Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ec15e7c3-3812-466c-b40d-128d75857691.roa
File:                     ec15e7c3-3812-466c-b40d-128d75857691.roa (raw, json)
Hash identifier:          GJvlwA6zWQmjaKB9iICENRVaer+aABN1XCLH/w4y2/k=
Subject key identifier:   55:72:0B:F2:6D:E2:D6:48:62:9F:7D:5D:7F:88:1A:21:91:D5:39:3F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       330BA63624A18BFAF5E25D36414848463E894778
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ec15e7c3-3812-466c-b40d-128d75857691.roa
Signing time:             Fri 21 Apr 2023 00:00:00 +0000
ROA not before:           Fri 21 Apr 2023 00:00:00 +0000
ROA not after:            Mon 24 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0b:a6:36:24:a1:8b:fa:f5:e2:5d:36:41:48:48:46:3e:89:47:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 21 00:00:00 2023 GMT
            Not After : Apr 24 23:59:59 2023 GMT
        Subject: serialNumber=614f1d15c67231c563b4d69adb93a544165bd0ea69d73feb8f967e243b09fbf2, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:44:0d:b6:72:62:83:e4:c6:99:17:fe:a3:
                    cc:d4:7f:ba:fc:0b:b6:c8:1a:9e:81:da:38:ac:7b:
                    3e:7f:64:b6:ec:bd:fb:21:94:db:23:03:98:5e:09:
                    19:6f:de:f4:4c:06:bc:0e:aa:7e:f0:99:7b:e6:1d:
                    6a:e6:ab:26:1b:55:fc:02:16:ef:ae:f5:78:46:e0:
                    d8:2d:09:5b:ee:55:89:ba:4b:cc:92:e2:e7:86:5b:
                    46:bb:9a:fa:df:22:b2:34:3f:36:31:9c:7d:ee:df:
                    61:77:9c:8d:71:0e:82:55:9c:b0:db:4f:92:b8:fd:
                    12:12:5e:fd:89:31:7b:72:d4:0b:7e:24:1f:25:a2:
                    33:b2:08:89:af:0f:3d:4b:6b:aa:f3:43:de:94:11:
                    ca:a0:22:4d:9c:66:a4:af:a8:79:29:19:da:f2:df:
                    58:b3:94:b3:96:22:7b:b3:82:56:89:24:1d:5b:a4:
                    97:08:81:de:e7:77:81:09:59:df:44:ae:68:18:ac:
                    10:08:ab:8e:cd:de:27:cc:83:61:11:16:70:2d:1f:
                    c6:a1:40:f3:59:20:e4:2a:06:5c:5c:7c:75:ea:9b:
                    77:a7:65:ae:49:d7:e8:f8:94:40:2c:fc:0e:0e:9a:
                    24:99:45:93:5b:94:29:44:ed:db:98:1b:4e:1b:a9:
                    ea:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:72:0B:F2:6D:E2:D6:48:62:9F:7D:5D:7F:88:1A:21:91:D5:39:3F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ec15e7c3-3812-466c-b40d-128d75857691.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:c5:32:08:28:a5:7b:89:16:38:fa:af:ad:37:9e:2b:d1:b3:
         70:f8:18:e1:99:6a:29:99:3e:d3:de:12:3b:4d:93:9f:63:21:
         20:ee:e1:05:ce:22:74:80:d5:c0:0e:aa:46:eb:c9:85:c7:a2:
         05:7c:4a:e3:32:43:d3:86:20:ad:42:71:ce:2d:c7:40:22:aa:
         e1:8b:45:af:4a:df:63:a9:7b:75:76:4b:42:e7:25:6a:00:97:
         4d:51:56:42:7e:8c:bf:7c:ad:ef:2c:4a:1d:fb:f8:a5:75:d6:
         98:4b:00:08:05:21:b3:c7:e2:4d:5b:fd:b4:d1:1e:88:1a:25:
         c9:12:9e:3e:8b:66:44:2b:9c:c9:08:67:04:d2:85:45:3c:a0:
         d7:86:93:c6:b1:58:f9:ca:ea:a8:e1:f6:ef:06:ef:a8:c6:e5:
         a6:3d:1e:9e:b6:32:83:76:d2:b7:7c:f3:7d:60:b2:c0:b4:7a:
         0f:e9:06:4b:9f:b3:6a:8f:00:95:40:9c:dd:b8:f2:83:06:76:
         b2:d4:2f:30:2a:3d:9e:89:c2:83:75:7d:d4:0c:88:b1:18:78:
         09:c0:83:77:f5:be:41:7b:f8:1e:10:c0:77:a9:93:59:31:c2:
         a9:a6:36:69:24:a7:5a:25:a5:bf:27:e7:5a:1b:c1:7e:40:82:
         4b:cb:52:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----