Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/190eb094-47b5-4463-846b-fbcb73e5bf1c.roa
File:                     190eb094-47b5-4463-846b-fbcb73e5bf1c.roa (raw, json)
Hash identifier:          2KcUUfSzMPz/CCwcT7nLwGOnTpWzHJ6MQHU53SvTfJs=
Subject key identifier:   E0:78:1A:13:BF:0B:89:BB:23:A6:12:3B:00:36:A9:E7:0A:65:56:6B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7AA39D723633DC2CD245DBCD242AF2A5287B3B14
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/190eb094-47b5-4463-846b-fbcb73e5bf1c.roa
Signing time:             Fri 24 Mar 2023 00:00:00 +0000
ROA not before:           Fri 24 Mar 2023 00:00:00 +0000
ROA not after:            Mon 27 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a3:9d:72:36:33:dc:2c:d2:45:db:cd:24:2a:f2:a5:28:7b:3b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 24 00:00:00 2023 GMT
            Not After : Mar 27 23:59:59 2023 GMT
        Subject: serialNumber=4075fa1340a20a252636970be94f57829947e50020483d9c41317031d3ffa7f0, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d4:59:5d:0d:17:a4:27:dc:28:dc:44:58:5c:
                    8d:51:28:5d:07:d6:08:ce:46:e7:46:ad:c3:87:9c:
                    26:c3:c1:6f:b1:d7:65:3f:16:c2:ba:4c:85:10:3e:
                    2a:ef:9d:89:44:0b:0f:a0:81:20:95:a6:74:f2:1d:
                    50:36:02:dc:67:a1:55:19:1d:a2:56:d4:e6:5c:ee:
                    17:e5:c0:89:64:c0:ee:e3:10:89:fb:c7:ea:81:0f:
                    f8:83:fb:e7:65:f2:8c:32:df:11:3b:85:68:7c:62:
                    da:93:68:78:71:93:64:3c:d2:e8:40:b0:9d:ba:2b:
                    17:6d:88:7e:03:1b:e5:f1:7e:58:69:02:63:66:2a:
                    93:72:7c:82:cc:fe:e1:f7:a7:64:f9:cd:5a:69:9d:
                    47:83:cc:06:27:d0:33:4e:1c:02:a5:88:e0:1d:9c:
                    45:9d:7e:87:51:7e:bb:bc:ec:86:87:e1:a3:50:69:
                    68:e7:33:8e:85:be:7e:c8:1a:07:b9:6a:df:2f:93:
                    b1:3d:15:6a:a9:db:c9:b8:20:22:62:fb:f8:12:58:
                    7a:65:f3:fb:f0:e1:23:c5:9f:ee:46:c4:54:64:04:
                    23:5b:f7:71:73:54:da:00:17:b9:f6:74:07:09:a0:
                    7f:17:95:56:6c:d1:60:bd:38:4c:fd:81:e7:24:55:
                    df:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:78:1A:13:BF:0B:89:BB:23:A6:12:3B:00:36:A9:E7:0A:65:56:6B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/190eb094-47b5-4463-846b-fbcb73e5bf1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:ba:d9:21:97:9b:91:a0:56:e7:d0:af:f3:06:dd:6f:0e:06:
         0e:02:c1:75:2a:00:0d:78:cd:bf:ea:97:1b:34:cf:a7:9b:c2:
         2e:67:23:2f:d2:96:24:ed:ce:9d:81:ac:4f:4a:ab:e3:11:4f:
         60:b2:25:f8:d5:e9:e0:3a:87:98:07:14:a9:30:a7:d4:48:8a:
         c4:cb:f5:d6:1b:4d:86:3d:e4:f9:ce:f7:fb:3e:93:fd:e7:1c:
         25:30:81:de:55:91:41:16:f0:ad:38:a3:58:cb:35:d9:51:d7:
         61:4b:d1:ad:aa:14:68:4a:bf:14:d9:ca:e0:38:42:86:53:d0:
         ac:34:18:8c:e3:c7:06:e5:a4:55:1a:2e:b8:cc:c2:dd:f6:bc:
         c9:61:ba:c2:e9:69:1b:df:a7:46:3d:59:31:34:8d:04:45:d7:
         f0:78:0d:7b:bf:4e:c7:65:94:0b:eb:1d:d9:dd:17:ce:76:0b:
         bc:10:35:eb:40:38:03:fd:18:2b:08:75:88:d6:39:28:33:7f:
         41:ec:61:6b:0a:b1:63:fc:0b:c4:ed:3f:90:96:2a:f4:99:7e:
         84:8a:5a:07:e6:34:a5:ba:7f:bc:ed:0b:f6:d0:a9:6f:97:0a:
         07:c0:fc:eb:78:c3:23:11:e6:a8:2d:64:52:64:23:87:7b:f7:
         cd:f8:b8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----