Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/12a78838-3b61-4a6e-ba0a-5bc49c9d6c48.roa
File:                     12a78838-3b61-4a6e-ba0a-5bc49c9d6c48.roa (raw, json)
Hash identifier:          fN9goGz3niVUhhBnJSJY1N0ihACkDX3sT9XiIVsF9vg=
Subject key identifier:   32:D4:38:8C:F8:CD:38:E6:93:FD:05:45:EB:BB:C4:16:0E:99:78:E0
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       19CF5384515A80907797AA5A50C529122C5C3AE8
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/12a78838-3b61-4a6e-ba0a-5bc49c9d6c48.roa
Signing time:             Thu 23 Mar 2023 00:00:00 +0000
ROA not before:           Thu 23 Mar 2023 00:00:00 +0000
ROA not after:            Sun 26 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:cf:53:84:51:5a:80:90:77:97:aa:5a:50:c5:29:12:2c:5c:3a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 23 00:00:00 2023 GMT
            Not After : Mar 26 23:59:59 2023 GMT
        Subject: serialNumber=024b3254bbebd475cf960360086d6e65fb7b0b62cfd99dc8824b290f0cf9ddc8, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:93:4f:70:fc:4b:bb:6f:99:08:ea:1e:cd:a5:
                    80:f4:0a:40:69:ca:9e:9a:68:11:f9:e2:03:4e:10:
                    df:d2:ce:8a:91:c7:1a:f4:78:a5:01:32:66:9f:e3:
                    20:81:9b:65:fe:4c:43:21:89:d1:d5:43:f7:54:59:
                    47:43:c2:36:10:8e:96:06:87:1f:f2:71:c1:77:47:
                    43:e6:84:fd:76:00:99:02:7b:2d:b2:f8:cc:28:2e:
                    d9:4e:d3:40:95:c0:b8:13:1c:e3:12:0d:f6:40:52:
                    03:36:cc:14:7c:21:49:70:d2:44:4e:d2:55:0c:39:
                    eb:88:f6:8e:40:b5:24:5c:a9:12:4b:90:1f:82:0d:
                    05:73:04:89:85:68:40:6a:d6:2e:4a:7f:54:60:cf:
                    e3:4b:61:08:13:a5:7d:26:72:eb:16:8b:cc:90:b3:
                    87:a7:9c:b6:e1:8a:3a:f8:cb:66:bb:29:a9:d4:f7:
                    97:72:76:57:9b:6e:8e:b2:10:e2:ac:d1:93:f6:e2:
                    4a:e2:32:d1:22:62:26:a3:77:0e:a7:5b:c5:a8:21:
                    ff:6e:ad:04:bf:ec:ec:8e:84:2d:39:c1:2d:86:a5:
                    d2:ad:ba:fa:f9:c7:c9:78:62:c9:96:f7:9c:49:be:
                    08:ff:da:6d:37:83:d6:1e:48:06:79:ea:6f:4e:58:
                    c2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D4:38:8C:F8:CD:38:E6:93:FD:05:45:EB:BB:C4:16:0E:99:78:E0
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/12a78838-3b61-4a6e-ba0a-5bc49c9d6c48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:c3:b3:70:76:67:13:92:ec:74:da:e5:ff:3b:94:76:19:ed:
         77:b1:6b:f3:41:7c:1b:b2:e9:a0:f1:d7:cf:9b:1c:51:a9:68:
         f7:02:2d:3c:43:02:9b:f5:7c:9a:f5:01:c4:e9:74:5b:20:96:
         5a:ac:2e:02:71:49:83:ad:cf:a6:98:ac:07:a0:46:d5:5b:83:
         66:56:b1:ef:39:49:b3:92:35:48:d5:ca:b0:9f:57:93:c0:6c:
         67:86:42:c3:ab:ac:51:41:7c:2d:c3:a1:2b:dd:ed:fd:d2:bd:
         5a:0c:45:5b:b4:1a:2e:f5:e4:cf:34:32:91:b7:2c:3a:9e:ca:
         12:30:6e:e5:b6:9e:39:f0:78:f1:90:67:3b:00:d7:7e:b6:6b:
         99:e7:a4:02:a6:16:82:5f:13:66:0f:cd:7c:ce:a8:3f:51:85:
         c0:e8:14:65:54:2f:92:d7:9b:a4:94:2a:2d:a0:c8:5e:83:40:
         37:5a:c5:0c:da:ec:8f:94:f2:1d:b4:8b:10:2a:81:f5:ec:a6:
         4e:9d:44:9c:39:04:41:fb:5d:35:80:29:65:df:f1:63:bf:21:
         6a:75:b9:9f:19:a2:cf:74:57:d9:7b:be:b7:9c:8a:d0:05:bb:
         b3:28:86:bd:03:74:fb:6d:31:34:e5:9b:fd:34:a1:47:af:21:
         b0:0b:ae:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----