Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/58cbeeda-ec54-412d-a1e3-331f96c6a3cd.roa
File:                     58cbeeda-ec54-412d-a1e3-331f96c6a3cd.roa (raw, json)
Hash identifier:          YOgmVh3ADiWQvLBS3EQVH88Sc1nQY0lOWB8SM4YCcAk=
Subject key identifier:   1A:33:E1:8F:B5:09:35:11:73:52:10:C5:9A:FE:4C:85:CE:31:66:24
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       729A176F39C9BE70172AA2CD3CFD68CA2558D01F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/58cbeeda-ec54-412d-a1e3-331f96c6a3cd.roa
Signing time:             Sun 12 Mar 2023 00:00:00 +0000
ROA not before:           Sun 12 Mar 2023 00:00:00 +0000
ROA not after:            Wed 15 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9a:17:6f:39:c9:be:70:17:2a:a2:cd:3c:fd:68:ca:25:58:d0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 12 00:00:00 2023 GMT
            Not After : Mar 15 23:59:59 2023 GMT
        Subject: serialNumber=4e529ac322238ca5456af9c521436ce9f23866a14e14c35d048a85d221d9378d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:6f:15:85:c8:69:f5:45:f9:2a:f4:1a:04:
                    31:d3:ac:0c:10:42:29:ae:8f:65:89:8f:d6:95:1b:
                    66:15:16:8c:da:b1:cd:68:89:b3:03:a0:a6:0d:00:
                    4d:1b:34:ee:e9:4b:43:82:f8:c8:a9:6b:a0:e5:cf:
                    ac:92:ec:81:c7:17:d6:7d:57:75:21:c1:9d:e5:99:
                    a3:83:47:44:da:dc:6a:1d:56:e8:c8:9a:15:51:5b:
                    ba:37:fa:d8:96:74:a4:2b:e3:dd:ef:cf:26:ab:c3:
                    bf:ca:87:f7:95:c1:58:9d:cf:cd:62:49:81:0a:e4:
                    2f:e8:2f:c8:e2:04:ed:bb:41:fe:3a:8d:61:f5:6a:
                    9b:55:b5:cc:65:96:ad:c0:d7:ee:8d:12:36:d5:28:
                    78:e2:87:21:fa:cc:42:67:7a:20:63:75:a3:31:04:
                    d0:51:69:cf:bc:ba:53:2c:b5:05:8a:73:63:92:63:
                    e0:f2:07:96:ac:17:5d:24:dd:69:59:4d:94:57:52:
                    a0:69:62:4d:76:2d:28:b2:59:32:f7:67:9d:78:f8:
                    1d:99:e3:3b:7c:ae:95:48:51:3e:32:f7:24:70:9f:
                    42:c5:d5:08:a8:07:92:6a:5c:1c:68:f5:26:54:21:
                    99:5d:5f:41:12:4a:16:85:07:42:e2:e9:53:fb:53:
                    e5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:33:E1:8F:B5:09:35:11:73:52:10:C5:9A:FE:4C:85:CE:31:66:24
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/58cbeeda-ec54-412d-a1e3-331f96c6a3cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:d8:df:4e:80:19:c4:90:db:2d:1a:9b:3e:d3:d9:4c:30:a0:
         07:bb:3d:03:9f:92:d5:d7:3f:31:26:ee:ed:1f:ec:0e:ce:79:
         5e:6c:8e:cd:ee:d2:e4:be:32:c6:fe:a5:55:4f:b3:f0:58:e3:
         a3:cf:13:fb:6a:86:2d:70:22:c8:b5:ed:a5:32:ec:e2:29:24:
         c5:2d:70:12:58:4e:81:2d:5b:d6:a8:05:ca:26:da:89:31:d3:
         8f:8b:03:9a:12:b1:99:c4:27:7b:9c:95:5a:23:c6:bc:a9:02:
         eb:88:2e:9b:ab:84:e3:1e:3d:9b:f8:e3:a4:c4:6d:d5:74:14:
         f5:d9:40:10:4d:ba:4e:0e:bf:fe:fd:7c:db:fc:8f:03:26:dc:
         ee:d8:b7:a6:1b:44:ce:4b:01:6e:42:68:0d:1f:83:c6:1a:ce:
         9f:f6:49:d6:23:a6:0e:19:48:a6:0b:06:9e:ca:40:91:b8:44:
         cf:d6:1e:1c:02:15:58:72:2c:48:a4:87:0b:04:cb:fe:9c:cb:
         33:b4:ec:51:cf:1d:e6:0d:7d:ac:d0:4d:82:e8:fd:5c:ec:39:
         f9:f9:36:2a:23:5e:7f:74:b3:e6:e7:09:d4:26:c5:93:52:f3:
         96:0d:0e:15:97:69:7e:87:b5:5d:7b:81:17:25:a5:05:32:26:
         db:71:0d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----