Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7600764c-8a0a-4c8b-9744-e91546538bda.roa
File:                     7600764c-8a0a-4c8b-9744-e91546538bda.roa (raw, json)
Hash identifier:          1iIKf+ENJeV2OdzDVtkOH16MZy2AfOJJTRDVqr+vOPE=
Subject key identifier:   34:62:A8:7C:D7:C4:B7:FA:C7:7C:63:0F:B3:0F:FA:5E:20:BA:29:8B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4C40C1FFC87452BB42D8A302752850B8CEEAE976
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7600764c-8a0a-4c8b-9744-e91546538bda.roa
Signing time:             Sat 25 Feb 2023 00:00:00 +0000
ROA not before:           Sat 25 Feb 2023 00:00:00 +0000
ROA not after:            Tue 28 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:40:c1:ff:c8:74:52:bb:42:d8:a3:02:75:28:50:b8:ce:ea:e9:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 25 00:00:00 2023 GMT
            Not After : Feb 28 23:59:59 2023 GMT
        Subject: serialNumber=e4e60ac0ad9063549107d8d5d4b84b4f996e1c8c90d86a0aa87bafedf7332643, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:41:44:49:0e:6e:35:6a:ab:da:51:d1:57:8e:
                    49:27:00:b5:f5:96:f1:5b:06:d6:b0:f6:ec:f0:57:
                    16:77:40:de:32:06:13:d7:61:ec:b5:20:a2:2d:16:
                    22:d6:64:07:82:8f:f3:1d:dc:50:f6:c6:96:93:ae:
                    a0:75:8e:6f:97:f7:00:1a:96:9b:d5:13:d6:62:43:
                    6d:c3:e9:8b:c2:da:9a:2f:ce:dc:d1:00:35:fd:f2:
                    35:8e:f1:9f:70:8b:e8:19:a4:47:5a:ff:ac:17:63:
                    84:e3:78:db:23:65:14:9f:92:3b:0f:05:3c:02:89:
                    28:70:99:e9:11:21:70:ec:98:1a:85:d9:8a:58:a0:
                    4d:85:29:d9:1b:db:a7:1d:9c:ac:0e:f6:7c:e9:02:
                    62:e4:af:aa:1c:3f:29:6e:85:b3:82:df:2f:ab:3e:
                    2a:f6:40:b0:1f:e5:a8:a6:57:63:f2:f0:b4:44:1c:
                    55:3a:78:09:8d:01:ae:75:93:27:c7:71:d9:2d:23:
                    d5:32:b0:21:57:d7:db:ce:7f:4d:e8:10:0e:6e:e3:
                    7a:af:02:87:3e:94:0d:ff:a2:04:4a:1e:c0:ef:c9:
                    94:e2:00:b4:67:d8:ac:08:c8:df:5d:14:3c:11:63:
                    3b:70:5b:01:32:fb:92:e9:7e:14:cc:57:f4:aa:25:
                    29:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:62:A8:7C:D7:C4:B7:FA:C7:7C:63:0F:B3:0F:FA:5E:20:BA:29:8B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7600764c-8a0a-4c8b-9744-e91546538bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:cd:61:6d:26:12:6e:ee:24:45:f2:ae:14:8d:8f:e8:91:db:
         5a:7f:81:16:01:76:d4:45:2d:e0:3c:05:0a:b6:11:70:2a:6d:
         c1:db:7a:f8:ee:28:23:c9:36:d6:c8:2a:2a:0e:d8:c0:81:f9:
         ef:46:26:71:99:5e:c5:47:7a:4f:63:08:7f:d3:17:8b:f3:9d:
         bd:4c:ee:10:3a:1b:ac:7d:db:38:6a:ce:8e:80:eb:6c:e9:af:
         f3:df:f0:0a:8e:45:01:30:53:e6:05:94:dc:5a:fd:f1:a2:2a:
         6c:b9:1b:5d:4c:27:f9:80:62:91:2f:2f:c2:ab:20:08:99:54:
         dc:ce:20:2c:ea:56:dd:cf:c3:14:fe:23:35:d5:a8:fc:ef:82:
         3c:be:99:88:bf:25:7e:ad:c3:64:9a:7b:9d:cf:f6:0d:f8:22:
         8a:ee:42:0f:75:4c:8b:7c:89:e7:24:72:de:df:93:58:8e:22:
         8c:3d:34:81:f5:48:02:3b:32:9e:a4:76:87:1f:1c:1e:7b:67:
         96:07:69:be:55:10:36:93:9d:38:3c:c0:2c:55:8c:1f:fc:17:
         c6:57:94:e6:f9:c5:f1:e7:99:c0:28:87:58:78:b5:c1:1c:bc:
         a7:04:ca:26:c2:42:b3:de:6a:5b:cd:94:25:c8:ad:6e:a9:4b:
         0f:c6:cc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----