Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9c5d124c-9887-4aee-9c99-16961e84801a.roa
File:                     9c5d124c-9887-4aee-9c99-16961e84801a.roa (raw, json)
Hash identifier:          WuyBi7n0kcKxl69YFfDsuH0Cy0JqQhn51tV6WatuKxA=
Subject key identifier:   0F:BC:8F:2E:94:9D:C3:C7:C7:8C:43:54:93:27:A7:DF:C3:BE:47:FD
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0987677896437282491B821841E50F7AF0CBAD17
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9c5d124c-9887-4aee-9c99-16961e84801a.roa
Signing time:             Thu 23 Mar 2023 00:00:00 +0000
ROA not before:           Thu 23 Mar 2023 00:00:00 +0000
ROA not after:            Sun 26 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:87:67:78:96:43:72:82:49:1b:82:18:41:e5:0f:7a:f0:cb:ad:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 23 00:00:00 2023 GMT
            Not After : Mar 26 23:59:59 2023 GMT
        Subject: serialNumber=e334c913fb57b57ff92b9966b7ceff9611f7525a264772af93fe143b19ae9822, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3b:e6:6a:cc:bc:90:da:bd:ad:fb:79:52:31:
                    dc:b4:56:b6:bf:3d:87:7e:e1:83:a1:3e:6f:fc:a4:
                    c7:6a:22:9f:2e:5f:39:95:50:f6:a3:6b:9d:10:0f:
                    98:d8:47:79:c2:83:b8:59:6c:31:d0:9b:6c:fb:36:
                    3d:ee:81:2b:92:94:f9:d3:a8:24:c0:bb:18:78:78:
                    a2:7d:d7:07:dc:d3:f5:bb:d3:84:5a:a3:f5:f6:8a:
                    ad:36:99:bb:d4:fe:40:3e:7b:83:4a:71:94:fa:76:
                    bc:2f:76:de:1c:8d:f0:9d:2d:e7:46:ac:6f:ad:76:
                    4a:2c:44:d1:ec:13:70:f1:7f:e3:04:3f:04:06:c8:
                    c5:30:20:f2:79:fe:21:f8:9a:27:20:05:04:19:51:
                    45:78:41:1d:27:6b:12:3d:5b:34:84:6e:f2:d4:51:
                    f7:16:ef:cd:9a:6e:57:f3:a4:7c:72:e7:9d:2e:13:
                    ec:68:ed:56:20:37:41:14:dc:74:1d:0c:c4:47:3c:
                    b7:d7:61:6c:68:8c:0e:a1:6e:af:c6:57:8f:25:86:
                    66:8d:a1:ff:70:7b:0a:88:20:5e:de:42:20:e9:a0:
                    7a:cb:79:12:97:a6:00:1b:0b:93:bb:ab:12:b8:64:
                    a1:6e:fe:4f:cb:e2:1c:ba:2e:70:78:d8:c0:78:ba:
                    ed:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BC:8F:2E:94:9D:C3:C7:C7:8C:43:54:93:27:A7:DF:C3:BE:47:FD
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9c5d124c-9887-4aee-9c99-16961e84801a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:f8:9a:74:cd:dd:9f:41:4a:51:48:40:7e:88:c4:db:a6:a0:
         b2:a7:46:07:45:b5:a3:fe:da:c8:dc:2b:3f:53:15:5c:74:28:
         7c:c8:5d:a9:a9:a1:a2:dd:fc:4e:1a:b1:8e:b4:1d:0c:be:16:
         0d:d3:e6:7d:bc:1a:70:7e:23:28:04:d5:25:b9:e7:ab:4f:f3:
         a0:96:a3:b2:ea:de:e7:c5:30:19:54:c7:47:b4:07:32:aa:1c:
         9a:9b:e5:49:5d:c5:bf:b2:67:14:10:8d:aa:cc:11:6a:d9:a9:
         5d:88:1f:0c:70:26:ac:8f:7d:98:2e:2a:aa:61:9f:b8:4c:f4:
         54:a0:3d:19:9e:d5:af:d8:8b:f9:ab:a2:8e:9e:78:64:a4:9c:
         28:d0:1f:cb:fb:db:12:7c:e7:46:8b:38:75:a5:c8:24:2d:73:
         49:0b:03:f0:5f:65:49:f1:ae:f2:d6:05:ef:1c:4e:f2:b3:e2:
         6d:5c:b6:99:ea:06:4b:c2:72:2d:8c:be:7f:64:77:52:df:e7:
         75:31:22:02:4c:9c:90:dd:c1:f5:f5:cb:89:16:83:ad:26:bc:
         5f:fe:7a:4a:52:4f:dc:48:4c:1e:f7:04:27:d9:f8:59:fd:ad:
         3d:35:f1:75:d0:73:f4:65:dd:41:e8:9f:a1:99:43:70:e8:2e:
         9c:44:4c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----