Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/baf60304-5db7-4493-964a-44f6d1fb517d.roa
File:                     baf60304-5db7-4493-964a-44f6d1fb517d.roa (raw, json)
Hash identifier:          MkJ+5J9/pubJWvqPZpYEoVfe9YsbklkA2hJWVl0IUso=
Subject key identifier:   58:E4:D0:B3:C0:E1:94:84:8E:2C:B2:64:CD:17:D4:D1:D6:74:3C:2B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       692A8B504F693F314F3689D681FD9DD23D2BFF16
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/baf60304-5db7-4493-964a-44f6d1fb517d.roa
Signing time:             Sat 11 Mar 2023 00:00:00 +0000
ROA not before:           Sat 11 Mar 2023 00:00:00 +0000
ROA not after:            Tue 14 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2a:8b:50:4f:69:3f:31:4f:36:89:d6:81:fd:9d:d2:3d:2b:ff:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 11 00:00:00 2023 GMT
            Not After : Mar 14 23:59:59 2023 GMT
        Subject: serialNumber=ec6fbdc0e0be0a34dd24604202453ab4536dae788dd7605afad91752c70baa44, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:74:41:06:b5:42:a2:77:00:b0:e2:6a:22:52:
                    ca:09:68:8e:7d:29:0f:69:f3:9a:66:eb:80:06:7a:
                    ec:66:d8:7a:ce:1f:d8:18:21:90:3f:1d:f9:de:20:
                    0f:b3:37:e1:9d:00:d6:ae:3d:17:2d:b4:1b:de:94:
                    ba:ea:82:8d:cb:b0:8f:16:e7:45:f1:e5:a5:e2:24:
                    f7:ff:9e:81:27:50:79:d6:69:0f:fd:db:0a:63:17:
                    c5:19:1a:1b:8d:7c:6a:89:00:a5:2c:b1:7f:89:5c:
                    cc:ed:ec:7a:ce:46:35:76:30:6b:c6:b3:8f:a4:2f:
                    07:5c:49:05:d8:0e:36:ef:60:e3:da:36:8f:e5:7e:
                    15:84:7f:f6:40:c4:2f:bb:41:bf:5e:86:05:46:98:
                    38:be:f3:54:92:4a:b8:a6:2e:df:75:32:2e:91:59:
                    b3:d0:40:d3:0a:4b:70:03:01:36:73:2f:8d:fe:6f:
                    fa:4f:ab:1a:3e:e3:ed:66:dd:ea:12:e2:53:5b:25:
                    9d:cc:52:5f:bc:f4:87:61:0b:3c:c0:ae:05:77:a0:
                    18:fe:8a:e9:d7:38:36:5f:07:66:d9:98:50:d0:d3:
                    28:36:56:5e:aa:6a:4b:e7:2a:81:96:5d:38:ed:73:
                    38:4c:0a:c9:41:25:c9:04:61:24:2f:5d:63:02:cb:
                    09:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E4:D0:B3:C0:E1:94:84:8E:2C:B2:64:CD:17:D4:D1:D6:74:3C:2B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/baf60304-5db7-4493-964a-44f6d1fb517d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:db:53:5b:41:bc:09:57:37:f4:2f:66:2e:8e:f2:cc:20:c7:
         c8:a4:a4:58:42:5b:53:a1:68:bd:d2:40:f7:21:27:ed:27:b6:
         21:23:1d:be:a8:05:fe:52:40:17:a9:48:e2:02:8b:bc:51:cf:
         ed:58:60:62:1e:a0:ec:4b:2f:14:7e:fe:61:0f:2f:ab:00:63:
         67:77:33:b5:1b:0c:1b:9f:3f:75:04:51:8c:56:ad:d4:5c:6b:
         45:89:e1:fc:52:6f:b5:30:29:b8:2a:cb:e4:2d:c6:4d:dc:a3:
         dd:03:c2:6c:83:94:a2:24:24:19:7c:9f:ba:91:f5:64:cc:3b:
         a2:3c:8d:1e:73:94:3c:07:bc:27:55:a9:66:79:f8:d1:76:07:
         0b:74:2f:b2:7d:ea:9a:1b:87:9c:ff:15:c1:be:f1:75:76:ff:
         63:3f:78:09:16:60:6b:38:2e:3b:6c:19:c6:49:c8:ff:c1:e4:
         5b:e1:52:92:06:4e:be:54:8a:25:fb:d3:0f:e2:1f:ab:8b:4e:
         16:da:ef:9c:6f:ed:6f:05:8a:39:a7:22:5c:f7:e2:6b:66:26:
         ac:01:ee:bb:3b:a0:a1:98:b7:b6:a8:46:c3:49:fa:dc:58:b2:
         d1:21:ef:97:0b:22:db:fc:f7:18:77:a3:94:76:7f:7c:bc:96:
         43:be:1c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----