Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/170a5127-e983-4476-86d3-acbc234b7efe.roa
File:                     170a5127-e983-4476-86d3-acbc234b7efe.roa (raw, json)
Hash identifier:          Rhzl7c7K/qLVjDO85wOhmE3VkmQ2hwo0lXnH6CN1j8k=
Subject key identifier:   6C:18:66:E8:72:1A:75:37:C1:AF:E6:7D:DD:86:98:C2:52:92:66:2C
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       39BB9DC68D3200412399E8F60B224ED5A32A4C5A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/170a5127-e983-4476-86d3-acbc234b7efe.roa
Signing time:             Sat 13 May 2023 00:00:00 +0000
ROA not before:           Sat 13 May 2023 00:00:00 +0000
ROA not after:            Tue 16 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:bb:9d:c6:8d:32:00:41:23:99:e8:f6:0b:22:4e:d5:a3:2a:4c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 13 00:00:00 2023 GMT
            Not After : May 16 23:59:59 2023 GMT
        Subject: serialNumber=dd74c0a83b50520a419d61a197f456f6f863c425b7c4dfb4408b26f8983e07da, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:f2:73:cd:c3:9e:7b:f4:9a:ee:74:54:23:
                    4b:9c:68:ca:35:d7:6b:60:0e:3a:43:bf:d3:5d:02:
                    c3:c8:ae:43:b4:d5:5d:a2:a6:83:e3:24:96:16:d3:
                    63:88:b9:00:2c:6d:96:29:28:09:17:a3:bc:83:7b:
                    85:86:2d:77:bf:30:6a:3c:3d:99:55:ad:2d:30:c3:
                    9a:83:9e:ab:dc:96:ab:73:91:c3:14:ed:12:51:af:
                    16:d9:29:e1:9d:ad:4c:a5:58:9d:a7:e8:6c:cf:97:
                    49:16:98:0a:6c:22:a7:c3:1e:a4:0c:ae:97:8e:f7:
                    04:d5:ca:78:2e:cf:ef:51:cd:79:14:5c:b3:16:7b:
                    5f:8b:96:a9:78:b4:74:7e:3d:47:71:95:f6:5f:15:
                    f0:d5:0c:cc:12:24:ba:29:b1:a7:71:2e:79:00:a7:
                    4e:b2:82:36:78:2e:fe:d7:a3:0a:b7:8d:cd:98:a3:
                    df:da:e0:f9:61:12:3c:a0:d9:8e:79:19:f2:c3:47:
                    ef:49:d1:35:8b:37:87:c9:fa:84:12:d8:d6:01:e6:
                    da:de:22:43:6e:3f:54:cb:86:ac:ef:44:c0:f7:33:
                    15:3d:6a:9d:d6:7d:7b:c2:52:ae:d0:e0:7a:b7:a7:
                    19:83:cb:09:92:16:29:e6:ab:a9:05:cf:8b:d4:5b:
                    0f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:18:66:E8:72:1A:75:37:C1:AF:E6:7D:DD:86:98:C2:52:92:66:2C
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/170a5127-e983-4476-86d3-acbc234b7efe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:62:80:5b:6b:98:95:a8:1e:8f:56:93:5f:c4:4d:ec:a6:5b:
         b6:2e:d2:9b:2a:fa:dd:ea:87:7e:75:03:18:34:d3:99:86:70:
         63:e1:61:33:a3:e8:02:a7:23:51:34:14:46:cf:28:f3:0f:af:
         ac:68:ce:8c:cf:33:e1:2a:93:77:15:59:ba:48:69:8e:1a:b8:
         bf:2f:b8:05:fe:26:8d:fb:8f:e7:8b:f3:c4:cc:07:a4:7f:5d:
         8a:a6:21:4e:e5:6f:56:40:1d:93:b7:df:4d:59:be:70:7a:2c:
         11:3b:a0:c8:39:24:ce:79:df:f2:0f:f2:99:d2:a9:0c:d5:dd:
         46:e3:c1:f4:a3:dc:8e:ae:ce:e0:22:82:6b:88:6b:35:d7:25:
         a7:ad:2c:ef:f1:39:20:c5:fa:bf:c4:7e:d2:b4:d3:f4:d5:fb:
         e4:4c:9d:7e:f8:d0:22:50:fb:ba:54:43:99:ec:8e:d3:98:02:
         69:a7:22:92:d1:db:57:98:56:de:fa:07:f5:2a:19:1f:d4:e9:
         6a:ec:62:98:d3:6c:0b:1a:a0:03:01:14:59:03:c3:d2:19:30:
         2a:3a:6c:4e:68:30:bb:43:cc:8a:fd:9c:51:90:d8:27:b4:df:
         d8:b6:25:df:c2:e8:f0:fc:48:5a:35:2c:f7:8a:9f:eb:e1:c3:
         85:6e:8a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----