Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f8336c27-34d7-4fc6-bd55-12041f6a0914.roa
File:                     f8336c27-34d7-4fc6-bd55-12041f6a0914.roa (raw, json)
Hash identifier:          LeQAMgNIkp0PESjzJBN00QpNWjr2YwQXBjihbmlI8y8=
Subject key identifier:   E9:5E:74:40:26:1B:C6:7C:E8:1E:4F:36:5E:81:1F:F7:E7:52:F4:43
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       12F65E17257BFF2B9B3B147FB1C97F1919AD4E87
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f8336c27-34d7-4fc6-bd55-12041f6a0914.roa
Signing time:             Sat 18 Feb 2023 00:00:00 +0000
ROA not before:           Sat 18 Feb 2023 00:00:00 +0000
ROA not after:            Tue 21 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f6:5e:17:25:7b:ff:2b:9b:3b:14:7f:b1:c9:7f:19:19:ad:4e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 18 00:00:00 2023 GMT
            Not After : Feb 21 23:59:59 2023 GMT
        Subject: serialNumber=cc3b2b695eb7dd275aacd71fbf78c73342df6cc58e8e904154bd25c8344022cf, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:41:26:0e:d7:98:ef:58:6d:2a:a2:0e:22:94:
                    5d:20:cd:8a:05:77:d8:a0:da:1b:f3:a2:ad:f0:ed:
                    eb:56:07:8f:fc:8e:a8:8f:00:ca:90:29:26:de:38:
                    68:e6:1f:ac:e8:a8:ee:37:e2:f3:a3:c0:b3:bf:58:
                    a6:b8:eb:e3:67:58:9a:b7:3a:ee:a2:02:c8:8c:f9:
                    1f:44:3d:9e:1a:e5:1b:c6:7b:cc:0b:03:e3:4d:73:
                    17:73:0c:da:05:d6:f7:80:65:3a:b1:5d:3e:3c:9f:
                    78:f8:c3:e9:cb:02:b6:71:21:e6:c2:1b:a0:51:18:
                    92:54:fa:f1:e9:d3:e7:b0:be:07:64:72:34:b5:43:
                    5f:8e:a8:dc:e3:41:63:fb:e0:c7:a6:bb:b2:29:fe:
                    0c:d6:91:79:23:fb:47:9d:2b:41:04:1b:28:3d:06:
                    2b:26:94:9c:d5:ee:6d:71:4d:bc:b1:65:bd:4a:2a:
                    4e:e0:ae:ae:c7:12:4c:34:8f:c2:87:35:d1:7f:cd:
                    bf:39:76:03:dc:d9:a7:2b:ea:c1:be:1e:49:7b:73:
                    90:5b:c3:b1:1d:7b:b7:7b:58:fe:ca:28:15:00:b1:
                    e6:29:43:b1:06:d6:30:53:da:c6:6a:cc:36:d2:ff:
                    d6:7d:0f:51:67:2c:d9:f9:62:be:f6:ab:6f:8d:ab:
                    87:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5E:74:40:26:1B:C6:7C:E8:1E:4F:36:5E:81:1F:F7:E7:52:F4:43
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f8336c27-34d7-4fc6-bd55-12041f6a0914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:0c:cb:f7:e4:e4:05:53:27:d7:80:27:6e:6d:14:55:40:54:
         e8:78:ec:40:bb:73:32:47:e9:55:c8:67:a8:80:7b:a0:f9:bc:
         2d:e8:3b:db:ff:8f:bb:a3:f8:f7:73:bb:a6:eb:af:f1:18:a6:
         ed:cc:38:c5:3a:c8:fb:bc:e2:18:2a:2a:f0:76:de:c5:c7:20:
         27:4d:35:04:99:e2:2f:f0:0a:50:95:9e:ac:d8:cc:82:03:73:
         d6:c4:45:22:35:fe:50:18:c4:55:d4:b3:59:30:6b:07:c0:50:
         e3:7a:ac:c6:38:e5:ba:6c:75:2f:55:ce:ce:be:c6:48:b0:c5:
         71:0d:51:e7:eb:e5:e7:6c:e2:5f:00:f4:0f:8c:1e:e3:63:3b:
         94:79:98:a9:27:f8:2c:f0:68:4e:e5:65:5a:6e:0b:c1:8e:3e:
         30:e3:7f:5d:bf:c0:5c:39:d2:5f:a3:25:84:a4:5d:00:12:93:
         91:93:c8:67:4b:41:8b:e9:42:48:0f:51:72:02:e9:2a:55:b8:
         68:32:19:e8:eb:94:db:fb:b2:26:d2:e8:91:2e:a8:99:15:ec:
         9b:8b:06:e2:3f:74:60:47:81:74:98:d9:45:ee:57:92:93:f6:
         5d:77:b9:81:d8:3e:5a:7a:f1:14:eb:70:ec:e2:bb:c4:e1:9f:
         cb:87:50:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----