Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e721b1b1-fb59-46ed-801b-c29775ff1b6c.roa
File:                     e721b1b1-fb59-46ed-801b-c29775ff1b6c.roa (raw, json)
Hash identifier:          24snmAtzspFp57oXDTLdosnB9jLeUaDJ82YHmPCKZsQ=
Subject key identifier:   13:5D:A4:5A:2D:14:99:CD:43:CD:11:E6:1A:9E:17:22:D1:6C:2B:5D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3180F7A97FA4649FFF731AA9B0BAFD896A2D833C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e721b1b1-fb59-46ed-801b-c29775ff1b6c.roa
Signing time:             Sun 12 Feb 2023 00:00:00 +0000
ROA not before:           Sun 12 Feb 2023 00:00:00 +0000
ROA not after:            Wed 15 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:80:f7:a9:7f:a4:64:9f:ff:73:1a:a9:b0:ba:fd:89:6a:2d:83:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 12 00:00:00 2023 GMT
            Not After : Feb 15 23:59:59 2023 GMT
        Subject: serialNumber=5be2a8758d42f2f8f2361c376806abb4097485202618849db559299626623353, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:85:a0:01:eb:d3:47:2b:61:12:23:02:16:60:
                    8f:62:22:71:2e:82:bb:cf:76:60:20:17:13:31:77:
                    9b:7c:53:39:a5:79:5a:8b:32:a1:7e:9f:b5:19:2b:
                    22:95:0f:93:20:74:2a:0a:fb:b7:d4:fb:ff:7e:b8:
                    c8:08:05:50:2f:c5:74:9b:03:3a:68:a4:ae:d8:ec:
                    52:f3:35:51:f6:89:20:85:2c:b6:bd:7a:42:a7:f0:
                    dc:03:91:0e:69:66:40:65:cc:05:3d:af:61:26:94:
                    97:ab:ed:91:c6:8f:f0:a1:92:8b:1b:c6:9e:89:f2:
                    cb:c4:e8:ac:22:c8:5d:e4:80:57:9e:bc:30:1b:b1:
                    6a:6c:d7:f7:fb:53:c5:e2:ad:52:a4:3f:a2:80:26:
                    1d:98:65:5c:a3:d1:0f:cc:c6:7b:ea:94:fe:96:22:
                    76:a5:86:0a:11:71:51:03:8e:fd:6a:ec:af:97:97:
                    16:e9:80:57:a8:79:a7:71:23:02:7f:ca:65:d0:3a:
                    0a:81:4c:5e:d4:18:77:6a:a5:94:02:a8:4f:b8:e9:
                    52:69:97:3f:c7:6a:65:1f:bc:63:e0:2a:d1:61:88:
                    a4:51:db:84:38:e6:cd:e5:2e:17:3a:ac:04:46:82:
                    e8:e0:65:f6:b9:db:37:2a:5d:28:4c:af:ba:b3:d0:
                    0c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5D:A4:5A:2D:14:99:CD:43:CD:11:E6:1A:9E:17:22:D1:6C:2B:5D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e721b1b1-fb59-46ed-801b-c29775ff1b6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:60:7d:75:b6:2c:b7:27:86:9b:3c:cc:22:e7:23:c9:8e:83:
         80:da:fa:47:01:04:5f:8d:64:e4:ee:c4:e7:45:dd:65:fc:77:
         26:49:97:6c:fc:b0:9a:bb:43:20:4c:c7:11:93:c9:ff:75:8c:
         78:6f:16:33:29:ac:c9:0f:0b:56:cb:cf:ef:24:b8:7a:d0:66:
         36:db:95:1c:25:71:ee:d9:61:a3:55:a3:ba:6b:ee:7f:56:26:
         ee:8c:7b:76:b6:bc:dd:d6:96:cb:5e:7a:aa:49:c0:da:ef:ec:
         fe:3b:2c:70:49:21:bb:fc:70:7f:3e:07:97:f0:bd:54:77:3d:
         5d:a3:7f:ce:46:9d:c4:96:c3:1e:c6:0e:c5:b6:1e:46:c9:82:
         ae:1e:0e:b9:50:9a:f4:51:d1:e9:76:f4:f1:f2:0b:ad:ec:3d:
         c0:3a:c8:d3:05:d7:aa:80:27:20:da:6a:b1:98:e3:3b:a9:00:
         f0:eb:d2:f7:4e:39:4d:fb:4e:ae:41:a0:2a:93:0d:a4:ce:4a:
         4b:ff:5b:cd:ea:31:86:2b:b2:c8:62:ac:63:31:4e:08:b7:ab:
         a0:f6:95:c8:9d:0a:82:80:c9:6f:53:ac:63:8b:b3:91:03:6e:
         52:bc:03:70:d5:13:71:58:72:77:8e:01:76:f8:19:64:72:42:
         d2:03:21:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----