Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1481628a-773d-45bc-bad3-0c2e8923955b.roa
File:                     1481628a-773d-45bc-bad3-0c2e8923955b.roa (raw, json)
Hash identifier:          qfrk4Mx8DxcKx6fYjAfh8ijcb+ooHqLIA1mhuDpczYo=
Subject key identifier:   9C:49:62:54:8A:71:65:8A:C7:2F:60:5D:25:AF:C9:63:B5:61:45:3F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       01466DC7AD17206FB1D2405ABB4DA3E37A936DC4
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1481628a-773d-45bc-bad3-0c2e8923955b.roa
Signing time:             Mon 20 Feb 2023 00:00:00 +0000
ROA not before:           Mon 20 Feb 2023 00:00:00 +0000
ROA not after:            Thu 23 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:46:6d:c7:ad:17:20:6f:b1:d2:40:5a:bb:4d:a3:e3:7a:93:6d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 20 00:00:00 2023 GMT
            Not After : Feb 23 23:59:59 2023 GMT
        Subject: serialNumber=41b47827cd71bbf50e5481b8725988de51bb7243c957c9f8f7acb48cdf4cccf9, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:96:8e:30:38:88:46:9b:36:fa:e3:01:78:
                    9e:6d:7a:60:cd:a3:af:24:b2:fa:3b:f2:3f:bc:05:
                    24:e2:09:ef:bf:93:aa:a9:2a:9e:b3:04:ee:f0:0a:
                    90:21:60:e9:e2:53:e8:34:0c:5a:06:6d:fa:20:da:
                    b1:e3:25:79:37:3f:7b:a6:8c:ae:1c:92:2f:3d:28:
                    e3:e7:68:48:79:ff:9c:5c:97:ba:b3:4f:94:6f:62:
                    6e:e5:76:33:5a:20:bf:c6:50:73:2c:77:f0:77:8e:
                    9c:06:fe:aa:83:e9:13:a0:56:0a:65:1f:8f:16:20:
                    86:f0:3a:3b:16:d1:00:04:ab:50:23:d8:5a:90:a1:
                    de:6b:50:0b:34:15:c9:f7:02:6c:93:9d:d5:73:08:
                    5a:6a:a8:d8:73:ce:dc:39:03:4d:76:f1:45:d6:f0:
                    89:bb:47:4a:09:82:82:ec:9a:6f:31:04:b2:18:06:
                    b8:fb:42:95:14:00:06:ba:fe:66:3a:7d:2b:0e:e4:
                    26:d6:16:86:0e:c8:17:c0:ef:53:69:30:aa:c0:57:
                    73:9f:26:ed:04:78:d3:34:77:a3:84:ab:b8:5d:c3:
                    83:a2:62:28:97:fb:d7:af:6a:12:4a:09:de:68:c9:
                    53:14:3f:eb:7f:7a:51:77:e1:0b:94:0b:bf:6f:66:
                    26:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:49:62:54:8A:71:65:8A:C7:2F:60:5D:25:AF:C9:63:B5:61:45:3F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1481628a-773d-45bc-bad3-0c2e8923955b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:79:d6:12:7a:c4:e9:c9:c0:a4:38:89:09:ee:5d:b7:05:b3:
         47:e1:27:3f:d9:9e:f2:98:02:1b:81:87:2c:1b:3b:c5:d6:85:
         21:e1:aa:17:a6:b5:6e:0a:93:80:b5:34:3e:b0:ff:3e:09:ea:
         9b:b2:ff:0d:dd:77:c7:54:8d:ee:d4:5a:63:2e:8a:b5:a7:c9:
         61:55:0e:74:90:dc:ae:9b:4d:9b:6c:d2:d4:f3:07:bd:c8:34:
         ad:5a:26:19:33:1f:4b:f6:27:ca:4c:c3:3b:c5:c7:4e:56:b8:
         ed:7a:85:17:e7:a2:6d:d0:7c:97:7b:b3:74:1e:8c:11:03:19:
         b3:6e:49:69:86:80:f5:7c:ca:90:16:10:58:99:d0:85:f0:0e:
         37:3f:5c:c8:eb:87:d6:e1:28:93:42:a6:18:04:60:4f:91:3c:
         2d:42:f7:9a:54:cc:59:9c:14:6c:77:c0:61:2e:01:7c:c8:4c:
         ea:74:18:5a:50:ab:29:43:02:c9:a8:08:b6:9f:df:dd:c5:40:
         c7:d6:6a:9c:3a:69:06:54:89:90:09:90:7d:23:a3:ef:2d:9e:
         51:b6:fb:f2:c4:ac:41:a9:85:17:c8:d5:af:17:3d:0f:bf:ff:
         74:b9:31:52:7f:8b:6d:58:08:95:21:e3:2c:0e:81:bb:e7:20:
         9c:f2:b1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----