Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d0b81b73-885b-4c3e-9b65-f71a1380f693.roa
File:                     d0b81b73-885b-4c3e-9b65-f71a1380f693.roa (raw, json)
Hash identifier:          8c23IsyiPjlvz1+FgSysPgrMoHsSTd2c1PREty5lwtY=
Subject key identifier:   A1:96:E9:A5:BE:C7:11:97:23:63:40:1E:E7:42:48:2E:2E:74:30:43
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       26F40619070B816D51DEF3BB75583FA0D23D711F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d0b81b73-885b-4c3e-9b65-f71a1380f693.roa
Signing time:             Fri 24 Feb 2023 00:00:00 +0000
ROA not before:           Fri 24 Feb 2023 00:00:00 +0000
ROA not after:            Mon 27 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f4:06:19:07:0b:81:6d:51:de:f3:bb:75:58:3f:a0:d2:3d:71:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 24 00:00:00 2023 GMT
            Not After : Feb 27 23:59:59 2023 GMT
        Subject: serialNumber=43eea102e59561a2c458d5c13e17714970584ccac1f8665d01d401fd29a06f10, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b4:07:a4:3b:98:9d:91:e9:05:01:d0:7c:30:
                    96:4b:45:74:eb:22:77:4e:e8:af:26:8b:39:91:f5:
                    c7:7a:67:4d:88:44:1c:e8:5f:74:a9:5b:52:83:c9:
                    67:c1:40:43:18:7f:a0:68:d2:fb:a3:d0:c8:59:93:
                    8a:8a:cc:a9:8c:af:2f:6d:d5:fa:42:5a:df:e7:b8:
                    35:1e:60:05:7e:98:fe:2a:20:49:95:d8:fb:f9:30:
                    f7:62:31:e1:5d:a1:55:b7:18:4b:18:4e:41:00:d9:
                    0a:ff:38:c7:4f:b1:4b:e5:94:45:7f:25:50:81:cf:
                    98:48:dd:43:34:2b:3c:ad:b9:1f:ca:1e:30:b4:e0:
                    3d:5f:ba:55:47:9b:bc:01:9d:af:58:d8:e4:7a:c8:
                    b2:c5:f9:47:8c:ba:c3:ff:2f:36:27:22:04:ac:68:
                    b6:71:c4:eb:1b:33:32:b5:7d:c5:fc:bd:a0:6e:73:
                    5a:3d:50:d4:a9:27:21:b4:ca:4c:6b:50:f5:79:d1:
                    e8:1a:f0:2b:81:8b:e5:06:c7:45:34:ff:7c:44:29:
                    09:76:db:a1:3a:70:15:9f:01:75:08:0b:a2:fb:6e:
                    a7:f2:2b:43:20:97:fc:0d:1e:d2:8c:23:2e:6d:25:
                    4f:79:61:82:63:1f:74:c0:83:d7:e3:c6:11:0c:89:
                    af:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:96:E9:A5:BE:C7:11:97:23:63:40:1E:E7:42:48:2E:2E:74:30:43
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d0b81b73-885b-4c3e-9b65-f71a1380f693.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:7b:32:4c:89:bc:25:e0:75:4f:19:40:1d:b8:fb:50:4c:46:
         4d:af:15:db:99:df:6d:6b:43:51:1c:23:05:e6:89:98:d4:48:
         58:5b:0e:d1:1d:ff:ce:c3:e9:76:1c:0a:7b:ec:18:ee:e4:85:
         7d:4d:ba:d5:a7:d9:c8:46:a2:f1:f8:89:23:c8:44:37:87:36:
         f4:6b:b3:ec:90:5f:a1:bf:6e:d2:5a:f7:7b:17:fa:79:4f:ef:
         89:aa:ab:47:44:15:7e:f7:59:f3:20:83:f3:8b:b8:3f:33:e4:
         4d:5f:1e:84:c8:88:c1:ac:75:7b:12:86:66:7c:97:f0:82:3b:
         33:3b:7b:8b:ef:19:4a:e3:42:2c:b5:ac:91:e7:cd:66:ce:eb:
         a8:0c:bc:27:c6:2d:37:ad:4a:f7:c1:cd:73:cb:d7:5c:29:b8:
         6a:72:c9:a9:24:be:69:37:5b:bf:c8:5e:57:8b:eb:98:7e:cf:
         b4:35:17:22:3e:8e:3b:3c:33:91:85:88:a9:8a:d8:ac:02:f6:
         45:d9:a0:e5:09:c2:78:a4:9e:f4:c7:06:59:cb:be:1e:78:74:
         d3:0a:5a:9f:47:8c:3c:2c:25:40:5f:e9:44:a0:73:ec:fe:c3:
         a0:12:b3:42:ff:e9:49:9a:2f:a5:d8:91:98:a6:1a:e8:32:fe:
         70:84:2d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----