Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cec7e164-f384-4fa1-93d2-5398ee786806.roa
File:                     cec7e164-f384-4fa1-93d2-5398ee786806.roa (raw, json)
Hash identifier:          dszb0g4futhdjUvoBJs0dhaIlpvh9SSPI6jJ63ke5qI=
Subject key identifier:   A6:00:B5:89:1E:38:69:04:BB:2F:A4:5F:C4:82:C6:31:E3:8F:E7:B7
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2425F54281C9F0531DE6C020365B7E21C09856DA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cec7e164-f384-4fa1-93d2-5398ee786806.roa
Signing time:             Wed 05 Apr 2023 00:00:00 +0000
ROA not before:           Wed 05 Apr 2023 00:00:00 +0000
ROA not after:            Sat 08 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:25:f5:42:81:c9:f0:53:1d:e6:c0:20:36:5b:7e:21:c0:98:56:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  5 00:00:00 2023 GMT
            Not After : Apr  8 23:59:59 2023 GMT
        Subject: serialNumber=72fb1a3df9d226faa1e04805632d492d70c68d313bac969cee1d27f248ccb382, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6d:8c:ee:16:5e:81:b1:81:12:47:53:3f:b9:
                    a8:40:44:76:47:9c:2b:3e:de:d1:39:9c:45:c4:b5:
                    aa:c3:c9:2e:86:93:96:eb:f9:5e:71:ee:a9:95:7c:
                    5e:f7:0f:68:9c:e3:5a:92:e7:5d:56:13:0e:1a:49:
                    ed:54:a7:2d:e7:dd:a5:71:ab:52:40:c8:c9:90:5f:
                    30:b3:9a:94:54:29:f6:f7:54:35:4f:8a:24:ae:d0:
                    e8:65:17:ae:e1:51:86:e4:7a:df:a8:33:82:e7:59:
                    41:8d:bd:2f:6a:fe:ae:ba:96:40:c5:49:c4:70:0b:
                    b8:b9:97:7b:3d:eb:4d:75:9f:ee:43:7f:49:97:4e:
                    79:8e:46:e1:f2:94:5f:a4:50:0b:27:6a:1a:82:f8:
                    cf:21:f8:58:35:ca:1b:35:34:37:7f:a4:58:ee:3f:
                    cf:4d:67:ac:dc:bc:9e:2f:27:d0:c0:03:2b:ee:57:
                    1d:0a:03:a0:78:3f:bd:66:0b:cb:70:a5:1b:4c:93:
                    42:8d:d1:59:d5:f2:bb:c6:f5:3d:f2:6e:d9:68:ba:
                    13:3c:a3:e7:25:81:44:6a:64:1f:36:b9:65:b4:16:
                    b0:0e:f5:73:f3:29:9b:81:4f:a6:da:e8:6f:3f:04:
                    20:94:8a:a4:51:9f:69:4d:64:33:03:2b:e0:d4:08:
                    30:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:00:B5:89:1E:38:69:04:BB:2F:A4:5F:C4:82:C6:31:E3:8F:E7:B7
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cec7e164-f384-4fa1-93d2-5398ee786806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:87:17:f6:14:67:86:80:91:ad:df:21:fc:f4:72:b1:ce:b9:
         ac:00:ac:87:78:0d:52:6b:9d:58:95:9f:e7:63:91:42:7d:ad:
         8c:b6:aa:a9:94:1c:96:71:bb:4f:89:0b:d6:fd:51:42:f6:ca:
         3b:72:06:8d:b2:61:4a:4b:bc:f9:0d:36:51:ff:72:83:79:c7:
         79:ac:e8:34:67:b4:59:aa:d5:91:07:cf:f3:a0:6a:76:4c:70:
         d4:ff:d9:fd:9e:58:d7:9f:80:f5:83:98:cc:c6:78:2a:c4:33:
         a9:99:29:c7:97:2b:1a:78:9e:6a:2c:7d:44:e1:74:27:5e:90:
         7f:a8:59:57:08:3e:48:0c:4b:99:3e:e5:42:a8:ae:1c:b3:44:
         d5:31:96:dd:a7:45:4f:4a:5c:cf:6c:bf:a5:eb:ee:73:de:41:
         58:32:cd:f3:a0:06:9b:ff:de:06:e6:3f:38:90:35:b4:7e:23:
         86:e9:39:d7:76:1d:83:61:01:ae:e6:1e:09:6c:b4:41:75:99:
         74:3e:03:53:b2:29:56:04:1d:39:f2:d0:96:e8:0c:ad:ba:50:
         27:09:69:5a:62:ae:06:cc:8a:e1:26:3d:3b:ce:57:05:70:0e:
         89:88:38:9f:b6:49:99:82:c0:3b:0c:0d:26:62:85:0b:5f:1e:
         53:33:02:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----