Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/feba6d22-d364-4ec7-acee-118dfef1c949.roa
File:                     feba6d22-d364-4ec7-acee-118dfef1c949.roa (raw, json)
Hash identifier:          czCVJrUso+j/aEuCjx+ozelYrksUN+vRHQiCRRz7sjo=
Subject key identifier:   4A:8E:C7:03:8C:CA:2E:1B:A2:FE:90:09:C5:81:66:D9:01:16:AA:AB
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       27F442BBBA448B899C4DE2C7BF86CB26EDB58427
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/feba6d22-d364-4ec7-acee-118dfef1c949.roa
Signing time:             Sat 11 Feb 2023 00:00:00 +0000
ROA not before:           Sat 11 Feb 2023 00:00:00 +0000
ROA not after:            Tue 14 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f4:42:bb:ba:44:8b:89:9c:4d:e2:c7:bf:86:cb:26:ed:b5:84:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 11 00:00:00 2023 GMT
            Not After : Feb 14 23:59:59 2023 GMT
        Subject: serialNumber=519239b7784d3f606731d0fc0a706ad144208420923bc883ed3120d49beffb10, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:c5:dd:35:d5:d1:11:23:72:93:33:d8:13:
                    cb:b8:9a:41:13:d1:95:22:62:c7:dd:1a:c5:f8:1d:
                    cd:09:87:02:64:4c:53:44:4c:33:2b:3d:f1:da:ff:
                    98:90:39:14:70:41:e0:08:45:74:fe:10:c9:ac:65:
                    56:90:d2:77:8c:d8:38:fd:47:d6:d4:87:88:9b:c3:
                    df:9a:29:2f:c3:a9:b9:9e:59:6b:37:48:27:76:94:
                    26:9e:d7:58:cd:62:4c:7d:21:9d:d2:8e:9e:ce:b6:
                    8b:c1:0e:ed:52:70:2b:d6:e8:a3:dd:cb:6c:65:de:
                    23:41:23:83:5d:1c:ab:44:85:e4:d0:49:75:f1:39:
                    45:a5:1b:db:14:65:72:b2:4b:25:d3:5b:10:4f:14:
                    85:13:ea:54:a8:38:c2:f6:59:62:52:78:f1:ca:c6:
                    f3:dd:ba:c8:b5:79:b7:9c:f0:8f:40:43:30:90:67:
                    cf:2f:bc:87:aa:4c:9d:09:c0:c0:0d:b6:00:e5:e8:
                    ee:33:7f:b3:e8:99:eb:d2:d1:b4:29:f9:42:8a:61:
                    47:e6:09:d2:46:24:f7:0a:d0:2c:ff:b3:6c:65:8e:
                    d1:8a:5b:1f:9a:9d:d3:b5:60:d1:c1:35:b8:ea:d9:
                    3b:fe:6a:a7:1e:d8:9d:dc:43:ce:c2:16:bb:38:7e:
                    85:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8E:C7:03:8C:CA:2E:1B:A2:FE:90:09:C5:81:66:D9:01:16:AA:AB
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/feba6d22-d364-4ec7-acee-118dfef1c949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:50:be:71:e9:02:f9:44:de:07:16:80:a5:63:d5:48:c7:23:
         84:ca:e5:0e:fc:db:cd:21:91:89:b9:47:d2:7c:ff:61:74:35:
         22:ea:ae:a0:b5:92:b9:49:f1:e5:56:21:1e:f5:d0:8f:40:28:
         f4:fa:a2:7d:67:87:0e:66:a1:28:1a:31:29:7d:57:c6:2a:8f:
         fd:62:cf:ef:33:02:98:46:fd:8a:4c:94:59:00:6e:76:e7:b2:
         d9:1e:85:a4:43:71:fe:8f:94:5b:a6:d9:47:e9:6a:a6:b0:ee:
         42:5e:01:cc:51:0f:5f:e7:33:85:9b:08:72:07:8f:46:d6:5b:
         3d:d4:71:c2:d1:c3:9d:c9:b4:fa:89:2b:90:2e:64:11:c5:13:
         65:e8:16:ac:4c:c3:f9:56:22:36:09:ca:58:8b:14:5f:68:ac:
         03:d1:42:c3:80:7a:92:ed:8f:07:62:97:4a:3e:4a:5d:9f:f3:
         b6:98:8a:f8:e5:3c:bd:ca:01:1b:ce:8f:17:28:48:ab:35:2d:
         17:1b:bf:97:8e:ba:b2:74:39:f6:d7:59:4a:3a:e3:ba:dc:60:
         6f:7d:56:26:de:de:3a:8e:c4:c2:6f:a3:24:38:c5:92:0d:33:
         ad:f5:e8:40:28:ea:fc:c2:3f:6c:1c:0b:04:c0:9d:56:24:23:
         45:cd:05:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----