Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/65997b05-579c-4889-b9af-8af0df8f4e0c.roa
File:                     65997b05-579c-4889-b9af-8af0df8f4e0c.roa (raw, json)
Hash identifier:          TfAczLYCN30PPc1ex1NktKJY/PhCvM92plCdKww7/O8=
Subject key identifier:   FD:17:70:AE:07:09:26:54:A3:E1:90:16:BD:97:91:8E:7A:59:6B:C7
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4C1AD0D50C3F044D2E6A95F2EAA70DE86F02AACA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/65997b05-579c-4889-b9af-8af0df8f4e0c.roa
Signing time:             Wed 22 Mar 2023 00:00:00 +0000
ROA not before:           Wed 22 Mar 2023 00:00:00 +0000
ROA not after:            Sat 25 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1a:d0:d5:0c:3f:04:4d:2e:6a:95:f2:ea:a7:0d:e8:6f:02:aa:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 22 00:00:00 2023 GMT
            Not After : Mar 25 23:59:59 2023 GMT
        Subject: serialNumber=704e2ee34a3ad1e24ebafd36a64743ac4d185e79cb49049646803276b27899bf, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6b:99:ef:7c:04:9f:ad:a1:b5:2c:bc:34:d5:
                    26:a1:b8:e4:43:c1:6c:f7:71:ba:13:6b:12:28:c0:
                    85:7c:10:72:53:cc:31:66:d2:c2:55:58:9e:c3:79:
                    41:de:20:a1:7d:3d:a8:4e:3d:70:51:7c:ab:54:19:
                    9c:ea:cd:c3:86:88:33:20:62:07:78:fe:43:c7:b0:
                    22:e5:af:e4:f5:8c:90:c5:0f:e3:29:47:a5:31:18:
                    75:10:d0:0e:c4:6f:9d:f6:c5:1e:99:c5:39:df:e2:
                    50:fd:15:68:58:08:39:4a:c0:ee:43:c2:ea:16:36:
                    da:ca:1a:8c:b4:b6:d9:29:72:f7:d5:e5:46:30:a4:
                    fb:14:15:bd:41:06:4c:d1:31:6f:e9:4e:a0:4e:32:
                    11:49:9b:13:62:aa:72:68:49:30:d2:92:31:e0:3e:
                    a2:ec:fb:f4:f7:b5:d4:f5:3b:fb:91:5b:70:b9:c0:
                    25:08:70:ae:26:0b:0b:04:40:e9:26:92:4d:4a:f2:
                    6a:0c:79:87:51:be:f9:d7:70:73:7c:a5:1c:41:2c:
                    dd:21:fe:a8:0a:6f:12:91:36:35:99:81:da:f5:b4:
                    fc:79:3d:ab:f3:fc:6e:d1:01:20:c0:31:cc:20:ca:
                    eb:da:48:65:b1:6a:22:2c:e3:46:79:95:30:90:81:
                    35:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:17:70:AE:07:09:26:54:A3:E1:90:16:BD:97:91:8E:7A:59:6B:C7
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/65997b05-579c-4889-b9af-8af0df8f4e0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:fa:d9:e6:b3:73:18:3a:a1:2f:6e:25:db:12:ec:bc:6d:34:
         8d:37:c7:13:7d:22:0f:b7:5a:1b:a4:67:cd:e4:f6:88:34:5b:
         4e:3a:18:c4:50:12:ce:c8:f7:fb:95:a1:ab:75:bb:79:a6:f6:
         cc:e1:fa:dd:8a:d5:5e:9e:f0:0e:73:f2:f9:83:e4:4c:a7:d1:
         c8:6e:4c:c6:64:e3:d6:b4:65:49:96:e2:01:7d:14:bd:68:9c:
         93:9f:9e:ad:1b:1d:28:32:50:44:6b:73:08:1f:52:b2:8b:2d:
         d8:2e:b8:d9:28:be:89:cf:a2:90:64:25:5b:b7:3a:88:f0:4d:
         c0:9d:cb:11:08:f0:97:db:2d:5d:06:4c:36:b0:16:2d:fc:7d:
         d7:79:69:8a:4d:ec:8a:91:50:cb:e0:c6:94:fa:f1:bf:6b:3d:
         c2:cf:6c:c0:a7:d0:12:49:cd:3a:54:90:a8:ae:3c:7a:af:5f:
         37:e7:0c:53:e8:19:d4:2f:17:6f:c9:a3:54:7e:7b:83:9e:7d:
         47:15:47:b6:ff:f4:e7:27:7b:e5:59:53:b6:7c:60:47:6c:40:
         de:3d:12:07:14:3c:70:50:30:9e:9e:60:94:3d:16:31:e6:25:
         19:58:6f:03:3e:20:be:36:6c:b5:0c:ed:54:58:44:56:78:cd:
         7e:af:9f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----