Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8702b174-9dac-490c-8647-35958da8e4f0.roa
File:                     8702b174-9dac-490c-8647-35958da8e4f0.roa (raw, json)
Hash identifier:          /Apt73kEE4nS1ugR/VNDwEBbsd7dL6HMSZ4OnmIdKuU=
Subject key identifier:   76:B4:A5:EA:53:A1:E0:D7:A7:8C:A9:4D:9A:89:7F:B1:C5:66:B4:3D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       566405AD50FB986FD46D4327D4AD7BE064674252
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8702b174-9dac-490c-8647-35958da8e4f0.roa
Signing time:             Fri 17 Feb 2023 00:00:00 +0000
ROA not before:           Fri 17 Feb 2023 00:00:00 +0000
ROA not after:            Mon 20 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:64:05:ad:50:fb:98:6f:d4:6d:43:27:d4:ad:7b:e0:64:67:42:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 17 00:00:00 2023 GMT
            Not After : Feb 20 23:59:59 2023 GMT
        Subject: serialNumber=f7e0be0d3762dcfaaaaf8367d04e57c27287cbbd2aa3511c4eb3bb307632d7b8, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:39:4c:7e:9b:a8:35:3b:2e:f6:e7:3e:66:
                    64:97:fc:ba:86:07:e5:41:11:b9:2d:f1:d7:70:b0:
                    82:c9:6f:3a:77:7e:f4:6e:1b:25:23:a5:3c:f0:e2:
                    63:18:15:6c:e8:63:96:f0:8a:75:5e:df:e0:18:24:
                    fb:88:11:77:d0:44:37:46:71:16:3b:7b:01:9e:dd:
                    04:d5:52:02:b4:3e:14:8a:22:07:05:e0:2d:8d:e3:
                    b6:ef:3a:e4:6b:c6:54:85:5f:f5:c5:06:d4:81:40:
                    af:45:04:6d:b5:a6:4e:ee:fc:82:f9:6b:c7:74:1d:
                    ca:1f:50:64:cb:51:dc:a1:37:fc:6b:90:ca:0e:8f:
                    2a:3c:ec:29:ed:f0:a6:35:6f:f1:4d:42:ce:df:58:
                    1e:08:de:9e:14:01:40:29:42:e6:df:3e:74:2a:77:
                    9c:d4:4d:36:20:31:04:a1:96:33:3a:85:09:8f:1d:
                    1a:59:24:4a:61:42:2c:75:c4:88:74:5f:16:86:b7:
                    b7:3f:4c:44:92:7e:48:5b:c9:da:a9:1e:6f:9d:91:
                    7b:9b:67:65:d4:42:31:3a:6a:98:27:b3:6a:b7:d7:
                    15:a4:81:6e:ca:60:b8:2e:12:b5:13:11:5d:82:85:
                    08:00:61:b9:c2:14:d8:50:73:2b:0e:d5:09:ff:a8:
                    28:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B4:A5:EA:53:A1:E0:D7:A7:8C:A9:4D:9A:89:7F:B1:C5:66:B4:3D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8702b174-9dac-490c-8647-35958da8e4f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:9e:42:34:40:9c:21:ab:d7:89:25:a3:75:0d:33:67:6a:75:
         4a:03:0c:5f:a0:7f:63:46:26:cf:42:cd:49:c0:2a:3e:6a:a9:
         58:4f:0d:03:18:b4:7e:54:f6:19:4d:0c:6e:5d:cc:cf:13:af:
         a2:6d:a4:23:be:28:70:fe:08:4a:34:4a:6f:8c:41:84:3d:4f:
         5d:06:3c:02:82:c3:fe:a8:1a:cf:da:e2:4c:d3:15:90:45:31:
         e4:ba:bd:07:68:b6:ed:40:d5:d9:25:b3:37:bf:2d:f8:6d:30:
         86:d9:32:fd:8b:45:06:d3:19:ff:ac:2e:cd:ea:61:75:ab:0b:
         cb:42:75:f8:02:20:1a:8b:f8:09:2c:43:73:f3:7d:31:80:7a:
         46:98:c8:e7:a5:22:bd:21:fb:71:8e:c2:05:7c:ba:1d:6c:86:
         0a:d2:6a:b8:1c:79:ac:ff:1c:c1:bf:50:b5:1d:f3:a9:36:75:
         23:22:02:dc:16:cf:44:cb:a6:aa:2f:f9:22:b3:03:53:bb:16:
         5c:a9:13:ad:a5:e7:74:22:59:27:eb:57:49:de:5e:a1:8c:f7:
         08:60:8c:be:93:04:00:99:44:c4:e2:57:ab:a7:c5:15:a1:50:
         8d:53:2e:0f:48:ca:f6:1a:28:e9:de:81:7d:13:f1:39:b4:2b:
         68:16:b7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----