Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f75db151-a8c2-4ac3-9e46-cbaeda943759.roa
File:                     f75db151-a8c2-4ac3-9e46-cbaeda943759.roa (raw, json)
Hash identifier:          EuLEIyFnv8HVP8wwvaFGPiE6+CQ9qtNb9Qim4Qvx7p0=
Subject key identifier:   B5:84:B6:98:16:9E:28:FB:79:DD:E2:C8:FB:69:FC:E1:A4:63:CA:B6
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0625245D2037EC1A12761F6A01233AA6612CD7DF
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f75db151-a8c2-4ac3-9e46-cbaeda943759.roa
Signing time:             Mon 20 Feb 2023 00:00:00 +0000
ROA not before:           Mon 20 Feb 2023 00:00:00 +0000
ROA not after:            Thu 23 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:25:24:5d:20:37:ec:1a:12:76:1f:6a:01:23:3a:a6:61:2c:d7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 20 00:00:00 2023 GMT
            Not After : Feb 23 23:59:59 2023 GMT
        Subject: serialNumber=b29d447cc11a7ce7e237803d5371a47969199fc9d8d2fa945e7502316e69c63f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3b:7d:55:47:59:e4:fd:05:b9:0f:14:2d:d1:
                    46:4c:34:07:4f:0b:00:39:dd:3e:9b:51:7a:3b:7c:
                    c2:b5:64:e1:42:0a:9d:fd:08:41:ab:02:68:73:f1:
                    7e:aa:62:dd:4c:2a:ac:5a:cb:66:ef:8e:80:9c:84:
                    33:27:34:6d:55:34:30:fe:b5:44:f6:0d:1f:60:c0:
                    08:05:49:8d:b2:0f:bf:7a:47:65:9b:e1:7d:d2:55:
                    e2:32:71:ce:fe:1d:bc:d3:2f:c0:20:ac:8d:6e:22:
                    1b:37:c3:96:30:2a:83:b2:56:93:d2:0c:a3:5a:b9:
                    d1:c6:f8:c9:f9:1a:2d:6e:c8:1d:d1:04:2a:54:db:
                    0f:ee:d4:0a:09:49:b5:1d:fd:4f:b0:02:8a:80:e5:
                    58:9b:49:fb:82:84:5d:de:1e:24:93:3b:de:9c:c4:
                    87:71:ef:76:e4:03:9f:14:51:ce:57:e4:8e:fc:27:
                    cb:8f:0e:de:6b:78:92:db:44:85:85:21:d5:74:40:
                    97:55:59:e9:69:ca:d3:45:8d:db:f3:9a:21:5a:6a:
                    40:fc:34:8e:07:50:42:48:80:9b:0c:39:5d:66:41:
                    24:49:43:02:a3:57:4e:f7:5e:cf:57:f2:09:d9:cc:
                    88:79:90:9b:51:1c:4d:22:9a:94:af:77:6b:94:3d:
                    a4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:84:B6:98:16:9E:28:FB:79:DD:E2:C8:FB:69:FC:E1:A4:63:CA:B6
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f75db151-a8c2-4ac3-9e46-cbaeda943759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:c5:5a:1d:b0:eb:05:72:b5:cf:00:d4:df:3a:7f:b6:8a:7c:
         6d:ed:a7:89:de:32:be:54:48:22:eb:93:fe:5a:cb:f9:11:a0:
         60:8a:87:30:62:52:68:6c:7a:e8:9b:a9:fb:48:96:2d:b9:f6:
         29:81:d2:a8:59:61:27:47:68:72:cd:d8:0d:98:e8:dd:8e:e7:
         bb:44:d8:5a:d8:ae:2a:14:8e:21:42:1c:28:cb:99:b7:db:ae:
         60:5e:85:01:e3:33:5f:f4:3e:63:2d:25:d3:61:9a:d4:b4:33:
         6f:02:b3:a0:28:6c:17:29:f6:41:5f:f0:67:96:ed:be:30:bd:
         68:45:53:67:61:bd:65:55:64:9e:7f:9a:9a:40:70:f1:34:20:
         70:3d:cd:04:6c:59:ff:15:c1:c1:3f:ad:45:30:df:30:22:83:
         81:7e:92:a7:c3:40:ad:96:50:6c:c7:52:46:65:43:b4:bd:1c:
         a3:88:ff:ab:84:c8:86:f2:90:6d:49:56:fc:07:c4:bf:c0:97:
         a8:45:77:ba:d8:ed:18:c9:43:88:32:bf:20:f9:b7:3d:78:c3:
         39:ef:c1:6b:2a:ad:01:58:93:56:37:3f:c2:fc:b7:0b:a7:1d:
         dd:87:1a:5e:42:6b:5f:c8:c9:7c:18:5a:7f:9b:ec:2f:f2:32:
         41:f1:39:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----