Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b0627579-5fd2-4d34-8b6c-f16ad109d18f.roa
File:                     b0627579-5fd2-4d34-8b6c-f16ad109d18f.roa (raw, json)
Hash identifier:          r/imhR3Jm/hnCoimZWMc9MyKSSrMkJ9G9NBqPweIKZ0=
Subject key identifier:   04:B2:47:03:3A:09:70:21:D6:10:2D:84:F9:86:E6:BE:93:AA:F2:75
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3E58F9B812268FDAFDEB8AA9844C9BCD1326627A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b0627579-5fd2-4d34-8b6c-f16ad109d18f.roa
Signing time:             Tue 14 Feb 2023 00:00:00 +0000
ROA not before:           Tue 14 Feb 2023 00:00:00 +0000
ROA not after:            Fri 17 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:58:f9:b8:12:26:8f:da:fd:eb:8a:a9:84:4c:9b:cd:13:26:62:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 14 00:00:00 2023 GMT
            Not After : Feb 17 23:59:59 2023 GMT
        Subject: serialNumber=409176129bce93e73cc88b38dfc9c5cf4aec24c73fa7a08e45661c88599b405c, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d4:22:2f:54:58:bd:c4:a8:98:64:1c:3f:80:
                    dd:c5:d4:87:76:f1:08:d0:63:e1:3c:e6:09:21:50:
                    dc:de:6e:a8:f6:90:4e:83:d7:5d:2c:1a:9d:43:0a:
                    78:e8:1c:01:99:f9:bc:9c:63:5c:1c:c8:c9:8f:80:
                    6c:8e:f1:79:e9:42:14:20:97:d3:89:77:a5:a9:b1:
                    35:ff:18:19:ff:c4:4f:70:cb:7c:be:78:b6:2f:fd:
                    3c:7d:46:8c:f9:2e:53:cc:d4:11:46:4e:00:44:64:
                    0a:db:4b:f6:2c:69:36:c8:47:37:f0:a3:16:90:56:
                    d5:59:75:e6:c3:c0:49:fa:54:3c:3f:e6:95:df:bb:
                    39:c5:f5:6d:d1:f6:de:0a:61:cc:14:ee:fa:ca:ff:
                    bf:1f:3e:6d:84:6a:41:b5:76:7a:83:2e:85:9c:fb:
                    52:28:c0:08:4a:ee:3c:0a:0f:8e:d6:62:fc:a6:2c:
                    d7:eb:d0:14:65:52:43:11:95:c2:1c:f0:7f:f3:51:
                    32:c8:6a:f1:3b:73:f9:2f:b2:24:9e:60:f7:a0:f2:
                    c8:24:a5:6a:7a:63:55:05:63:a5:77:59:4b:23:1a:
                    09:b9:87:00:24:1b:76:50:99:42:53:66:be:a9:54:
                    17:e2:8a:3b:cd:7f:1d:08:63:9b:f6:bb:dc:fb:06:
                    71:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B2:47:03:3A:09:70:21:D6:10:2D:84:F9:86:E6:BE:93:AA:F2:75
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b0627579-5fd2-4d34-8b6c-f16ad109d18f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:29:fe:b1:2a:77:ed:bd:f6:0e:15:dd:ee:2d:35:71:1c:bb:
         36:02:9e:d6:65:68:83:05:61:0d:9c:e8:71:54:d8:68:c4:fd:
         e2:25:9c:3b:57:17:8e:e1:3b:7f:1b:98:c3:5b:cb:05:79:0e:
         da:56:41:d7:b7:27:f1:ab:60:4f:1f:73:0e:df:f8:9a:c3:96:
         a8:92:64:ec:5e:a0:a0:f0:a3:3a:24:72:57:c0:7f:07:08:a1:
         d9:fa:99:17:a5:a1:c5:fe:41:7c:35:2b:a8:03:eb:f3:10:44:
         31:a9:bd:a6:d8:8f:2f:7b:78:fb:63:23:91:a6:f3:b0:01:39:
         1b:d4:24:52:5f:64:34:8a:f8:ee:b8:18:fd:f5:fb:1f:6e:0c:
         52:13:e2:6f:3a:7e:58:56:bc:96:03:ba:a6:de:e7:3a:05:ef:
         2f:08:31:8b:63:0b:0f:28:bb:c3:05:9d:ec:85:0b:66:98:75:
         23:56:9c:f4:23:48:01:38:0c:14:66:35:c9:55:88:53:5d:04:
         95:a9:7b:6f:75:e9:f1:5c:76:03:78:da:be:46:96:c2:2a:86:
         13:87:e9:72:b7:37:a9:b1:e1:04:28:88:51:55:2e:0c:8e:e3:
         6c:52:24:ee:fa:eb:5c:ca:63:61:17:65:73:e0:ca:98:b6:d7:
         ff:8b:02:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----