Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2ffe46d7-8b1d-42ac-8649-456e424d6123.roa
File:                     2ffe46d7-8b1d-42ac-8649-456e424d6123.roa (raw, json)
Hash identifier:          3L+fIagVtl93Pqz5aOJsnhL92Ts2658ynsz+mB0Qolw=
Subject key identifier:   B1:E8:25:41:0C:58:11:AD:E4:AB:55:8D:B5:84:4A:2C:91:27:BE:96
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       15C972F39BBDE1873501740718C27C514BE970D7
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2ffe46d7-8b1d-42ac-8649-456e424d6123.roa
Signing time:             Wed 08 Mar 2023 00:00:00 +0000
ROA not before:           Wed 08 Mar 2023 00:00:00 +0000
ROA not after:            Sat 11 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c9:72:f3:9b:bd:e1:87:35:01:74:07:18:c2:7c:51:4b:e9:70:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  8 00:00:00 2023 GMT
            Not After : Mar 11 23:59:59 2023 GMT
        Subject: serialNumber=65dd1c62544f4972e30cf2248ec756c0eb843c151c689dcdc08fe6d07e43e08e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:95:3a:c6:dd:dd:cf:7f:4c:0f:06:57:ae:10:
                    2f:06:ae:e2:b7:00:db:76:c0:1f:93:70:d8:b8:83:
                    c4:28:51:8b:a7:54:9a:9a:c6:47:88:1a:79:d7:cf:
                    d5:cb:3b:8c:70:1f:8b:14:e7:b5:56:cd:fe:27:1b:
                    a5:36:36:94:5d:d9:a0:e7:9d:96:99:f1:8f:e0:39:
                    da:cd:7b:ac:39:1c:41:a6:3f:a2:02:1f:4c:19:ac:
                    25:05:06:5e:5d:4e:19:9d:cf:f6:9a:6e:70:c8:5b:
                    2d:3c:23:80:29:c6:c3:53:c9:4d:0c:a2:05:9a:f6:
                    33:20:68:ab:3d:2a:23:19:51:eb:55:37:3a:d1:68:
                    23:71:bc:db:49:0a:7e:bc:e2:14:2b:9e:f6:18:db:
                    f6:df:48:81:4d:36:b4:80:0b:12:21:c1:31:e8:9d:
                    df:bd:2f:b5:23:8e:a7:e2:87:d6:52:ad:b3:20:ce:
                    3f:cc:34:5a:da:49:57:af:17:32:21:ff:27:4d:08:
                    b2:bb:ab:94:db:db:6f:4c:93:ac:1a:37:f4:05:02:
                    07:f2:95:04:5c:46:30:d4:42:f3:1a:43:e1:7a:8a:
                    12:a1:4c:ff:c1:4c:27:3b:ff:05:eb:f5:63:c1:3a:
                    39:7c:c3:3b:77:bf:6e:50:14:82:be:74:8a:71:4a:
                    e1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E8:25:41:0C:58:11:AD:E4:AB:55:8D:B5:84:4A:2C:91:27:BE:96
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2ffe46d7-8b1d-42ac-8649-456e424d6123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:d5:e8:c3:f9:2c:d7:b1:2a:f2:31:87:81:ef:76:da:5f:c2:
         c7:15:8a:bd:c4:41:f0:a3:47:5a:98:4d:d2:0b:3f:db:45:ba:
         ed:c1:39:fd:98:62:87:16:39:87:57:f3:dd:df:57:03:ce:dc:
         5e:43:2b:23:6f:2f:57:f0:aa:57:11:de:bf:3e:9e:fe:99:d0:
         0f:50:57:5f:a3:3c:09:12:64:54:e4:b6:64:b6:43:ce:fa:91:
         06:d9:c7:6d:50:fb:46:97:b0:51:e8:b9:bc:d0:7c:1f:d4:5c:
         24:0d:1d:df:4b:52:f8:39:a4:9e:ec:9d:1c:0d:92:5f:6c:db:
         c5:c0:4f:ec:4b:48:a6:3e:21:b8:79:9e:ae:1b:3a:87:fa:3d:
         9f:0b:e0:06:3b:cb:cb:ee:56:61:70:a8:09:56:33:6c:dd:7c:
         3b:de:83:70:e4:2d:cd:d7:75:f2:67:3a:8d:23:5f:bf:0b:e6:
         11:f1:f1:71:65:5a:f0:63:23:9f:be:52:db:fd:d3:f6:39:64:
         e2:43:e2:2e:65:8b:fb:7f:54:1d:fa:57:3e:e7:24:3b:7b:b2:
         d9:22:2e:40:66:d3:d9:af:42:ff:50:24:eb:b1:64:d1:fe:cd:
         00:bb:12:5b:c9:8f:74:ac:32:b1:13:59:0b:29:e7:95:1c:bb:
         a7:40:9c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----