Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/119b7450-f610-4189-8cfa-d1e2abd278ce.roa
File:                     119b7450-f610-4189-8cfa-d1e2abd278ce.roa (raw, json)
Hash identifier:          NdIWu6Qv/Yti42MjH7sS9iqYTnHad8Wgq7vIvynVoig=
Subject key identifier:   87:1C:78:BC:66:D3:AF:CB:7C:07:66:4D:72:64:74:D1:63:A3:D8:E7
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5430B81698BBFEB10E6BEA902999D75682599299
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/119b7450-f610-4189-8cfa-d1e2abd278ce.roa
Signing time:             Tue 04 Apr 2023 00:00:00 +0000
ROA not before:           Tue 04 Apr 2023 00:00:00 +0000
ROA not after:            Fri 07 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:30:b8:16:98:bb:fe:b1:0e:6b:ea:90:29:99:d7:56:82:59:92:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  4 00:00:00 2023 GMT
            Not After : Apr  7 23:59:59 2023 GMT
        Subject: serialNumber=1076c73725c547d5e19620f778b7f5bc9989257d700f0d589b4f63a1af98c4cd, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d2:71:e2:70:08:b3:ea:45:8f:6b:bb:f9:2a:
                    1b:38:a2:19:8d:4c:66:cf:22:c5:99:d6:33:d0:9c:
                    32:f3:d9:15:16:1f:61:ce:0b:e3:4f:7d:1f:71:bb:
                    23:e1:15:0c:16:24:ab:1a:d1:a9:2a:a1:be:57:6d:
                    5b:bd:a7:c6:37:f6:65:c3:cb:9d:de:47:c0:21:64:
                    e8:c1:81:cd:3e:97:0a:95:3a:4c:a7:29:ad:26:ad:
                    e4:ef:ad:7d:a8:8f:ce:5f:a2:25:3e:c2:2e:ce:07:
                    80:7a:a0:78:3c:d5:a8:a8:07:27:02:ea:40:ea:98:
                    a9:05:e0:f1:57:ad:44:57:a6:1b:a9:d7:0c:72:dc:
                    da:9e:9e:7c:95:5d:2c:9c:ad:1c:3f:aa:82:41:4a:
                    cb:33:f8:63:89:7e:24:eb:93:ee:77:5c:dd:7d:82:
                    b6:4b:16:f0:f4:9d:57:5e:75:c8:e5:0b:75:06:13:
                    d4:7d:b5:9b:84:2b:69:1c:7b:37:be:5f:74:5c:4c:
                    12:4d:ac:d5:49:78:aa:f0:d7:96:4e:68:f1:aa:aa:
                    32:8c:ae:f9:cf:d0:0b:89:6b:6e:b2:2c:1b:31:f7:
                    a5:13:8a:07:7c:2a:ee:85:43:c6:50:46:c6:f1:c5:
                    b1:f3:84:47:1a:6e:77:9a:d6:21:0b:6b:b4:80:04:
                    10:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1C:78:BC:66:D3:AF:CB:7C:07:66:4D:72:64:74:D1:63:A3:D8:E7
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/119b7450-f610-4189-8cfa-d1e2abd278ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:a5:0c:b4:9e:3e:16:74:a4:7e:84:46:db:4f:c1:34:5f:a7:
         32:c1:2f:3d:d6:46:4f:29:b5:48:27:df:69:ab:ef:44:60:ee:
         c0:8c:5b:bc:2b:18:20:89:0c:d5:ea:16:1d:db:68:da:ac:1e:
         0c:df:e9:f7:0d:54:af:91:bc:34:92:28:d0:e4:33:b0:ef:49:
         aa:fe:cf:46:36:b6:f6:2e:a1:02:ff:89:d3:28:0f:f3:b8:12:
         c4:16:ab:ce:96:1f:7f:bc:47:96:09:c7:4d:a3:d1:56:1a:70:
         5a:3a:17:40:3a:f0:2b:ef:36:86:f1:6f:ad:ad:71:d3:c4:a7:
         55:f0:71:a4:4a:52:9d:b3:c6:50:2b:37:cc:1d:6b:0a:c0:85:
         06:c1:e5:85:47:72:ce:b8:f5:c8:52:a3:c1:5c:4e:e9:86:91:
         ca:6c:d9:63:c0:ba:12:51:44:ba:8f:91:77:02:cc:25:bb:b3:
         51:4d:35:1b:1e:17:fe:04:d1:21:ab:9f:11:ce:7c:9b:a9:5d:
         88:c1:f4:7a:bf:9a:ca:7c:8b:9f:13:50:16:f7:c1:dc:bc:51:
         31:a9:ca:dc:e8:29:50:4e:d8:84:9a:37:84:ae:4e:aa:c5:3b:
         d3:dc:18:d8:de:09:9a:d5:c0:69:43:84:99:7f:98:cf:d5:b9:
         47:42:b5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----