Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8066f268-39d9-4485-ac69-836efd4c94fe.roa
File:                     8066f268-39d9-4485-ac69-836efd4c94fe.roa (raw, json)
Hash identifier:          f5q5f+V1RfjKr83uNfIpDr2GOXKEhat5OdANyiL8Xoo=
Subject key identifier:   4F:21:A7:8B:3D:05:A6:4F:28:44:99:C8:D1:BD:94:C9:9C:86:65:CE
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0C68FF0E05C4C318EFCB9CB180FD9BD361824C65
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8066f268-39d9-4485-ac69-836efd4c94fe.roa
Signing time:             Mon 27 Mar 2023 00:00:00 +0000
ROA not before:           Mon 27 Mar 2023 00:00:00 +0000
ROA not after:            Thu 30 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:68:ff:0e:05:c4:c3:18:ef:cb:9c:b1:80:fd:9b:d3:61:82:4c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 27 00:00:00 2023 GMT
            Not After : Mar 30 23:59:59 2023 GMT
        Subject: serialNumber=4445c8aaa95bea7ca5c2009fbfb48f39326603e7133af42f1c23e655b54de30d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:26:47:35:dd:4a:d3:1d:a9:b5:38:33:7a:f1:
                    fc:7f:a0:eb:ec:3c:b0:67:d9:8d:14:65:e7:86:ca:
                    18:fb:11:ea:16:e4:07:ec:49:29:b7:65:59:b6:35:
                    86:64:55:cc:b2:c0:71:84:f2:2f:a2:ad:ee:b5:5d:
                    f2:bd:58:e4:b5:08:b3:da:d3:9f:d1:66:47:cd:da:
                    3a:9e:24:7d:dd:69:89:49:0c:a0:f7:97:a5:a0:80:
                    ca:39:35:09:f9:87:f7:e6:49:7c:58:8f:f5:1c:0b:
                    06:eb:f4:8c:a8:c7:48:90:e5:04:17:6a:72:ea:53:
                    15:87:72:9e:94:bb:da:27:f5:f6:6b:c8:53:1b:44:
                    8b:a2:6a:9a:c0:f2:62:6b:39:00:af:c7:81:e5:27:
                    ac:d8:0c:9b:40:bf:1a:25:77:5c:28:02:0f:db:80:
                    85:51:6f:55:73:8f:c2:2d:11:01:98:17:1f:1d:25:
                    18:09:97:8d:8b:61:cb:86:0c:e1:6e:ed:04:55:9a:
                    ec:17:02:08:01:a9:a1:1d:21:44:06:04:1a:b0:aa:
                    8a:f1:8a:de:25:4a:5a:ab:d3:7c:4f:e7:12:0d:3c:
                    15:e7:1e:7b:05:c4:c2:2f:00:ed:5e:4a:57:39:65:
                    74:4b:26:de:e1:61:5a:12:e0:e5:34:41:6f:ac:e0:
                    24:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:21:A7:8B:3D:05:A6:4F:28:44:99:C8:D1:BD:94:C9:9C:86:65:CE
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8066f268-39d9-4485-ac69-836efd4c94fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:00:ff:ba:a1:cc:24:81:8c:0e:f1:47:1a:aa:b2:32:a3:78:
         4b:07:42:57:df:c0:65:75:4e:f0:54:35:6e:8b:a1:ed:27:03:
         33:f4:cf:59:9f:72:b0:80:df:ea:03:c5:43:8e:11:17:c6:1c:
         aa:d2:71:2d:e6:9f:02:76:47:38:07:5c:cf:d4:9a:dc:b5:75:
         d3:b2:80:83:ec:65:ed:aa:af:78:cd:08:a1:e0:ad:f4:da:61:
         6b:f4:be:6c:8f:6b:1d:db:48:44:af:34:cd:93:d8:b6:60:d0:
         72:b7:ff:85:a7:7a:2f:ee:17:41:4d:1d:2a:6d:05:5c:f2:1b:
         39:28:91:2e:8a:b7:06:ed:7b:61:7e:68:0b:7a:d5:cb:7a:d3:
         45:e8:f3:fe:9d:67:f9:24:66:2d:bb:c5:2b:5c:5e:94:6c:84:
         69:d5:29:c8:b6:c8:72:c6:f4:b2:ba:01:1f:35:b2:36:53:93:
         04:b0:28:62:2c:93:9b:6b:c9:02:c0:75:ee:60:d4:2b:32:c7:
         82:6c:f8:32:bb:18:7d:10:1e:ee:5e:4e:77:e0:ac:64:65:f2:
         de:0f:0d:84:d3:d1:3a:c7:2a:74:53:62:52:70:4c:6b:31:d7:
         b6:fe:18:4a:49:89:fe:90:ad:8b:49:b9:51:b1:cf:05:47:20:
         df:3a:e7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----