Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c53cbb27-7e45-49f4-9adf-57d16908e035.roa
File:                     c53cbb27-7e45-49f4-9adf-57d16908e035.roa (raw, json)
Hash identifier:          gu4tvy6JeY9qeUQc4rd3eSNoDMhGBNXFEn7b9XzJwSU=
Subject key identifier:   80:15:F4:69:16:83:64:BA:85:C9:E3:A5:E7:FB:8E:4F:5E:0A:8E:E5
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4795750C9D661F60CDA4D5FDBB62D79612070AD8
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c53cbb27-7e45-49f4-9adf-57d16908e035.roa
Signing time:             Fri 28 Apr 2023 00:00:00 +0000
ROA not before:           Fri 28 Apr 2023 00:00:00 +0000
ROA not after:            Mon 01 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:95:75:0c:9d:66:1f:60:cd:a4:d5:fd:bb:62:d7:96:12:07:0a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 28 00:00:00 2023 GMT
            Not After : May  1 23:59:59 2023 GMT
        Subject: serialNumber=7f85597a13106c780636cb032e0caaf020ece02e09f07f3db01677e7157840e0, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:da:45:2d:3f:1c:e8:74:67:13:80:09:b5:
                    79:d3:a6:28:78:64:3f:4f:d2:ba:06:7d:34:05:4d:
                    04:4c:5d:0b:bd:fd:3b:14:07:04:67:70:44:a5:d3:
                    42:a3:17:a3:ec:6f:be:8f:e7:8a:77:63:8d:0f:35:
                    28:16:ca:82:3d:2c:02:6e:79:42:b7:eb:28:24:71:
                    ff:10:41:c6:b5:f0:25:79:34:28:5d:8f:cb:b6:3a:
                    7e:da:b1:ea:3d:96:51:2e:96:e2:df:b7:07:df:e5:
                    72:35:86:f2:4c:8a:45:41:f6:74:29:ea:ad:9e:54:
                    4e:7f:c5:c0:22:9c:35:f2:79:16:f2:bc:77:be:e5:
                    17:d2:e1:d7:98:75:89:8c:57:ab:88:2d:07:56:e9:
                    24:e2:aa:6d:70:47:8e:92:fe:45:85:74:4f:a1:fb:
                    98:0d:45:75:fb:a9:39:81:ae:32:56:88:7c:d1:64:
                    14:12:4f:de:29:e5:cb:c3:79:00:cd:84:d2:03:66:
                    94:9f:47:ac:6a:c1:17:a8:30:51:98:5d:ab:6f:e5:
                    f0:5b:59:72:bb:48:a0:dd:9b:a8:3a:e6:86:51:52:
                    52:d6:b8:09:9f:4e:7a:3a:bc:b3:4d:95:0e:e0:b8:
                    7f:08:e7:d7:a5:73:50:c9:f7:58:a2:ff:49:5f:c3:
                    15:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:15:F4:69:16:83:64:BA:85:C9:E3:A5:E7:FB:8E:4F:5E:0A:8E:E5
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c53cbb27-7e45-49f4-9adf-57d16908e035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:cc:e4:b0:14:a3:db:d7:26:10:56:d4:c9:3a:cf:aa:47:57:
         b1:b9:d7:70:74:84:8e:a5:52:76:7e:99:56:a4:94:2a:f2:9f:
         9d:1f:77:01:7c:9b:c6:7e:cb:4a:a3:75:b3:a0:10:5c:30:e4:
         23:12:f4:2f:bb:89:06:30:64:7a:c6:33:a4:a6:47:29:04:2f:
         8b:50:d2:90:11:49:c8:76:9f:c5:6d:40:fc:30:92:0e:0e:7a:
         87:e9:d9:45:78:6b:9b:54:6e:a0:f7:68:70:2a:58:b3:d0:b8:
         5f:c1:9e:a5:bb:05:63:eb:d7:0a:f8:6b:a2:38:83:ca:95:4c:
         96:92:18:90:03:5a:62:6b:96:ab:db:d4:77:9b:96:8a:7d:4d:
         50:69:5d:36:2c:f2:70:e0:81:c3:30:6d:03:7d:2a:52:93:e8:
         76:b2:0d:2a:4e:fa:c6:5b:5f:a7:1f:1b:90:86:cb:e2:4d:c9:
         d4:18:db:23:48:9f:73:b0:1d:e8:be:37:6d:6d:4f:70:c8:74:
         9c:f9:de:0f:cd:dd:a2:69:b5:78:96:6f:6b:ce:04:e0:9e:bf:
         7a:db:42:ca:b4:ef:fe:d6:5d:12:5a:43:d1:58:51:e4:e7:ec:
         18:45:3e:4a:c0:02:5d:48:4c:fd:35:9d:a6:de:63:c6:82:c6:
         9f:2a:de:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----