Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c7462390-4f3d-437b-bda4-6920e35fc6e5.roa
File:                     c7462390-4f3d-437b-bda4-6920e35fc6e5.roa (raw, json)
Hash identifier:          6+F1C4banEqN3KUY7NavLvH1ohrH0ABo0bE2RluKLzw=
Subject key identifier:   B0:45:25:8E:34:42:F1:8E:5F:D0:82:30:8A:E7:8B:50:5C:97:97:E2
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       723980904C24AE2F5FCF3D4276065A972D96161F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c7462390-4f3d-437b-bda4-6920e35fc6e5.roa
Signing time:             Fri 17 Mar 2023 00:00:00 +0000
ROA not before:           Fri 17 Mar 2023 00:00:00 +0000
ROA not after:            Mon 20 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:39:80:90:4c:24:ae:2f:5f:cf:3d:42:76:06:5a:97:2d:96:16:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 17 00:00:00 2023 GMT
            Not After : Mar 20 23:59:59 2023 GMT
        Subject: serialNumber=2b605f4fd810b0fd8b97c263cdb0f99c7cd51dddce69fc8c001092264f24cc5a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:7b:2e:b3:43:3f:d3:ef:92:e8:4f:07:83:
                    3f:51:79:cb:36:ab:49:47:39:f1:ba:85:3d:d4:6a:
                    f1:65:43:fb:3e:2b:0d:b7:8b:d1:b0:93:3a:d9:17:
                    46:d4:7f:32:79:bd:e4:fa:5a:32:fe:de:84:6f:4b:
                    cc:f8:ed:4d:78:84:a2:05:2a:be:96:72:b1:7b:79:
                    66:50:62:13:ec:0b:d7:ce:6e:b0:cf:74:94:e4:22:
                    20:f8:80:33:56:6f:57:fc:bc:69:dd:2b:1f:6e:ef:
                    dd:93:aa:29:b2:02:3f:34:9d:07:82:c3:2b:f1:eb:
                    4d:b7:ac:4a:4d:fa:f2:22:34:c9:47:a8:34:96:26:
                    b6:e4:b6:9b:07:46:40:ad:b0:49:28:8f:c9:4a:d0:
                    ad:f3:02:ae:7b:f1:67:c7:ce:70:43:e0:47:64:ab:
                    db:2d:12:b1:ce:c2:c2:21:6c:75:85:a7:db:e7:8b:
                    e6:90:7a:a9:1a:d7:f8:5f:1c:d9:df:1e:0b:ba:cf:
                    e5:87:9d:8f:cd:00:00:00:93:8b:57:cb:05:47:1a:
                    66:36:c4:59:99:78:88:4e:68:98:99:3c:57:38:f9:
                    1d:72:8b:ad:40:40:8b:4c:f4:dd:fd:2b:1d:66:97:
                    8f:82:e2:c6:3f:6e:70:b2:ab:9b:3a:b8:01:a9:e1:
                    76:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:45:25:8E:34:42:F1:8E:5F:D0:82:30:8A:E7:8B:50:5C:97:97:E2
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c7462390-4f3d-437b-bda4-6920e35fc6e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:c6:03:75:23:f2:80:b7:5d:07:d9:a4:d6:27:1f:5e:2b:5b:
         f0:be:52:d8:99:7d:35:8a:66:f3:67:8c:df:da:f7:cf:32:9d:
         40:f5:13:c3:5b:7f:9f:89:28:9c:b0:0a:5a:25:cb:0c:24:30:
         2a:d6:b7:f8:a5:8d:37:21:51:fd:1f:92:9f:ff:8e:27:ba:87:
         69:1d:49:a3:9c:27:5e:61:0c:27:c3:c8:df:42:6c:80:63:81:
         51:cf:75:52:62:54:9c:11:d1:d8:94:2e:7d:c2:1d:26:cf:61:
         81:50:bb:5e:b3:e5:ab:c4:e1:73:b1:6c:59:bb:6d:2c:14:b2:
         45:f6:34:a5:51:c9:d0:8c:9e:ec:0f:72:18:8a:be:c0:2b:0b:
         33:ac:e1:4a:90:91:35:3f:73:ae:61:c5:b9:70:c8:5b:e9:5c:
         bf:67:c7:27:46:a0:2e:53:0b:06:4c:ae:cd:9e:90:2a:c0:d7:
         bb:e3:b8:91:87:cb:ca:0b:65:19:2f:7c:6b:55:9c:27:8d:82:
         3c:d0:6b:d7:e8:16:82:c1:59:39:bf:be:ab:21:ad:79:74:f5:
         e3:2d:b8:67:c4:6a:80:55:9e:56:c0:23:96:aa:4f:78:d5:56:
         52:7d:1d:9a:4b:40:aa:ba:4f:e1:57:cd:f9:9f:5f:43:38:97:
         5f:8d:1e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----