Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ff322149-4fab-48e7-9707-ac7cd19abae5.roa
File:                     ff322149-4fab-48e7-9707-ac7cd19abae5.roa (raw, json)
Hash identifier:          vWiVGR3nERi+oP5HixrusyyxDCzPudGd4h25hwphPzU=
Subject key identifier:   1C:05:7C:17:23:46:6C:E2:49:50:6F:46:C8:E9:68:62:C5:CF:2E:34
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4429D51B048D5CF5F353EC5878A4F46F20939A00
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ff322149-4fab-48e7-9707-ac7cd19abae5.roa
Signing time:             Wed 01 Mar 2023 00:00:00 +0000
ROA not before:           Wed 01 Mar 2023 00:00:00 +0000
ROA not after:            Sat 04 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:29:d5:1b:04:8d:5c:f5:f3:53:ec:58:78:a4:f4:6f:20:93:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  1 00:00:00 2023 GMT
            Not After : Mar  4 23:59:59 2023 GMT
        Subject: serialNumber=6c3e91eba7e77717deaaa6df6a18f9d417a9b8dc76e2bbe1c4fa438920938101, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:71:ba:16:cd:50:17:ec:e7:bf:54:88:8a:e3:
                    07:97:a6:14:91:fd:b9:00:80:53:08:7d:c1:b4:00:
                    e6:71:31:6d:59:6f:2a:56:03:e8:d0:6d:90:32:ad:
                    d3:a1:44:c4:83:0f:38:94:7a:92:d8:d2:5c:b0:6e:
                    cd:8e:80:36:5e:dc:4c:de:bc:a5:7c:78:89:ef:e0:
                    3e:3c:47:cb:1b:f5:21:43:c6:30:7f:3f:e5:e1:de:
                    0a:36:2a:5c:35:d3:10:1f:e7:e5:ba:3a:59:f1:8c:
                    b1:97:c3:eb:5a:a7:13:7c:7e:26:bf:26:23:dc:98:
                    1c:cf:59:ac:41:35:7b:67:61:68:d1:18:bd:30:9b:
                    47:18:01:f8:36:28:f8:42:15:57:4d:21:d1:7d:bc:
                    2b:da:95:7a:c2:72:ec:cb:6a:b9:e1:76:0f:a7:a4:
                    b8:87:aa:c8:1a:88:2f:65:34:15:db:00:6e:ef:a2:
                    c1:82:af:25:d8:ae:ac:ec:1d:91:ec:8f:25:eb:c6:
                    1d:e4:1f:92:ed:e5:75:9a:b1:6e:a9:95:d9:ca:2c:
                    36:89:5b:20:0e:de:ca:cb:84:45:78:ed:cb:0d:21:
                    8d:e8:2f:2c:be:33:36:2b:9d:5c:78:4d:d9:9f:07:
                    3f:2a:32:0b:b9:b6:78:ad:98:24:3e:59:84:aa:08:
                    09:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:05:7C:17:23:46:6C:E2:49:50:6F:46:C8:E9:68:62:C5:CF:2E:34
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ff322149-4fab-48e7-9707-ac7cd19abae5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:26:ec:de:6b:96:a4:e3:50:24:39:43:b6:69:a9:b4:00:8e:
         f3:3d:68:f7:91:f0:f6:d4:8c:65:c2:94:14:78:bd:8a:99:a6:
         e2:3c:ed:3b:c7:2c:21:fb:a0:d3:df:f2:a6:41:27:9b:63:b9:
         20:b3:d1:45:10:34:3a:f5:7a:11:a2:6e:e2:44:22:71:aa:28:
         f7:ba:35:c8:52:5a:bc:12:b3:83:b6:e9:c2:d4:5d:88:c7:5a:
         63:d7:4d:d5:43:d9:08:09:5c:bf:2f:53:66:a3:02:ee:ff:08:
         7d:9f:02:1a:fd:55:d7:1e:1b:71:8d:11:a2:49:24:00:ab:d5:
         3a:43:ac:75:d1:12:8d:c7:e2:30:f5:d0:26:21:2c:c4:75:c9:
         00:33:c6:6c:b4:3e:f5:77:98:c1:07:9e:fc:5a:c5:26:02:0a:
         2f:67:10:36:bf:e6:05:c4:f5:bd:5e:9c:43:59:22:e6:90:69:
         f2:47:eb:1f:06:9c:d1:91:14:6f:00:3d:67:d1:c5:e2:0b:50:
         36:08:24:f9:dd:32:a9:77:b9:e0:74:3a:20:98:53:07:3f:6a:
         c6:08:42:61:e7:eb:44:93:35:ac:72:ca:a6:d2:dc:97:49:73:
         30:1e:75:94:54:ed:b8:6e:30:c0:c9:57:b8:50:ae:3c:61:b5:
         c7:de:c2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----