Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/00c715c6-175a-4821-b98f-874531bf49a5.roa
File:                     00c715c6-175a-4821-b98f-874531bf49a5.roa (raw, json)
Hash identifier:          FTE140/V5YyYqE+ty9XdklWWREV1mwXsx/vb1Xo71dI=
Subject key identifier:   63:6E:98:2F:F1:34:B0:15:62:14:8D:AA:28:6F:84:50:BF:E0:2F:5C
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7C37AEECF846F1D237082D9B8365235A561D919F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/00c715c6-175a-4821-b98f-874531bf49a5.roa
Signing time:             Fri 07 Apr 2023 00:00:00 +0000
ROA not before:           Fri 07 Apr 2023 00:00:00 +0000
ROA not after:            Mon 10 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:37:ae:ec:f8:46:f1:d2:37:08:2d:9b:83:65:23:5a:56:1d:91:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  7 00:00:00 2023 GMT
            Not After : Apr 10 23:59:59 2023 GMT
        Subject: serialNumber=b5dacc2cb7f0062edec2d7f1c6c94807725ad88fc204e80051bfb94de1b2eaf9, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0c:53:71:9d:6a:11:27:ac:c0:ad:e7:16:06:
                    c6:15:a2:3f:bb:99:f6:f8:de:78:3a:26:e8:33:93:
                    bf:02:45:12:10:e7:45:d8:30:25:2a:35:51:92:dd:
                    d8:e4:85:bd:2a:24:01:68:02:19:6d:73:a4:29:fb:
                    cb:5f:d1:12:d1:ed:00:a3:4e:2f:1a:ae:11:e3:90:
                    66:83:ce:e7:f7:1e:e9:eb:65:e6:12:e6:fd:b4:dc:
                    91:8a:47:80:eb:90:0f:3e:a1:b9:f5:1d:7f:39:fb:
                    e9:f3:71:4e:ab:cb:d3:7b:d5:35:13:5c:a8:ec:63:
                    4b:45:ee:c6:93:0d:ab:0e:f3:d8:b4:cc:7a:bd:45:
                    1b:89:1a:94:de:d3:03:eb:a6:5b:83:4a:a6:ab:02:
                    54:62:96:a5:c1:d5:09:0b:48:69:6d:b9:db:69:cb:
                    b1:a7:68:f0:11:dd:7f:82:51:a3:10:25:6e:1c:d8:
                    2b:2f:ec:5b:5a:de:d8:f1:36:1b:79:9e:de:5a:01:
                    3a:61:06:1f:9b:3c:81:50:f7:2b:0f:6c:5b:c2:65:
                    30:96:da:5c:0f:89:f4:0b:e5:5f:e3:01:45:df:b5:
                    c2:94:0e:55:58:fb:75:49:c0:42:18:6e:75:43:e5:
                    1c:b3:5f:ff:ea:41:85:25:8a:ef:e2:1c:cd:65:b0:
                    87:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6E:98:2F:F1:34:B0:15:62:14:8D:AA:28:6F:84:50:BF:E0:2F:5C
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/00c715c6-175a-4821-b98f-874531bf49a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:00:23:76:2b:0e:f1:c7:29:76:98:ad:41:85:1f:a6:51:4c:
         91:1d:59:f5:51:d1:1e:15:b5:64:de:db:24:82:23:9d:1d:ad:
         1f:c6:8d:39:1f:da:f3:08:d5:d8:db:78:81:85:fa:5b:d4:c8:
         0f:93:ad:d0:21:93:91:a2:01:e3:14:d9:48:5b:c0:76:b1:8a:
         fe:57:62:71:2d:5a:fc:0a:58:ad:0f:39:ef:b2:bd:26:01:4f:
         1b:0d:76:29:bc:cf:d7:19:d3:d3:52:68:87:01:f0:16:5a:70:
         c1:70:f4:f9:cc:7d:99:ea:24:a6:d7:86:e3:69:3b:f2:b8:43:
         1f:f2:3b:ea:af:1b:86:09:32:a8:1b:57:2c:f9:85:92:b8:22:
         ac:e9:3d:2b:6f:fc:dc:66:83:02:c1:18:a8:0c:08:ae:54:5f:
         2b:dc:fc:c1:93:92:41:7e:39:cc:99:f4:3d:e5:b6:67:b3:91:
         f4:ab:98:99:14:cb:be:58:b9:2e:eb:bf:fc:1f:95:ca:8f:00:
         db:6c:3b:96:19:8e:3b:36:49:0f:e0:92:23:e9:56:49:42:97:
         cd:1d:21:aa:1c:65:5b:48:19:14:74:03:cc:a1:51:72:7c:2b:
         05:96:cf:1d:5d:f5:86:8c:02:37:a9:f9:ab:fd:18:08:51:2c:
         f8:dd:a1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----