Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7d37d1e1-d319-4106-a18c-6e2e32939f1e.roa
File:                     7d37d1e1-d319-4106-a18c-6e2e32939f1e.roa (raw, json)
Hash identifier:          WTUefKZQZKbrhXpBXrbD/+mexOMgd2iYIQ/oZUNvcfM=
Subject key identifier:   CE:22:52:25:0F:D1:D3:32:59:CD:45:00:20:3F:98:F0:83:D2:96:A4
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6B3C11F93918D8435F64EBA6AC45F559A785836E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7d37d1e1-d319-4106-a18c-6e2e32939f1e.roa
Signing time:             Sat 18 Mar 2023 00:00:00 +0000
ROA not before:           Sat 18 Mar 2023 00:00:00 +0000
ROA not after:            Tue 21 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3c:11:f9:39:18:d8:43:5f:64:eb:a6:ac:45:f5:59:a7:85:83:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 18 00:00:00 2023 GMT
            Not After : Mar 21 23:59:59 2023 GMT
        Subject: serialNumber=ec867bed3e2a2b89d6142286ae369c11026291a384e1bc0f35d52b90b3297519, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ca:35:08:7d:20:a7:c7:9e:70:4a:62:93:5c:
                    d5:16:8a:5b:0c:21:d7:e8:c5:fd:48:ad:0d:42:18:
                    1c:c5:83:0e:b0:d9:e9:d7:2c:9a:b3:9a:fb:bd:c3:
                    e3:39:f8:57:76:12:72:20:ef:93:bc:1d:5d:9c:e4:
                    50:a1:1b:56:00:c3:dc:25:1a:73:c4:e7:80:70:c8:
                    d1:54:da:67:72:ea:18:4c:40:79:2d:c6:4a:3f:a0:
                    86:16:6d:7e:3b:13:e1:c9:74:1d:2a:e7:c4:79:86:
                    d5:d6:5e:cb:3b:6e:cf:3e:83:e4:86:04:fa:4f:24:
                    7e:ef:2c:ad:95:d3:fd:23:e7:2a:c7:ae:52:74:77:
                    cc:a2:43:44:9c:8d:ae:25:a2:6a:a6:39:f9:9b:86:
                    10:46:e3:14:7d:51:d4:db:c0:77:bb:54:26:ed:17:
                    0f:0d:10:87:22:aa:5a:f6:ce:fb:86:36:a8:34:cf:
                    c3:1a:ee:83:5d:e9:24:dd:66:52:9c:15:82:b1:bb:
                    94:b0:10:62:2d:e0:60:7b:3d:ad:04:39:87:bf:f1:
                    40:71:c5:b8:78:37:69:93:ac:af:b6:77:a0:3e:9f:
                    bb:7c:ff:66:8e:16:ce:a1:5f:79:e7:41:20:1b:95:
                    43:da:2c:da:d8:45:c6:78:7c:f2:bf:a6:17:bf:69:
                    1c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:22:52:25:0F:D1:D3:32:59:CD:45:00:20:3F:98:F0:83:D2:96:A4
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7d37d1e1-d319-4106-a18c-6e2e32939f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:b2:02:a2:4b:05:cd:e7:8b:47:3a:cd:63:30:e4:3b:35:ef:
         6d:04:1f:02:97:68:3c:df:af:6f:07:6c:ae:27:2c:ab:f8:c0:
         2d:9b:d3:69:6a:18:bc:7c:cb:e2:e7:bc:13:0a:be:e6:85:28:
         50:ab:0a:45:a0:19:86:f5:5e:cf:7a:5b:9d:34:74:c5:65:9c:
         9e:a7:1f:88:c5:cf:f9:2e:12:71:15:bc:d8:01:09:97:ad:53:
         6b:71:95:ad:d9:bd:f2:1f:61:ea:f6:62:de:f4:e3:2d:25:8e:
         5c:c5:8d:d5:dc:cd:24:88:3a:e4:f7:b4:7e:f5:45:46:e6:5f:
         4b:3c:56:ef:e1:4a:3c:74:b6:59:3b:7d:11:cd:76:de:46:60:
         1e:25:ae:df:49:2e:fd:9b:6e:20:21:44:bb:cf:c6:72:09:3a:
         22:c5:ef:85:94:f5:4a:c3:e2:7e:78:49:a9:40:7c:8d:85:b7:
         87:a0:59:79:6b:9b:00:52:b5:51:96:a5:a8:8a:fb:bf:5e:0e:
         1b:bc:00:a2:cc:9f:0b:36:b3:44:22:cb:e0:b9:24:29:dc:8d:
         e4:7f:68:20:38:34:20:a3:63:d7:65:d2:f6:1a:ed:ba:ce:c7:
         bb:3f:c1:d5:9a:8f:3c:17:89:c0:37:dc:47:e7:60:00:2f:cb:
         e7:ca:04:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----