Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ed096148-5100-46e5-ac08-ec283442a551.roa
File:                     ed096148-5100-46e5-ac08-ec283442a551.roa (raw, json)
Hash identifier:          PH+XsbFXfDJTjdzzmMsyuyC9sVd7OhiP93yiWfieswg=
Subject key identifier:   07:FE:87:C3:0F:96:EE:AF:4C:FA:A8:48:96:14:6F:77:85:F6:F3:96
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       20F5C7942D5A435C35EB2C3232D535E6AC0C08D9
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ed096148-5100-46e5-ac08-ec283442a551.roa
Signing time:             Sun 29 Jan 2023 00:00:00 +0000
ROA not before:           Sun 29 Jan 2023 00:00:00 +0000
ROA not after:            Wed 01 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f5:c7:94:2d:5a:43:5c:35:eb:2c:32:32:d5:35:e6:ac:0c:08:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 29 00:00:00 2023 GMT
            Not After : Feb  1 23:59:59 2023 GMT
        Subject: serialNumber=94fe7bba42c281ae1b1a839fb67a6b3be3e7d0101a95b94f0271449e9916cd82, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:6a:e2:f2:ca:e0:c1:c5:72:8d:30:b1:aa:
                    f9:e4:bd:ab:af:b2:12:f3:a2:4a:fe:1b:45:5c:27:
                    64:b7:25:34:00:0e:98:ce:7e:78:2d:c3:b2:68:5d:
                    af:09:cb:db:b6:ca:77:6c:87:2d:6c:5f:14:e4:c4:
                    0f:1d:4e:d4:5b:13:06:9f:e7:eb:c2:74:71:54:7e:
                    d1:6d:b6:31:ef:d9:3a:0d:42:f9:d1:2a:fd:0b:53:
                    3d:f6:6c:c3:85:fe:9d:27:80:22:be:75:72:75:39:
                    92:40:1f:a9:31:aa:32:29:23:5b:e5:70:43:a1:f0:
                    45:1c:6f:30:ed:00:17:0e:f0:1b:97:f7:f2:f8:2e:
                    7f:f1:d1:7c:8c:9c:b1:90:15:5f:04:d6:d9:d4:7f:
                    26:80:b5:f7:45:4f:cb:ff:33:37:cb:27:8d:b5:df:
                    36:dc:1d:d4:62:80:e8:3a:29:f1:6a:2b:78:d9:8f:
                    b8:c7:aa:81:33:19:6e:5c:b8:f9:a4:38:ff:33:e9:
                    28:c2:db:d6:a8:16:a5:9e:f2:a9:dc:ba:ae:55:d0:
                    4b:6b:3e:02:df:dd:ab:e1:c2:2f:aa:57:e7:f3:b8:
                    66:fb:c2:08:b1:8f:ee:dd:60:4c:42:2a:9e:1a:25:
                    80:77:d1:a1:02:a3:50:f9:48:92:da:75:e6:90:63:
                    55:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FE:87:C3:0F:96:EE:AF:4C:FA:A8:48:96:14:6F:77:85:F6:F3:96
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ed096148-5100-46e5-ac08-ec283442a551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:98:73:d8:21:8a:c4:17:67:ac:29:e8:16:97:b0:2a:d8:d9:
         e9:97:60:54:a8:93:e0:7b:c4:72:67:6e:68:da:b8:e4:34:62:
         4c:45:4f:68:41:fa:7f:8f:be:3b:f6:d5:86:65:f4:8f:55:4e:
         20:1f:7c:c5:29:91:c7:95:79:22:a1:9f:32:ce:14:bb:3b:0f:
         59:2c:28:97:61:8d:ba:68:83:dc:63:75:a0:fe:30:de:85:b8:
         b3:b8:ec:3d:f7:18:e3:76:df:31:a7:92:75:ee:bb:7d:f8:6b:
         02:fc:ff:0b:5c:dc:60:a7:b3:36:07:8b:28:58:b7:ca:69:75:
         1c:d9:4e:60:c6:ed:f0:71:d0:4c:cc:c0:e0:3c:6f:eb:5a:f2:
         da:3a:2b:10:c6:2e:cd:35:f8:46:04:5f:4c:8d:24:c7:d6:97:
         54:9f:39:bf:87:49:76:13:99:08:0a:af:e6:37:81:c0:91:66:
         dd:84:0d:21:93:f4:92:4e:47:9e:26:0f:1e:80:bc:74:89:3d:
         4a:35:ee:20:8f:56:06:ed:bb:4b:7b:96:4d:24:e9:47:b6:40:
         2a:56:c8:2f:90:2a:86:22:7a:bd:7c:c8:ab:b1:af:ab:1a:eb:
         7c:4b:c1:04:2c:88:57:e7:c3:87:9c:50:0a:9d:0c:73:2e:c3:
         ae:59:8a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----