Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0a27785d-30ec-4396-b813-4cd9834054df.roa
File:                     0a27785d-30ec-4396-b813-4cd9834054df.roa (raw, json)
Hash identifier:          1tVBqixffymOBpb5fyuAcp/6b53khxdXw+pfjJK918U=
Subject key identifier:   B1:F4:F8:A2:3A:2C:40:57:55:E1:3D:E0:D6:22:0B:E4:F5:92:E8:27
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       692550000457FB1AF9B67A30D318C8CC56AFCCCD
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0a27785d-30ec-4396-b813-4cd9834054df.roa
Signing time:             Fri 24 Mar 2023 00:00:00 +0000
ROA not before:           Fri 24 Mar 2023 00:00:00 +0000
ROA not after:            Mon 27 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:25:50:00:04:57:fb:1a:f9:b6:7a:30:d3:18:c8:cc:56:af:cc:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 24 00:00:00 2023 GMT
            Not After : Mar 27 23:59:59 2023 GMT
        Subject: serialNumber=a0ac06a6526eb6aec26cc40f2adf11a1b2dd8b22f70f0a6609588ffe1c0a99e5, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:12:6a:bc:bc:9e:6e:b6:6a:47:ed:ac:1d:
                    2c:40:2d:71:51:3b:40:6b:10:eb:28:2b:c1:39:e6:
                    8b:82:94:60:c1:02:c2:5f:e2:70:22:d8:32:ea:99:
                    ea:52:95:f9:da:a9:7e:01:22:ad:f8:04:f6:f4:ca:
                    9f:95:6c:28:24:72:f4:a3:b4:a5:3e:15:27:a3:86:
                    04:71:94:b3:59:3a:c3:96:13:5a:a4:c6:6a:a9:fd:
                    0f:de:9a:d4:b2:a6:12:3c:86:7b:99:67:17:7d:e0:
                    1b:db:13:24:31:d2:46:3b:40:80:51:a9:c6:5a:25:
                    e7:34:60:91:7b:18:c8:c3:a3:61:bb:d8:a0:e5:0b:
                    e5:07:c0:99:f3:0e:14:34:fc:12:7a:c9:08:3f:02:
                    d5:38:42:6e:09:7c:48:03:ba:a4:6b:36:1d:c8:2a:
                    f6:8d:80:8f:de:3e:5c:00:46:87:59:53:ac:de:70:
                    8b:e0:82:97:ad:e4:95:27:33:63:f7:ea:86:af:d3:
                    d7:0a:c5:4c:f5:fb:88:e1:20:51:39:ba:14:42:80:
                    66:6c:03:d5:95:4f:af:ab:49:19:9f:50:35:84:d1:
                    dc:44:b2:06:67:a1:fc:03:39:1f:fc:bf:46:4e:f6:
                    fb:91:5e:fe:07:c2:0d:d8:d3:3c:98:3d:c7:56:49:
                    ee:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F4:F8:A2:3A:2C:40:57:55:E1:3D:E0:D6:22:0B:E4:F5:92:E8:27
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0a27785d-30ec-4396-b813-4cd9834054df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:f5:fc:7b:8c:df:57:d0:61:9b:45:c5:ee:93:0d:fc:ad:b0:
         00:f4:8f:a7:c1:fe:1b:16:51:5d:0c:1e:f5:a6:ef:29:56:fd:
         1f:d7:04:8f:70:1b:c5:6e:d2:41:35:de:92:70:20:9e:a2:be:
         d9:85:27:d9:98:56:de:55:d3:d6:18:79:57:19:45:68:f0:ff:
         d5:8e:3a:a0:a7:fb:b7:5c:3b:c6:64:29:7c:7f:80:e0:02:74:
         b4:bd:bd:7e:6c:ea:f0:1b:1e:6d:5b:3e:e7:0f:53:49:bd:93:
         1a:7c:50:ae:54:08:24:3d:51:91:f9:48:a3:92:0c:b8:d8:b6:
         46:24:99:ea:d2:05:ee:13:bc:a5:0e:e4:b5:47:6c:fa:41:61:
         25:6b:2a:9d:e1:21:ad:2e:bc:9b:da:c3:bf:39:c6:c0:99:c9:
         4c:c9:ca:c5:2c:00:70:a0:e3:81:b5:9a:40:63:e2:5f:45:e9:
         1b:b4:a5:41:54:78:c7:25:b4:1a:55:c8:ce:57:51:30:aa:9d:
         ef:79:05:f8:f0:fa:12:e1:2a:3c:8a:8e:3f:34:1b:0d:17:62:
         da:a2:1e:a0:cf:3d:ef:6a:49:c3:8a:b3:2d:b0:0c:23:0d:c8:
         70:1d:06:c9:7a:71:50:b0:a2:61:cf:3e:75:5a:b7:88:f6:4b:
         13:66:fa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----