Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/23a45be1-2884-462d-9dff-14d7552fb0d8.roa
File:                     23a45be1-2884-462d-9dff-14d7552fb0d8.roa (raw, json)
Hash identifier:          XzGwAA8fdBLjW2uy2cRXQs9mbSEs5aoGa7gsQ0zpqfk=
Subject key identifier:   E1:9E:CA:53:81:7D:E0:2D:0F:29:FE:67:A7:8F:62:AE:C2:19:12:DE
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       367CFBA516437BECADCE3D262E5CFDEB45C68045
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/23a45be1-2884-462d-9dff-14d7552fb0d8.roa
Signing time:             Tue 14 Feb 2023 00:00:00 +0000
ROA not before:           Tue 14 Feb 2023 00:00:00 +0000
ROA not after:            Fri 17 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7c:fb:a5:16:43:7b:ec:ad:ce:3d:26:2e:5c:fd:eb:45:c6:80:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 14 00:00:00 2023 GMT
            Not After : Feb 17 23:59:59 2023 GMT
        Subject: serialNumber=250fd792650d6b7bed4ac6b93ba9cb5723ca46e2688724f6939df12cd0104ee3, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:96:63:84:2f:1a:a4:11:88:1e:ec:8a:a6:
                    38:3e:06:18:c3:ef:5d:75:80:81:08:f2:e9:9d:50:
                    14:e7:bb:bb:eb:4d:87:56:e5:5a:2f:7e:f0:d3:59:
                    fc:c1:d8:a2:3e:f1:e5:c3:ca:72:93:4b:f0:0d:ca:
                    47:4a:62:40:39:81:ee:fd:f5:dd:62:eb:be:9d:34:
                    94:6a:04:a9:d8:6a:66:2d:ff:e8:5f:c4:62:7d:df:
                    a1:e0:46:4b:30:93:3d:32:78:8e:e9:07:95:a4:3b:
                    07:7d:65:bb:c9:6f:fb:a8:90:27:6c:d3:ba:c3:18:
                    00:c1:76:ba:c7:f7:98:29:3e:b5:d9:b8:89:74:6b:
                    60:cd:57:29:ef:60:7e:46:1a:0a:ed:b3:eb:af:b0:
                    b9:4b:a2:7f:8c:88:63:84:5b:1a:46:b0:54:83:2d:
                    0e:0c:32:59:42:1e:ee:ad:3f:51:8f:69:b8:30:af:
                    12:22:22:53:56:5d:fb:d0:19:8c:89:2f:ad:18:e7:
                    40:13:67:9b:33:e8:27:53:c4:fd:b0:35:34:89:9a:
                    ee:33:1c:7d:fa:6c:fd:e9:18:26:48:a4:2b:28:ec:
                    6c:67:07:66:8e:85:ba:49:fd:df:03:30:b1:41:8a:
                    cd:ea:f3:4f:29:f2:9e:c0:0a:8f:c5:77:aa:a1:64:
                    d4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9E:CA:53:81:7D:E0:2D:0F:29:FE:67:A7:8F:62:AE:C2:19:12:DE
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/23a45be1-2884-462d-9dff-14d7552fb0d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:f6:51:43:00:68:fe:d3:22:71:b5:73:7c:66:07:d9:7e:c8:
         27:c6:8f:b1:f2:88:7b:6f:8b:18:57:71:34:e7:fc:c7:f8:ac:
         7b:cc:5a:66:19:91:17:2b:3d:ae:b8:bf:02:f7:e6:14:8d:22:
         5d:8a:58:8e:2c:11:91:70:57:b0:5d:89:3e:05:92:35:e2:ee:
         fa:e5:cf:ad:42:56:c3:6e:f9:10:60:1e:43:65:01:73:fe:f6:
         6b:bd:fb:ca:97:f6:5b:05:f1:77:0c:2d:63:95:ba:4f:7e:eb:
         a0:62:37:e8:43:7a:36:9d:48:8b:6b:7b:6e:1f:ba:dc:b7:0c:
         8e:88:34:0a:b2:07:2d:6a:e8:9f:5e:d8:6f:a6:2d:a9:9e:a3:
         4f:0e:ed:4d:e5:41:bb:b3:67:a3:f6:fd:96:55:eb:ab:dc:29:
         26:d3:8b:64:a7:eb:a9:42:a1:38:6f:32:96:2e:be:ba:fe:2b:
         ab:00:c5:4b:1f:f5:d7:f0:a0:39:3c:16:b9:e1:84:aa:17:8e:
         52:94:54:dd:76:a6:d7:32:ff:ef:27:92:f5:87:42:48:d4:21:
         cf:c5:f0:f3:c3:4a:9e:57:c3:0c:fa:25:1a:03:29:2a:cc:d3:
         7e:8b:70:8c:ae:54:b6:4b:37:b8:23:47:77:1b:63:7c:d9:2a:
         ea:c2:a2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----