Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2f089867-5a87-4901-85a8-73153d9af795.roa
File:                     2f089867-5a87-4901-85a8-73153d9af795.roa (raw, json)
Hash identifier:          9WjRkPwV7WW+iUn+rOLg6JDU5eRqoJDOArR8m5IuAGs=
Subject key identifier:   D2:34:AC:C8:D8:B3:DC:E3:6D:55:47:9A:BC:A0:77:9A:5F:64:3F:1B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       265B02CB97DEE24253578C96C04665E165111C8D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2f089867-5a87-4901-85a8-73153d9af795.roa
Signing time:             Mon 13 Feb 2023 00:00:00 +0000
ROA not before:           Mon 13 Feb 2023 00:00:00 +0000
ROA not after:            Thu 16 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5b:02:cb:97:de:e2:42:53:57:8c:96:c0:46:65:e1:65:11:1c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 13 00:00:00 2023 GMT
            Not After : Feb 16 23:59:59 2023 GMT
        Subject: serialNumber=4e110813e7b925503990813eb2b61bc7da774784f0dc6676f29973e10271c488, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:40:39:22:a7:4b:88:d6:31:08:1c:71:47:30:
                    89:20:eb:f7:42:b0:dd:b5:50:8b:1e:eb:dc:25:e4:
                    bb:f7:7f:a7:1b:78:fa:5c:01:98:c1:fc:b2:b4:f9:
                    20:a6:6f:16:d9:ac:29:d8:4e:c5:9b:7f:74:78:7b:
                    f4:c9:14:f3:de:93:12:de:bf:5b:2d:cd:85:47:46:
                    80:f5:bd:13:43:5a:2b:d3:85:ed:b3:b3:92:b4:88:
                    5e:d9:05:8e:d9:4e:de:85:3a:c2:29:f7:39:72:9f:
                    4c:2a:35:8e:1d:50:fe:40:9a:81:e0:1b:51:01:ae:
                    d7:2b:f6:0b:9e:80:17:06:86:8d:f0:f3:ec:6b:de:
                    34:60:ee:20:6e:9e:57:6f:45:10:3f:b8:a8:9a:13:
                    18:38:66:6a:01:c8:82:dc:78:46:0f:a5:c1:ba:fb:
                    d2:d0:13:56:93:0f:69:02:57:cd:71:15:b3:78:01:
                    05:38:18:74:37:89:1b:a9:28:72:18:66:32:e0:e5:
                    4f:b1:8f:7e:47:af:58:59:e4:92:d7:0e:a4:e4:84:
                    ee:e0:f7:df:35:2f:30:c5:ea:5c:0f:72:9e:5f:42:
                    14:31:8a:ca:29:89:af:f7:c2:9a:c9:08:c4:95:8b:
                    5a:be:e6:b9:07:4b:84:91:ff:a3:bf:1a:13:82:94:
                    b4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:34:AC:C8:D8:B3:DC:E3:6D:55:47:9A:BC:A0:77:9A:5F:64:3F:1B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2f089867-5a87-4901-85a8-73153d9af795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:7e:3d:fa:5f:2f:b1:39:e7:66:dd:7a:45:23:2b:b5:6d:3f:
         ce:29:a2:4c:82:c0:9b:51:08:a2:cf:70:d4:2f:97:f6:a0:51:
         6e:ca:be:16:12:68:3d:01:07:8e:ea:bc:d7:f3:0f:b5:4a:85:
         9b:35:0a:bd:c7:0c:81:27:14:8b:2b:f0:69:4f:04:37:c0:33:
         a7:46:60:cd:7c:08:44:66:32:d2:3b:d9:75:3c:c3:1d:b7:04:
         26:23:21:de:f3:3f:af:da:59:5e:cf:2d:84:5f:4e:51:6b:bf:
         1e:be:99:8a:8a:fd:00:85:5f:55:c5:a6:5e:b3:55:aa:0a:93:
         70:84:f2:88:eb:7d:0c:ea:7e:09:fd:9c:25:41:1f:58:b1:23:
         f6:be:8b:d1:92:54:9d:0e:f8:94:bc:94:1e:cb:ae:ed:3a:43:
         d6:e6:35:c4:6c:ff:cc:7c:1d:95:51:09:81:e0:f8:4e:5a:b9:
         11:79:af:cf:9a:e6:91:79:dd:3f:22:bd:f3:e2:18:a7:ae:f6:
         cd:d7:c8:2a:0b:8d:8f:bf:1d:00:15:65:b7:50:dc:60:d1:bf:
         25:88:e9:8a:be:f2:6d:09:19:be:36:35:7d:2d:af:a6:31:ad:
         d6:2f:da:df:fa:5b:2f:01:d4:3e:42:bb:9f:c8:e4:af:7b:e7:
         91:0d:f6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----