Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f0db444e-d525-439f-af80-fd6197804bbc.roa
File:                     f0db444e-d525-439f-af80-fd6197804bbc.roa (raw, json)
Hash identifier:          IhpBhTHGFH6o6mp2ZDWEq2RBLyqzWXAKdYa1OTE6jg8=
Subject key identifier:   16:26:47:1C:6A:E8:BE:97:2B:A2:99:B4:7C:60:44:40:C0:52:A0:CC
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       230694F868F3DCAA062E3BD27F392726711270FB
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f0db444e-d525-439f-af80-fd6197804bbc.roa
Signing time:             Wed 22 Feb 2023 00:00:00 +0000
ROA not before:           Wed 22 Feb 2023 00:00:00 +0000
ROA not after:            Sat 25 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:06:94:f8:68:f3:dc:aa:06:2e:3b:d2:7f:39:27:26:71:12:70:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 22 00:00:00 2023 GMT
            Not After : Feb 25 23:59:59 2023 GMT
        Subject: serialNumber=44273fe98570e3a1055b7c8c8d0fa34572d9ac5d454b08859d54be264c4e8def, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cd:52:8c:37:d9:38:86:99:31:cc:e6:dd:8e:
                    26:76:03:77:cf:5b:a5:e6:df:b6:43:2b:f2:22:c9:
                    ea:6c:b0:f0:d1:1b:9e:e5:eb:7f:0a:6b:62:14:7f:
                    f6:52:5a:66:57:23:e9:b0:15:5a:16:e2:99:06:a4:
                    bb:a8:6a:f5:42:b0:9c:97:85:b8:4f:54:3f:ea:ed:
                    67:78:fb:4c:09:05:f0:07:4c:5d:ba:63:15:ba:68:
                    fd:f6:43:80:2e:54:f1:70:4f:31:dd:fe:36:87:31:
                    82:7a:ae:99:b5:6c:96:23:bf:ea:1e:ed:7a:2f:71:
                    8d:50:2d:08:66:a6:a8:b9:85:88:16:01:f2:2b:99:
                    2d:9e:01:cd:59:86:5a:f4:98:37:27:f3:9a:77:7d:
                    a6:23:c4:e1:5a:48:bb:a2:30:ea:97:48:35:d7:73:
                    ea:65:3a:42:66:66:47:10:e9:8a:88:9e:53:67:53:
                    ea:e7:77:0c:3f:bc:ec:14:8c:00:04:3b:6c:15:c8:
                    27:90:61:77:1c:c4:8b:6d:19:c2:bd:78:8a:c0:c1:
                    b6:8d:0c:15:52:39:f2:ff:15:78:70:86:81:87:cd:
                    5f:91:77:bb:75:68:37:fd:1a:99:ed:5c:e0:a4:6e:
                    0d:79:0b:a3:ce:53:e4:bc:4a:33:99:66:52:3b:fc:
                    ea:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:26:47:1C:6A:E8:BE:97:2B:A2:99:B4:7C:60:44:40:C0:52:A0:CC
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f0db444e-d525-439f-af80-fd6197804bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:a9:d5:34:b1:51:14:06:26:89:9f:05:e1:79:4f:6a:33:2b:
         d4:ea:89:f0:c6:b1:d6:5a:93:63:f3:ae:06:c3:b4:a7:12:32:
         35:80:2d:74:3d:0b:84:54:94:99:7e:8d:01:43:ca:10:12:fb:
         05:b1:d3:70:a4:c4:a4:9b:28:b7:47:c5:2e:a2:7e:6c:7e:95:
         7f:44:b6:60:32:df:cb:f5:fb:f1:fd:08:76:b2:0b:23:ce:54:
         43:de:26:ec:e8:dd:74:96:84:fa:4a:8a:b0:2e:eb:6a:86:f0:
         66:ec:3a:c3:c7:69:a1:48:6e:50:37:b2:da:a5:f4:79:d6:ba:
         4a:48:3d:2a:89:6b:83:72:dd:92:6e:df:c3:84:c7:b6:43:77:
         83:df:fa:03:31:b5:5c:b2:76:04:6c:ca:8b:d8:73:58:78:f4:
         20:e4:39:2f:53:e8:c6:0a:f4:d1:cb:7d:85:51:01:95:45:57:
         16:01:0a:24:66:c0:a3:6e:32:fe:fa:93:38:e9:51:bd:d2:56:
         16:72:eb:9c:c5:e8:05:d8:18:5c:9c:c7:f0:7c:54:7e:a1:67:
         e7:4f:05:01:75:77:63:46:f7:ea:98:9d:8a:4b:77:24:f7:14:
         02:13:63:58:4e:70:fe:7d:17:98:70:b2:00:13:df:d5:7d:5c:
         9a:38:cd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----