Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e1d4bff9-6578-4c21-9599-5081db2bf1cc.roa
File:                     e1d4bff9-6578-4c21-9599-5081db2bf1cc.roa (raw, json)
Hash identifier:          Dghn7odm/BC+KWVOYvo6Htl4gEp9jYyR0hgN1z2AG98=
Subject key identifier:   C1:7F:1A:0E:84:88:64:AB:99:84:4F:3E:FA:3C:4B:4C:1C:C8:8F:B6
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       442E550C7E0B02B6F800AA68895F2051F8965E93
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e1d4bff9-6578-4c21-9599-5081db2bf1cc.roa
Signing time:             Sat 18 Mar 2023 00:00:00 +0000
ROA not before:           Sat 18 Mar 2023 00:00:00 +0000
ROA not after:            Tue 21 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:2e:55:0c:7e:0b:02:b6:f8:00:aa:68:89:5f:20:51:f8:96:5e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 18 00:00:00 2023 GMT
            Not After : Mar 21 23:59:59 2023 GMT
        Subject: serialNumber=90ad21145bcd67e4c6d7ef221dcb1dfd334f2072d0eab3e632c6b7017c4525f8, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:09:1c:4f:33:86:12:a8:f7:a4:5e:42:97:
                    50:e3:83:d0:74:c5:4c:0b:0e:c8:82:7c:d4:c8:92:
                    35:b9:ed:79:1d:da:c7:ec:67:69:ab:2d:3d:e6:69:
                    c3:0a:b9:04:6a:29:52:48:86:48:ac:43:ff:8c:71:
                    1b:71:76:b1:60:44:fc:31:ce:b6:e8:e2:fe:eb:dd:
                    cc:e4:16:a1:99:39:8b:67:b2:2c:57:8f:55:13:83:
                    68:ba:40:76:3e:86:85:7d:f1:21:e6:0a:2d:90:d3:
                    e8:cb:de:0f:09:06:cc:2a:1a:87:bd:8b:12:33:3c:
                    1c:d5:8c:31:49:16:90:f0:57:a8:3f:aa:be:42:18:
                    3c:34:3b:fc:76:36:53:01:ef:f1:55:2b:5b:07:45:
                    4f:a8:c5:f3:a2:47:a9:06:0a:8f:ca:08:09:25:a2:
                    9f:05:df:e9:3f:64:f2:12:64:80:74:47:db:f5:e5:
                    ad:2d:c2:25:f8:9b:6a:dd:23:ea:d6:cd:70:12:32:
                    ac:51:fa:88:90:a0:38:74:b8:a9:dc:ba:10:6e:37:
                    be:2c:8e:09:c8:29:86:5e:41:db:52:94:03:f3:98:
                    d9:58:e4:08:a7:fe:62:78:88:4c:9d:1c:bb:f8:0c:
                    7f:ce:85:bb:76:81:a9:6c:fc:21:95:19:87:00:c5:
                    fc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7F:1A:0E:84:88:64:AB:99:84:4F:3E:FA:3C:4B:4C:1C:C8:8F:B6
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e1d4bff9-6578-4c21-9599-5081db2bf1cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:68:c2:22:6e:11:07:06:4b:f6:8e:f4:cb:6c:45:4d:5b:ee:
         c6:87:b4:b9:a2:73:30:6e:1a:64:3e:5d:f0:f0:0f:51:e0:77:
         1d:68:60:ec:92:f9:dc:55:72:31:f7:9e:40:4b:5e:58:a6:02:
         ca:e6:a2:ee:81:f0:91:d8:80:5a:5c:e1:30:63:c7:b8:b4:de:
         4d:8d:c7:e4:02:83:09:18:b7:55:de:2c:4e:59:58:2f:05:a5:
         83:19:8f:87:88:f7:83:93:b7:fa:e2:41:30:71:f2:6a:c5:af:
         65:cb:67:d4:0e:28:cf:05:42:3f:e4:77:63:26:4a:34:4a:9d:
         ca:64:3b:58:b5:42:a3:7f:61:90:ee:d9:0f:bf:c1:63:80:14:
         e2:0e:9a:05:3d:76:06:9d:8b:91:d0:53:19:b5:57:2c:fd:98:
         b7:18:60:d6:30:bf:5a:01:ac:76:cd:f3:2d:db:e0:8f:ed:cc:
         29:9b:41:6a:fe:ef:05:75:bc:d9:3b:58:b0:93:cd:7a:f7:59:
         09:e5:07:53:b1:91:f2:e3:0d:c9:47:62:52:c9:09:50:e2:fa:
         8b:3b:27:b6:c2:8a:eb:5f:33:4c:33:e4:95:2d:49:80:8d:61:
         d2:5b:d1:ff:4c:b0:f1:3d:91:c3:3d:aa:8c:de:0d:aa:c8:d4:
         52:8f:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----