Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9c5d237e-eee4-4d23-9883-927e31bcb726.roa
File:                     9c5d237e-eee4-4d23-9883-927e31bcb726.roa (raw, json)
Hash identifier:          YgxutODJmj5BiIzNfBkqYMlBnsMSIS9FFagm5/CN6lY=
Subject key identifier:   85:59:9B:70:F5:5A:86:EA:9B:5B:58:D1:C0:66:67:C5:FC:79:52:89
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       72B6C1EC90E412454DEF547407FF86F8DDE31FCB
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9c5d237e-eee4-4d23-9883-927e31bcb726.roa
Signing time:             Mon 06 Mar 2023 00:00:00 +0000
ROA not before:           Mon 06 Mar 2023 00:00:00 +0000
ROA not after:            Thu 09 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b6:c1:ec:90:e4:12:45:4d:ef:54:74:07:ff:86:f8:dd:e3:1f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  6 00:00:00 2023 GMT
            Not After : Mar  9 23:59:59 2023 GMT
        Subject: serialNumber=d27704ca3fa55fc9a958335f555322921603f2842df060a0fdb167eaed1750d9, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a6:53:bb:2e:18:0d:14:c6:19:de:e4:57:fa:
                    10:2e:5b:de:50:66:1f:8b:56:ee:47:f0:6a:26:91:
                    3c:ad:c6:db:d5:39:45:f8:6c:8a:e5:09:d6:95:d1:
                    ef:ef:87:b8:67:f1:dc:18:33:a4:6d:4b:25:9c:35:
                    ce:a6:f1:2c:37:25:e6:70:f2:f7:fc:b1:e7:4f:a8:
                    00:2d:cc:74:74:f4:74:61:22:27:e2:02:e0:33:d0:
                    aa:b7:a9:ed:ce:50:cb:86:6c:a7:c1:d1:06:3c:be:
                    55:42:60:b3:84:99:a9:fb:26:71:97:d5:79:7f:97:
                    ef:13:1e:f8:85:70:49:31:8b:6d:8e:5f:e1:67:91:
                    a5:e1:0f:68:81:e0:cd:52:d6:c1:46:91:85:45:cb:
                    d8:45:b1:3c:83:ef:73:f7:75:a9:86:1d:3e:6c:63:
                    48:dc:83:72:7f:06:66:a3:00:0d:5f:62:d2:c9:61:
                    21:28:2b:32:0f:af:71:11:94:1a:62:6c:57:15:a1:
                    51:fb:e0:8c:8f:4f:ea:21:88:45:97:3e:f8:d3:ff:
                    c0:35:22:7d:0e:73:15:34:10:6a:47:5c:00:8b:cf:
                    dd:53:17:d0:09:15:97:7d:ed:66:4e:35:28:81:6c:
                    d6:8e:b9:4a:20:3c:80:e3:e2:0a:f7:2d:f8:82:72:
                    c7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:59:9B:70:F5:5A:86:EA:9B:5B:58:D1:C0:66:67:C5:FC:79:52:89
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9c5d237e-eee4-4d23-9883-927e31bcb726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:9e:f0:2e:71:d2:46:70:5d:57:7a:ba:ad:c9:0b:e4:af:47:
         d7:53:cf:e6:1a:f7:84:6c:f3:c6:5b:b0:6e:d0:92:a6:81:42:
         0e:ee:fe:9d:0d:68:a9:c4:dc:fc:61:f7:00:03:3e:42:77:19:
         ff:93:bc:5c:3e:78:ab:f7:e1:29:44:68:13:2f:a2:3c:e2:4c:
         52:56:ba:6e:cc:5b:fb:ff:1c:57:d8:0a:e6:23:ab:ff:8b:d2:
         cd:0c:2d:d4:0f:59:2d:eb:e6:b7:16:f3:be:77:67:93:ea:6a:
         b5:54:fc:ad:44:88:89:d8:63:99:23:2d:cc:d7:f4:46:da:04:
         07:71:43:d9:e9:5b:05:ba:3a:e7:4d:5c:bc:68:8f:03:e3:81:
         fd:5a:2e:a9:c3:06:b0:e7:f8:7f:92:22:f1:ff:bc:af:88:7a:
         6e:ed:48:01:24:82:e5:8f:2f:d7:85:24:29:c0:88:87:1d:af:
         fc:79:93:16:fb:f6:5e:61:48:f3:47:6d:00:4c:c6:b7:7a:22:
         fc:ff:6e:88:4e:f6:25:30:75:5a:fe:67:81:2d:55:de:35:ec:
         ac:f4:dd:21:a0:ac:77:fb:ab:e4:58:fd:6e:b8:bc:ed:3a:dd:
         8b:02:b1:a1:3e:2d:88:19:35:65:c2:9f:dc:7b:81:30:b3:5a:
         1d:ee:39:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----