Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a2fc29e7-1297-4659-869e-468df939e79d.roa
File:                     a2fc29e7-1297-4659-869e-468df939e79d.roa (raw, json)
Hash identifier:          FqHsqvXXPcjvqv8wgA8yXEY72Cf69jxO3949/aHqutE=
Subject key identifier:   44:5D:E7:05:D0:CE:94:37:06:50:7A:43:6C:76:BD:DC:CE:56:EF:D8
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6645A1BCF875F0DD0619CEDCCDA22F7A95B4E1AE
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a2fc29e7-1297-4659-869e-468df939e79d.roa
Signing time:             Mon 13 Feb 2023 00:00:00 +0000
ROA not before:           Mon 13 Feb 2023 00:00:00 +0000
ROA not after:            Thu 16 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:45:a1:bc:f8:75:f0:dd:06:19:ce:dc:cd:a2:2f:7a:95:b4:e1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 13 00:00:00 2023 GMT
            Not After : Feb 16 23:59:59 2023 GMT
        Subject: serialNumber=187d1ff6a5f3b66810149d3146578ad955e906f0e2fa5945fb2eee4a81be6e7e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6d:8a:3a:f1:ac:1a:34:5c:eb:e7:e2:e7:7d:
                    27:29:2a:15:c3:f3:0c:b2:41:44:17:2a:f8:0f:bf:
                    14:3d:89:4d:87:f8:ac:f2:af:a8:36:b5:8a:72:26:
                    ce:db:b2:b7:76:23:38:e5:30:35:02:cb:9c:dd:5e:
                    70:cb:69:ad:0e:b3:f5:c3:28:1a:03:ee:d5:6e:17:
                    42:14:cd:c7:b5:20:b5:e1:2e:50:62:a1:3d:db:9a:
                    5b:2f:20:47:fb:65:e4:8f:96:f0:c0:d4:3f:1f:60:
                    d2:f2:9f:f3:1e:aa:09:58:3f:4a:04:e9:8f:3c:af:
                    e6:91:9c:57:a3:71:54:ad:0c:50:d3:be:e2:75:28:
                    e4:d4:26:0e:f0:18:de:c2:f9:0c:33:ad:ce:49:79:
                    0c:0a:f0:7c:64:18:d1:1a:d0:da:39:4f:ee:9e:01:
                    a2:f9:56:60:0b:a7:ad:b7:0e:5f:fb:7d:f3:b7:93:
                    77:20:cd:a7:10:b7:d8:a0:c6:cd:3b:39:74:3d:79:
                    be:e1:e9:e3:e4:83:da:56:fd:75:28:7c:79:17:94:
                    02:41:db:5d:96:fe:f7:bc:a4:fc:4f:1c:51:86:8b:
                    5d:5b:f9:0d:05:65:7d:a1:91:84:b7:7e:05:6d:79:
                    6d:b4:b1:45:f4:15:d8:de:57:48:10:0c:34:c9:2a:
                    c3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5D:E7:05:D0:CE:94:37:06:50:7A:43:6C:76:BD:DC:CE:56:EF:D8
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a2fc29e7-1297-4659-869e-468df939e79d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:bb:1e:d4:16:ef:a9:b0:ec:24:a5:e0:e9:be:77:be:11:12:
         0f:08:cc:b4:43:5d:8a:66:4c:38:ce:45:2a:c0:06:cc:2d:5e:
         67:cf:1b:f9:54:b4:58:5e:13:92:b5:35:c2:ac:28:72:ce:93:
         cc:42:38:70:08:e0:0b:4b:52:2e:23:d1:97:82:df:ea:ce:88:
         09:0c:a5:6d:3d:bd:80:bd:df:38:c9:d8:6b:16:64:e4:de:f7:
         7f:a4:c4:38:44:62:b2:a4:2d:57:a4:40:ca:d6:ab:80:ed:e3:
         14:f7:85:f3:a0:26:ab:c4:7a:54:62:03:24:e5:67:0d:2d:69:
         2c:48:1b:1f:87:cb:5a:5d:e0:3c:ee:62:ba:a6:7b:ad:97:44:
         c2:15:bb:15:76:7f:77:2b:35:52:41:fd:30:51:9d:ff:04:72:
         a6:e2:9d:36:1e:63:07:b0:d4:b1:69:82:09:fb:12:6b:b4:fe:
         de:05:ff:06:60:83:52:b7:61:f7:93:83:40:68:da:a9:49:9e:
         9b:00:23:cf:38:5f:a9:73:1d:f5:c1:83:10:02:a7:af:03:ba:
         a6:0f:f5:c3:27:ba:aa:23:08:54:81:2c:36:e6:56:0f:f9:9e:
         e7:83:6d:a8:8a:0c:c4:d1:30:dc:0f:94:d6:30:31:58:80:27:
         f1:4e:19:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----