Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/eb8b48b8-2e6f-42f1-905a-098c1b522fb4.roa
File:                     eb8b48b8-2e6f-42f1-905a-098c1b522fb4.roa (raw, json)
Hash identifier:          JWA2PTePaesbpmgr26O1o+s5X3PXa40746rIG1lQTZc=
Subject key identifier:   15:22:95:03:8E:06:DC:3A:FC:4D:8B:B1:FD:58:CD:3D:34:E0:15:54
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1A195312755BFD438D56279BCCE8E3B2AC7985FA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/eb8b48b8-2e6f-42f1-905a-098c1b522fb4.roa
Signing time:             Sat 11 Feb 2023 00:00:00 +0000
ROA not before:           Sat 11 Feb 2023 00:00:00 +0000
ROA not after:            Tue 14 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:19:53:12:75:5b:fd:43:8d:56:27:9b:cc:e8:e3:b2:ac:79:85:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 11 00:00:00 2023 GMT
            Not After : Feb 14 23:59:59 2023 GMT
        Subject: serialNumber=e077f4c786a89239c077a721c85cf0face45788253cc57a969dc12fcbfecd7a1, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:35:82:ba:5a:cb:3d:93:8d:9d:20:69:33:b4:
                    52:12:93:d9:60:25:37:cc:1c:7a:74:50:1f:14:24:
                    96:97:e6:1d:a2:91:90:d5:17:79:b6:40:c1:6c:5a:
                    08:a7:ca:88:03:49:e2:df:97:6c:f7:e3:b8:13:40:
                    f3:db:ba:10:2d:15:16:06:56:da:0d:83:28:b8:e4:
                    a3:84:98:e8:67:9b:10:5d:a8:2c:67:81:b6:68:7f:
                    c2:8c:76:7c:da:5f:eb:17:2e:7b:02:da:88:de:1b:
                    95:40:e9:1a:26:38:56:f3:d9:21:e6:c5:25:e0:97:
                    00:3c:4f:3f:1c:12:f7:49:a9:5b:f6:17:3e:be:db:
                    8e:7a:c4:73:1c:ac:27:9d:e5:da:88:42:0e:3f:bb:
                    bd:bc:07:5b:dd:ae:5c:27:31:1a:f1:fd:0e:db:22:
                    bb:a9:13:61:a7:49:d7:d2:c3:d6:ab:16:02:e7:c0:
                    0e:72:45:f1:92:78:6d:69:33:08:46:ae:41:7f:6f:
                    06:06:5c:7c:aa:20:b8:8b:e9:bf:3e:01:fd:9f:ce:
                    0b:ba:2e:e3:20:ff:35:8e:72:cd:07:5b:da:2b:51:
                    ec:7e:74:ee:06:be:c2:27:4c:38:19:62:ac:37:62:
                    ca:05:46:5a:49:ee:36:b8:0a:63:c2:83:83:7e:ee:
                    f5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:22:95:03:8E:06:DC:3A:FC:4D:8B:B1:FD:58:CD:3D:34:E0:15:54
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/eb8b48b8-2e6f-42f1-905a-098c1b522fb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:59:1f:26:8f:b2:80:ad:6c:1a:cb:7f:0e:ba:a7:62:ae:d1:
         c0:6d:ca:8f:5a:f5:74:87:8a:e1:35:3b:69:79:7f:6c:a1:3c:
         05:a7:b2:0b:20:f3:f6:4b:3f:09:d1:9b:fc:98:ed:82:89:ac:
         a5:02:cd:0d:ec:44:2a:32:f4:52:c8:4e:2c:fe:69:4f:d7:3b:
         a4:7c:2f:c0:bf:77:a2:49:72:71:34:84:d5:69:38:82:25:44:
         77:57:8d:d3:d9:a3:4d:7f:33:eb:2b:c4:c0:b1:4f:86:eb:da:
         71:85:36:97:00:c9:2c:3d:52:09:ed:68:a2:40:4f:c6:87:2b:
         1f:bc:86:f1:80:ea:63:eb:a7:a9:88:a3:8d:72:be:bc:26:a4:
         0f:c7:35:71:0f:d0:c4:4f:d2:82:e6:94:3e:60:b8:37:4d:8d:
         0a:e0:80:9e:40:db:a2:02:b2:20:b4:f4:43:f7:fa:e7:34:b6:
         bb:be:a4:d1:b8:5d:37:30:2c:f4:43:5d:cf:11:1c:25:4d:bb:
         eb:54:43:5f:65:62:e9:3e:57:66:8c:0c:2e:98:47:78:54:f4:
         78:7b:88:8e:a7:00:8f:3d:9e:0c:e2:ad:24:a3:50:b9:37:33:
         df:c0:b7:b1:fc:00:be:0f:32:b4:e0:43:d8:cc:da:81:fb:ac:
         50:c5:9c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----