d1:5d:d3:41:12:b9:71:94:70:ff:1f:a4:
         03:01:9c:9b:a4:82:e8:6c:83:f6:a7:5e:23:2e:be:74:10:50:
         ec:c0:28:fe:87:59:7d:c6:51:8a:b1:97:79:7c:6f:6c:73:47:
         63:a1:24:64:0d:ab:84:5d:d2:70:02:fe:87:67:c7:00:91:d2:
         2a:e2:94:dc:68:93:b0:d9:83:99:ac:51:0d:96:a5:f0:95:67:
         53:b4:60:f2:8e:0a:19:05:0c:cf:ea:cb:da:64:50:89:1b:c5:
         a0:20:70:a5:aa:59:a4:cd:61:7d:7c:ed:41:58:7b:3b:48:fc:
         39:c6:b4:28:16:95:1a:47:b7:ec:9c:a9:1d:16:6f:37:e1:a2:
         8a:94:44:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----