Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fe801ef6-7019-45ef-ba41-862b9c77a1d6.roa
File:                     fe801ef6-7019-45ef-ba41-862b9c77a1d6.roa (raw, json)
Hash identifier:          LKK8QIfl/dFFwM0CONuNxsNLxqmBpaqdIcUF1QaCESM=
Subject key identifier:   48:5A:72:6D:F8:AE:F6:5B:E6:C0:D0:BA:07:EA:51:5E:0F:2E:BE:8F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       44C04C3E58774F1A301FD3E4012E95E07B55B00A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fe801ef6-7019-45ef-ba41-862b9c77a1d6.roa
Signing time:             Tue 14 Feb 2023 00:00:00 +0000
ROA not before:           Tue 14 Feb 2023 00:00:00 +0000
ROA not after:            Fri 17 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c0:4c:3e:58:77:4f:1a:30:1f:d3:e4:01:2e:95:e0:7b:55:b0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 14 00:00:00 2023 GMT
            Not After : Feb 17 23:59:59 2023 GMT
        Subject: serialNumber=7aab64e353a2cd35e411f3867494a407b0b2b1222f64b62c84bba2495920ce99, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:48:20:5c:cc:81:4e:92:d7:4d:a9:b6:0b:ce:
                    66:ab:a5:e8:3f:6b:20:7d:b5:fe:f1:9f:dc:e3:2d:
                    1a:42:cb:2c:53:a4:76:b0:d4:cd:7e:dd:3f:23:b2:
                    55:52:a1:a4:95:23:7d:cc:62:77:32:16:a5:c9:ed:
                    5b:6e:de:59:77:dc:05:be:46:05:3c:a1:51:1b:0d:
                    6b:f9:0f:9e:8a:bd:27:68:17:4b:bd:2d:73:36:da:
                    af:23:c0:1a:16:5f:d2:00:64:29:b2:99:95:34:89:
                    fc:b3:a1:15:fb:5c:9e:d0:62:26:86:8f:28:ae:5d:
                    e0:f0:47:98:5d:50:ff:29:2f:03:fc:6a:22:ca:bb:
                    64:76:96:83:09:56:0f:c1:52:9f:a4:16:14:e8:2e:
                    b9:87:25:47:4e:7b:ac:15:4d:2f:c0:c2:aa:c1:ee:
                    b5:5d:82:bc:7d:47:18:f9:f5:70:cd:89:17:ce:62:
                    43:c5:ba:42:89:8e:c8:7b:49:57:50:f6:fc:81:bb:
                    7d:c2:db:26:09:0e:c8:f8:0a:e1:d0:f3:2b:dc:09:
                    75:22:9e:cf:4d:7b:c1:c0:5a:c0:24:3c:c3:d5:da:
                    42:f5:df:95:44:f0:b1:8c:17:8c:22:ca:6c:15:89:
                    9d:2b:f5:30:a4:a7:46:4a:08:d4:f5:71:d6:66:9b:
                    46:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5A:72:6D:F8:AE:F6:5B:E6:C0:D0:BA:07:EA:51:5E:0F:2E:BE:8F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fe801ef6-7019-45ef-ba41-862b9c77a1d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:c0:a6:e0:56:de:93:38:ca:1a:58:17:6a:96:9e:6a:9e:cc:
         f0:98:a8:88:a8:fa:1f:9f:4d:4f:1b:53:b1:57:5d:9d:d3:5b:
         72:12:92:35:6f:61:7b:2e:90:2c:0b:73:fa:ba:4c:17:ea:42:
         0d:e9:7c:2e:f8:73:35:e3:1f:f7:83:5e:57:ac:41:0c:e9:5e:
         b5:07:ba:d3:61:6f:c7:27:87:15:94:37:84:e6:09:90:71:2d:
         f4:7e:34:30:80:ad:e3:31:cd:f2:22:91:de:c1:21:46:11:4c:
         53:04:d4:24:2c:de:ba:48:92:52:5a:c2:ec:aa:4b:4d:a1:52:
         7a:4a:f6:49:e1:ab:a1:ed:c9:ff:79:61:90:32:96:78:f7:da:
         ae:cf:05:11:3d:1f:91:b3:ea:d1:53:28:83:da:7b:7f:ef:90:
         47:6d:63:46:b8:08:aa:11:51:93:f5:3d:29:d9:91:3d:8c:ac:
         8c:2a:5f:ca:67:f6:e8:41:2a:6a:43:39:d6:77:e7:0d:b9:13:
         02:57:b6:e2:72:9d:02:d2:88:14:52:24:01:4f:d8:3c:6a:49:
         5c:51:32:bb:e7:6f:70:04:85:fd:ff:a4:39:a6:59:aa:2d:9b:
         2d:78:3f:d4:c6:c7:a3:1a:d1:09:d5:b7:ed:f1:b9:9a:b5:3d:
         62:6f:b6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----