Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f0806f80-d171-40f0-a79b-cd26d9bd3958.roa
File:                     f0806f80-d171-40f0-a79b-cd26d9bd3958.roa (raw, json)
Hash identifier:          K1mHZF2Dg3W7fb5ftEWRFTtGMfKxN9rLDse+kO0vcmo=
Subject key identifier:   73:26:DA:11:6E:54:42:06:F8:1D:03:DB:FC:9B:D2:D5:27:65:F7:8C
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       13668BB504FA99FF09A824153E4000751A664822
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f0806f80-d171-40f0-a79b-cd26d9bd3958.roa
Signing time:             Thu 27 Apr 2023 00:00:00 +0000
ROA not before:           Thu 27 Apr 2023 00:00:00 +0000
ROA not after:            Sun 30 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:66:8b:b5:04:fa:99:ff:09:a8:24:15:3e:40:00:75:1a:66:48:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 27 00:00:00 2023 GMT
            Not After : Apr 30 23:59:59 2023 GMT
        Subject: serialNumber=154f3bea8c00c74c8381a25555280546682fb19a80bbdba7bf2bed9eb5e4d364, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:29:f5:3f:5e:f4:7a:b0:6c:de:62:77:99:49:
                    38:f3:b3:fe:99:8e:1b:e4:bb:0b:49:2f:32:9a:1d:
                    fc:4f:3d:69:de:1b:03:4b:c4:36:56:24:00:2b:17:
                    4d:14:be:37:5d:17:27:54:ed:86:04:00:a1:5c:23:
                    30:e7:36:bb:35:bd:f5:66:e3:7e:dd:87:4d:19:f3:
                    44:d3:02:6d:7a:7a:34:cb:6b:20:df:8b:38:11:3b:
                    80:b0:5d:7d:41:6e:1f:42:9f:83:b4:a8:dc:1f:d8:
                    05:4d:a3:1c:4e:de:68:47:a3:42:43:49:50:35:8d:
                    d6:bc:70:e0:50:d4:80:a2:00:c8:bf:1a:a1:aa:25:
                    3f:80:09:56:f8:03:a6:1f:3d:d0:c9:0a:00:46:71:
                    bb:cc:a3:59:47:21:87:91:61:22:17:50:9d:55:03:
                    b9:97:b3:39:17:f2:39:a7:8c:d6:d5:9d:17:d0:93:
                    a2:64:f4:fb:4e:3d:58:06:fa:07:b0:dd:4b:6b:6c:
                    4a:28:3a:10:b2:12:6d:26:ce:17:b6:8a:1b:ed:a6:
                    9a:09:8e:7b:64:9d:e4:1e:0f:e9:f3:25:0b:16:ab:
                    e1:29:b5:0f:3d:ff:0e:32:38:62:d6:ec:88:16:e1:
                    71:34:3c:00:04:2e:32:ae:79:50:0a:33:a9:25:0a:
                    32:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:26:DA:11:6E:54:42:06:F8:1D:03:DB:FC:9B:D2:D5:27:65:F7:8C
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f0806f80-d171-40f0-a79b-cd26d9bd3958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:44:9c:19:4e:d2:37:6f:bb:e8:01:85:7b:18:26:cb:31:4f:
         3d:ce:14:c0:be:e2:13:b2:11:3d:d1:02:5c:8a:88:01:d5:bb:
         1c:ba:20:b1:d5:a7:95:57:c1:75:06:12:91:66:a8:de:60:4b:
         84:95:d4:3d:4d:87:ea:31:81:87:6b:c1:d0:0f:0c:18:f6:b7:
         08:b8:41:80:ea:9c:69:0c:e2:f0:db:60:c9:49:2a:ed:f5:ee:
         7f:72:67:1b:10:4f:28:b2:ea:94:47:3d:d9:84:69:39:3f:a3:
         d3:23:63:02:73:7b:0a:2c:99:4d:f8:77:cd:ce:11:d9:05:f9:
         44:3d:ed:21:81:41:c3:64:0a:e6:8a:f8:36:d8:fe:43:f8:6c:
         4d:31:b0:8f:03:43:43:cf:e5:9d:0b:b7:29:14:69:50:9c:6a:
         2c:13:e1:2c:09:13:d4:2c:fa:a2:53:9b:42:90:54:0e:b3:03:
         76:92:25:10:2c:16:aa:5b:66:2f:79:0b:a3:a1:50:22:bc:a1:
         4b:78:47:58:ac:d3:d4:d2:e6:87:d5:d3:f4:8d:fb:20:f4:4f:
         12:30:c1:e9:5c:7b:f2:35:b0:42:c4:32:27:c5:a0:68:62:db:
         3f:e8:ff:04:52:15:5c:00:74:e7:ba:71:44:88:dc:06:8c:0a:
         b3:2d:01:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----