Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4c95dbbc-2018-4b9f-9541-f4f3f1763a34.roa
File:                     4c95dbbc-2018-4b9f-9541-f4f3f1763a34.roa (raw, json)
Hash identifier:          Fw9xvNuszGw/XqYNYfVdjgcl0n/5gdeYddZqEmv12iM=
Subject key identifier:   71:30:41:22:1B:18:F4:7B:B6:F2:B4:3D:3E:EE:86:25:6C:7C:4E:55
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6E096043FBABB943895C5B33DB1D1DBA13502FF9
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4c95dbbc-2018-4b9f-9541-f4f3f1763a34.roa
Signing time:             Sat 25 Feb 2023 00:00:00 +0000
ROA not before:           Sat 25 Feb 2023 00:00:00 +0000
ROA not after:            Tue 28 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:09:60:43:fb:ab:b9:43:89:5c:5b:33:db:1d:1d:ba:13:50:2f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 25 00:00:00 2023 GMT
            Not After : Feb 28 23:59:59 2023 GMT
        Subject: serialNumber=7d59ed7f45c313387e780f1220cc44f231d0e6d5911cc0266f820f3c0f802e5a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:95:3c:7b:3e:51:6a:d7:fe:5e:32:79:5a:
                    6b:1e:35:8b:d3:84:31:d0:5a:e2:ae:45:27:04:b1:
                    8f:c9:c3:66:b7:2c:5c:f8:ca:01:91:02:d0:e2:b7:
                    6b:43:9b:30:e6:ed:d4:e6:78:6a:5b:a0:ca:43:31:
                    28:20:e1:fb:d2:17:7a:af:5c:94:9f:8c:5b:5b:b8:
                    dc:b6:80:d3:ab:d5:a9:60:9e:9c:2e:9e:44:3b:dc:
                    52:d8:e6:65:d1:8f:65:c6:44:50:77:0d:dd:ae:7a:
                    c7:21:00:83:b3:6a:b8:6c:16:c7:f4:a9:9f:de:eb:
                    a8:46:97:68:97:f2:f9:88:78:d5:31:10:c7:8e:63:
                    a0:2e:83:a9:76:be:bd:07:ee:c4:1e:77:03:58:46:
                    4c:64:6a:bf:72:4e:f6:68:70:94:06:7f:14:2f:d2:
                    06:76:d6:6c:6f:ac:d4:df:a0:ea:1f:37:d5:c2:eb:
                    34:6d:ed:11:72:af:08:cf:8f:73:bd:3e:66:0c:6c:
                    cd:57:4a:2b:01:c9:4e:f0:fb:04:f6:78:6f:54:3a:
                    3b:c6:dd:47:5b:0e:ba:72:3a:af:7f:1e:e6:34:b3:
                    ec:e5:60:ad:10:56:cf:0f:2b:cb:29:4b:cf:78:44:
                    c7:c5:c3:67:ee:65:50:5a:1a:03:62:b9:f7:7b:e7:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:30:41:22:1B:18:F4:7B:B6:F2:B4:3D:3E:EE:86:25:6C:7C:4E:55
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4c95dbbc-2018-4b9f-9541-f4f3f1763a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:5a:b6:0e:16:71:9a:6e:4d:aa:c7:c9:3f:59:93:aa:ee:65:
         8f:34:1d:9e:d4:08:58:89:b5:64:65:a4:4e:38:02:86:aa:2a:
         36:50:7d:ab:1f:24:60:82:e9:45:dc:d4:1c:1f:55:36:2c:cc:
         bf:36:44:7e:ae:71:7e:41:71:59:7d:71:38:7f:cc:41:4c:77:
         a9:57:26:41:62:5b:2c:fa:0f:91:2d:e8:2b:e0:96:13:0d:ac:
         05:cc:9f:82:91:4f:8e:57:f1:d4:87:f4:ff:99:41:d6:9e:85:
         de:0c:3f:ca:51:08:51:37:68:e5:0a:6c:c7:90:44:49:07:7a:
         7a:a4:08:14:3e:25:e9:41:ab:86:94:a2:24:6c:58:98:b6:e6:
         61:5f:85:70:73:b1:03:68:af:da:e1:c5:a3:f6:c6:77:36:d4:
         a3:ef:72:85:ae:96:6a:42:09:83:8a:26:09:fb:6c:bd:c3:c4:
         2d:54:dc:00:33:fb:49:b3:e0:3b:c6:03:c1:12:3a:4d:84:56:
         a5:59:a0:4c:dd:d2:55:f1:5f:0e:df:ec:54:aa:73:55:66:e6:
         15:74:25:5d:3e:05:d8:e7:03:6b:a3:90:41:75:c3:2b:95:8d:
         ef:2c:c7:dd:cb:75:2e:d3:45:c0:a2:95:08:6d:83:a9:17:ee:
         86:68:78:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----