Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/71d80a83-5c4d-47f3-884f-d19681e37758.roa
File:                     71d80a83-5c4d-47f3-884f-d19681e37758.roa (raw, json)
Hash identifier:          gx0yv9Q7DVUa3lfG8Ql7Totm9aJLDs1yRZ+GT+ZeVI4=
Subject key identifier:   02:B3:26:08:58:1C:12:93:30:97:D7:04:CF:19:5C:B9:BA:12:92:B0
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1A1DEC7798420BA777988DEC4B99C8B826B3FB6D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/71d80a83-5c4d-47f3-884f-d19681e37758.roa
Signing time:             Sat 08 Apr 2023 00:00:00 +0000
ROA not before:           Sat 08 Apr 2023 00:00:00 +0000
ROA not after:            Tue 11 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1d:ec:77:98:42:0b:a7:77:98:8d:ec:4b:99:c8:b8:26:b3:fb:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  8 00:00:00 2023 GMT
            Not After : Apr 11 23:59:59 2023 GMT
        Subject: serialNumber=f8f88538a973962ca645c5611bdcad4ff5a6f2e1a19aaa50416505d322e47b14, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:41:ee:2d:12:ae:ba:c2:0c:ae:c3:fd:25:ba:
                    cf:6f:46:a3:35:c6:62:69:0b:97:a6:97:9e:d0:f7:
                    79:bb:f3:3c:47:c6:a2:7d:fa:c3:e2:f9:20:91:80:
                    b0:35:ce:4c:46:d0:54:1c:d7:ba:06:f9:f4:86:4b:
                    df:0c:9e:15:26:65:31:60:39:69:93:56:68:60:6b:
                    96:50:df:72:bc:0f:31:3b:97:39:e0:73:15:13:22:
                    88:8c:be:51:b7:bc:ec:72:78:6b:e9:22:5d:e5:f8:
                    22:1d:c8:00:42:cc:45:dd:1c:be:2f:e3:67:47:2c:
                    84:af:28:3e:a5:da:1c:1d:12:7e:7a:16:d5:85:fe:
                    c9:c8:25:4a:51:5c:af:ff:d3:f1:84:89:e7:fd:bc:
                    6c:0b:88:5e:53:81:e9:75:bd:79:4b:f7:08:70:1b:
                    20:91:92:e7:f1:90:8a:3d:bf:9f:a4:f1:42:de:b1:
                    1d:fc:e3:7e:ac:06:46:cc:6f:32:b0:d7:b2:9b:42:
                    e7:71:18:63:75:15:a4:0b:f6:a4:ae:bb:d9:49:31:
                    50:2f:70:f0:9f:bf:5f:80:bd:42:76:53:1d:f5:e1:
                    83:08:d5:01:a2:c0:0f:63:0c:21:1b:92:45:1f:a1:
                    a7:cb:40:45:b2:53:39:76:4c:f0:ee:93:27:d6:91:
                    40:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B3:26:08:58:1C:12:93:30:97:D7:04:CF:19:5C:B9:BA:12:92:B0
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/71d80a83-5c4d-47f3-884f-d19681e37758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:98:d7:5d:e9:4d:c3:c8:ba:02:fe:50:78:a6:62:46:3f:f3:
         35:e7:e5:86:be:62:01:71:a6:48:f0:2a:84:e8:eb:a4:e0:da:
         eb:57:b5:d7:a6:74:d6:93:e4:b2:ac:03:79:9e:57:8d:bc:a8:
         76:ca:61:25:35:29:6c:17:2a:9c:4d:8f:0e:b3:70:90:7f:5c:
         b9:dd:11:47:81:80:c0:51:e7:4e:d0:5c:4f:cb:53:7a:56:96:
         ff:8b:14:72:c7:94:8f:d3:cc:44:e2:26:ee:bd:8e:16:a5:7e:
         22:db:e5:8c:f7:c7:6d:a3:40:61:2c:ae:90:16:73:1b:fe:ff:
         d0:81:47:18:92:ef:e0:70:65:c8:33:11:01:41:65:94:af:9d:
         86:c5:70:97:58:31:80:8d:23:5f:26:da:8d:ca:77:e2:88:52:
         0d:4d:01:a1:90:0e:12:e1:b4:7b:90:88:5e:9b:12:9c:d7:5a:
         a7:23:d9:d3:4d:62:cd:65:ba:43:63:57:8f:af:46:e9:c7:e5:
         fe:29:f8:78:76:7d:00:82:e3:5a:25:16:11:8e:95:8f:9e:61:
         e9:2b:f6:76:09:80:e0:1e:bc:ad:ac:a5:c0:f6:8c:c6:06:54:
         ff:d1:63:32:73:b9:29:05:7e:ab:d4:fd:a3:6b:78:68:ef:6d:
         26:80:93:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----