Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8bdec8c3-6b7c-4309-bf47-75e53e1198e2.roa
File:                     8bdec8c3-6b7c-4309-bf47-75e53e1198e2.roa (raw, json)
Hash identifier:          NFDHG4UFf5pP6GFfxUGlPtzHCXu6hSdxRBzqO8+xrhk=
Subject key identifier:   3A:5D:39:BC:63:4D:77:F5:70:D9:84:62:B4:9F:61:EB:07:FE:D1:17
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       49F4097F61AC1681AE9008347AC4F237F79E853C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8bdec8c3-6b7c-4309-bf47-75e53e1198e2.roa
Signing time:             Wed 01 Mar 2023 00:00:00 +0000
ROA not before:           Wed 01 Mar 2023 00:00:00 +0000
ROA not after:            Sat 04 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f4:09:7f:61:ac:16:81:ae:90:08:34:7a:c4:f2:37:f7:9e:85:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  1 00:00:00 2023 GMT
            Not After : Mar  4 23:59:59 2023 GMT
        Subject: serialNumber=2268e36625e9588a50a44d42fd1bd497561a50c2028fa771ffd89dd78949a9fe, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a8:98:f3:38:05:2e:5d:12:13:27:c5:c1:ae:
                    ee:82:b9:61:1e:c1:a3:07:f1:4f:52:25:f5:31:ae:
                    87:13:f1:cf:48:ef:1e:4d:c8:1b:9e:2e:8c:55:7f:
                    40:ea:c2:5e:7f:80:e2:df:b3:7b:dc:fa:63:13:94:
                    a8:97:f5:4b:8b:35:fc:8d:ba:34:5e:84:18:53:0c:
                    2b:22:35:ea:c0:34:e0:ed:ed:5f:7f:8c:34:05:df:
                    60:fd:d9:14:ac:6c:f7:ef:02:1d:7e:95:d4:99:32:
                    e8:2d:83:41:7b:25:68:d9:a5:1e:28:87:33:39:65:
                    14:e4:3e:fd:06:95:fc:05:2d:41:c7:0e:b6:f5:25:
                    7d:c1:ed:32:cd:61:2b:95:f4:de:61:c6:aa:73:80:
                    a2:0c:8e:5e:ff:b6:1a:c5:bf:19:37:ea:ea:b2:63:
                    86:ee:5f:ab:ca:82:5a:62:5f:4b:4e:89:5e:f4:41:
                    cd:e7:a3:25:95:0a:28:66:02:ed:c2:28:e1:33:67:
                    bc:41:e3:11:68:3d:b1:30:19:51:6a:e9:eb:af:7c:
                    46:30:67:4a:49:b8:5e:83:0e:e2:c5:55:59:50:61:
                    ab:98:ea:91:7f:bd:0a:1d:30:a5:83:d4:64:e9:e0:
                    f6:8d:7a:92:10:f2:3b:6b:e4:5b:8c:37:ce:b5:20:
                    6e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5D:39:BC:63:4D:77:F5:70:D9:84:62:B4:9F:61:EB:07:FE:D1:17
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8bdec8c3-6b7c-4309-bf47-75e53e1198e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:4e:ae:9c:74:cf:2e:0a:0a:71:ab:00:34:6f:55:0c:ac:dc:
         69:d1:bf:60:ad:d6:57:86:05:6b:22:da:06:e4:4d:9a:a8:58:
         5a:60:7b:c2:42:ae:8e:ff:65:98:72:cc:7b:1f:a5:da:4f:32:
         53:77:ef:91:4a:e1:af:6e:31:c7:cd:90:7a:66:33:a5:41:95:
         1d:22:06:46:bf:54:0d:f7:9b:1c:e6:e1:5f:0d:08:66:8f:a4:
         03:c3:3b:d0:3d:4c:b6:46:55:93:ab:6c:47:30:d4:d6:62:ad:
         7c:ed:ab:c6:4e:66:27:25:45:68:3d:33:53:c5:fd:65:bc:99:
         2e:b8:42:85:cf:ad:86:19:ef:53:c6:88:cc:bc:e2:e6:78:08:
         ed:fa:ce:94:f3:d3:8c:ae:cb:c5:05:54:2e:c6:4d:b3:b2:2d:
         1d:ec:60:b0:87:72:2c:f5:2d:af:c0:20:20:b6:9a:ff:7c:8e:
         67:07:95:11:75:f9:7a:01:20:aa:55:e5:0f:3a:06:ec:35:42:
         54:cd:ba:ed:85:db:05:89:c3:dd:92:aa:94:6b:19:d9:b1:cd:
         f8:c0:80:81:75:d4:9e:a6:49:8f:40:a8:08:f1:f9:f3:73:6e:
         40:ff:89:e8:56:c4:fd:de:26:14:87:5d:19:f8:46:85:78:d8:
         57:69:45:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----