Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7b820cf5-39f7-451e-a895-82f7664f605b.roa
File:                     7b820cf5-39f7-451e-a895-82f7664f605b.roa (raw, json)
Hash identifier:          DN+5HavshVxphQrfoR2FWiaqV4vg2+MYSLcKusNTQng=
Subject key identifier:   B1:9D:0C:91:41:DE:D1:EF:3A:2C:2F:C1:B6:76:6E:6E:22:FE:96:49
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7CC3FCDCC4FE30A8FAE6CE6ADA37869D5C77ACF6
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7b820cf5-39f7-451e-a895-82f7664f605b.roa
Signing time:             Sun 12 Mar 2023 00:00:00 +0000
ROA not before:           Sun 12 Mar 2023 00:00:00 +0000
ROA not after:            Wed 15 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c3:fc:dc:c4:fe:30:a8:fa:e6:ce:6a:da:37:86:9d:5c:77:ac:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 12 00:00:00 2023 GMT
            Not After : Mar 15 23:59:59 2023 GMT
        Subject: serialNumber=fe33a6d3cc181f8fbe2b95526e00cbebcb545cda50bf0a9c0c5471966455b2f1, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ec:02:5e:45:5e:82:5e:5c:b7:d5:7a:e4:fa:
                    45:d5:3d:d2:0d:3c:7c:61:bc:b3:94:7c:13:54:a6:
                    a8:27:aa:77:2f:d0:5a:e5:f8:82:fb:1d:3c:6d:07:
                    61:c9:07:b2:c3:a6:c2:6b:63:45:85:2d:bd:9b:70:
                    03:25:a1:96:0b:c7:e2:a9:ae:06:61:18:33:3f:29:
                    77:a4:ab:5b:63:40:54:81:6e:ae:af:76:a8:41:23:
                    01:67:1f:3a:1f:21:6e:68:35:8b:e6:8d:7d:9d:09:
                    88:8f:e5:8e:9b:09:df:b9:18:cc:d4:8a:3b:3d:34:
                    8d:08:e7:8b:d7:17:87:12:34:65:79:0e:1c:e3:8f:
                    34:bc:ff:d5:b0:0b:ab:29:46:73:c2:24:2f:d6:4e:
                    3f:f0:39:e6:08:ba:07:31:4d:84:f7:2a:b2:b1:82:
                    fd:ec:2a:8f:9c:31:4c:2a:dc:b1:38:ca:20:17:9f:
                    ad:b7:f7:3d:0c:fd:b4:02:a6:79:5b:22:76:7c:5c:
                    6a:e2:0f:ac:eb:a1:14:6b:3e:77:df:b9:14:42:2d:
                    5e:ed:02:98:ce:6b:23:69:ed:17:75:fa:c6:6d:73:
                    78:d1:0f:dd:a8:96:ad:ed:83:1f:6d:9a:52:97:0e:
                    ec:49:fa:ed:04:8e:6d:a3:f1:68:61:01:a1:f7:40:
                    08:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9D:0C:91:41:DE:D1:EF:3A:2C:2F:C1:B6:76:6E:6E:22:FE:96:49
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7b820cf5-39f7-451e-a895-82f7664f605b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:91:55:14:39:40:c9:a2:8e:a8:e6:c8:8e:22:07:5e:ee:5c:
         b5:03:95:46:72:a8:f4:6d:f8:92:a4:47:16:3c:bd:23:33:db:
         69:fa:08:b3:71:28:d3:c6:5d:0b:ff:89:4d:b9:7c:1e:77:04:
         b9:91:21:11:d6:94:de:b5:b2:98:56:db:ce:18:97:bd:de:f1:
         f1:5d:32:5d:a3:e2:8d:14:02:69:b1:01:3e:59:d5:45:27:78:
         87:63:f8:1e:e5:d8:91:5e:ce:cf:52:10:ba:5f:33:87:31:f6:
         01:6c:ba:44:2e:62:41:08:dc:7d:61:b8:a4:17:64:d3:c2:71:
         a0:e4:5e:43:e1:d2:1f:92:6b:7e:b0:eb:a2:34:6a:f0:df:fb:
         0a:02:9f:a7:b9:c7:ba:91:a8:1c:ec:70:41:39:8d:c6:05:77:
         f9:8a:d4:3c:a5:61:c8:b4:7a:b1:ef:2b:70:b9:da:8a:4e:1e:
         7e:c5:01:4c:c8:f6:8e:de:92:02:6a:ad:78:fe:6c:a4:16:54:
         a5:f0:7b:62:9f:f3:8f:71:f8:1d:d4:5d:0d:73:c8:60:c7:f3:
         48:36:d1:c8:7e:2e:2f:46:3b:7e:07:61:b5:aa:89:55:db:b7:
         fe:1d:dd:4b:c8:f4:a7:9b:bf:d3:ee:fb:e3:08:99:cb:e1:76:
         97:f8:f8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----