Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7435e394-72d7-49b4-be40-cc23918b01fc.roa
File:                     7435e394-72d7-49b4-be40-cc23918b01fc.roa (raw, json)
Hash identifier:          Dv9RhyeER+76U3PEW14iEU+qBFf5OVLxzkqULGEAT1M=
Subject key identifier:   2E:12:F3:59:29:3A:AA:58:41:F1:65:08:EC:33:45:3B:3E:47:04:A9
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4AB2CC497DA8D5A01B8FC0AEE4774CE982947D09
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7435e394-72d7-49b4-be40-cc23918b01fc.roa
Signing time:             Fri 31 Mar 2023 00:00:00 +0000
ROA not before:           Fri 31 Mar 2023 00:00:00 +0000
ROA not after:            Mon 03 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b2:cc:49:7d:a8:d5:a0:1b:8f:c0:ae:e4:77:4c:e9:82:94:7d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 31 00:00:00 2023 GMT
            Not After : Apr  3 23:59:59 2023 GMT
        Subject: serialNumber=7915d5955139481fd9632b4d853e7c1ebb7ad4ba3866b355ad667ae7a6006476, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:02:a1:04:38:dd:5e:5e:81:4e:92:c0:71:9b:
                    a5:c7:8b:b0:1a:93:57:71:a7:80:69:f5:19:cf:ef:
                    e9:a6:92:a4:06:28:05:8d:54:97:b2:40:fb:53:7b:
                    72:17:2e:02:18:03:d3:8d:3b:3f:7e:a8:4e:bd:03:
                    50:f5:5d:a6:e3:c4:c8:28:0b:25:10:9c:e0:07:89:
                    f3:9d:fc:d4:73:90:98:bc:ae:5d:8a:13:a9:7f:f2:
                    47:3c:b7:51:88:41:89:e1:32:11:36:dc:c2:27:11:
                    bf:c0:73:ac:7b:7b:85:a7:9c:16:47:eb:39:f4:67:
                    d3:a3:7b:74:51:a5:be:78:69:ea:29:17:47:10:53:
                    bd:d7:c2:93:4c:09:dd:9f:9f:14:fc:2d:0b:00:d9:
                    bd:e3:7d:b0:5e:90:7b:ec:10:e1:2a:47:d8:e6:0d:
                    ce:fc:a3:60:6f:86:73:5c:97:b1:79:4a:56:95:ea:
                    e0:9f:64:85:22:d6:b6:09:84:25:6d:a0:0b:48:fc:
                    a5:be:3d:f5:2f:d5:80:49:0c:af:d5:28:f9:c4:fd:
                    ab:94:f4:88:b6:05:f3:3c:e9:9e:75:d3:ab:55:29:
                    d2:0c:c2:58:31:c6:2f:25:7a:68:2b:84:39:e7:d3:
                    30:53:f8:46:74:ce:83:2b:22:61:ed:6d:69:40:3a:
                    2f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:12:F3:59:29:3A:AA:58:41:F1:65:08:EC:33:45:3B:3E:47:04:A9
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7435e394-72d7-49b4-be40-cc23918b01fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:7c:ff:8e:5a:3f:2a:58:fd:98:8d:a4:05:b0:d5:1a:c1:74:
         5b:db:1c:65:5a:f8:b9:55:ae:87:ab:d3:eb:6b:6a:94:aa:90:
         e5:9c:66:f4:6b:d0:d9:fe:4e:35:c3:29:a7:b4:ae:6d:19:9b:
         c2:40:fa:df:21:66:b6:c1:2e:ff:c1:a0:3f:fe:c3:d1:7a:4a:
         03:36:97:24:d4:84:a3:13:f3:fc:f3:c0:de:89:a4:65:8b:77:
         7e:e6:c8:a1:cc:08:14:16:55:4d:6b:14:d2:e2:5a:2e:db:7b:
         ba:89:92:8c:28:3e:5a:94:da:ca:a4:12:f8:9c:f2:e9:7f:70:
         4f:f7:4f:ae:de:1e:79:fc:80:15:6d:fe:c4:35:5c:88:50:85:
         89:24:d1:98:bb:7c:67:cd:70:b3:6c:c2:ec:eb:c4:98:f7:6e:
         cd:64:d2:ed:b7:8f:e8:06:30:b8:ac:55:e8:32:63:8c:86:67:
         91:7b:29:51:da:d0:a5:67:05:c0:5d:bd:35:c5:da:b1:53:77:
         b5:3c:34:07:82:d1:51:1c:85:cc:db:c1:01:32:9f:b5:91:a4:
         b0:f7:3b:19:94:82:61:b8:63:4c:ea:7b:86:37:e7:c1:e7:a0:
         dd:6f:82:f3:68:b2:cb:51:85:68:73:1c:24:08:0e:b2:3a:87:
         f7:70:3a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----