Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/24d0af1e-eec3-4793-a08f-3acbd5dc7c3d.roa
File:                     24d0af1e-eec3-4793-a08f-3acbd5dc7c3d.roa (raw, json)
Hash identifier:          Yob4tK7XIQrul1VocjJRbNrjP0V8f0b2AuNjDBjXu0M=
Subject key identifier:   0A:C5:09:6B:D0:F2:13:27:B0:2C:1D:BB:8A:7A:85:E9:2F:41:D9:AE
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7589D0D37B6AC1C5FEC4C9D5F79337D70914FEF1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/24d0af1e-eec3-4793-a08f-3acbd5dc7c3d.roa
Signing time:             Sun 09 Apr 2023 00:00:00 +0000
ROA not before:           Sun 09 Apr 2023 00:00:00 +0000
ROA not after:            Wed 12 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:89:d0:d3:7b:6a:c1:c5:fe:c4:c9:d5:f7:93:37:d7:09:14:fe:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  9 00:00:00 2023 GMT
            Not After : Apr 12 23:59:59 2023 GMT
        Subject: serialNumber=fafa9f93f8ef247394e05a571b8592af67d63c3ed8a38d1f0c702acb7728bd30, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d7:80:07:8c:1d:f6:98:7d:1d:dc:a0:00:ef:
                    62:88:75:bd:8b:4e:69:ba:37:70:2d:7d:67:db:f7:
                    65:f8:e6:bf:3c:3c:9c:95:65:08:45:2a:f2:69:0d:
                    64:da:ed:d5:28:b9:ec:65:8a:7e:30:08:d5:2d:6b:
                    f0:9a:33:d0:b6:52:c5:f2:db:a1:a4:74:d6:61:26:
                    49:ff:2d:ea:90:0c:c1:52:c9:44:7a:1e:fd:22:18:
                    e2:4d:77:d5:15:9b:b3:df:76:3e:f8:ef:e1:7e:0e:
                    98:53:90:9c:25:d6:8c:52:81:43:2c:a8:00:9c:e9:
                    2e:a1:9d:dc:73:7d:f4:f9:38:e0:c3:66:08:fd:ad:
                    fa:0b:df:07:6a:bc:d2:a3:34:5a:49:69:89:91:72:
                    6d:d0:24:11:98:fc:11:1b:4e:ea:87:d3:9b:55:77:
                    0f:5a:2c:73:18:29:b5:65:70:d2:c3:36:1e:40:8e:
                    47:1d:47:f9:71:0c:50:c6:0c:2b:67:c9:4e:23:71:
                    01:ed:b6:df:b2:01:71:5a:b6:1a:ab:43:61:a6:9e:
                    b1:32:0d:83:8a:56:d4:c1:8b:da:32:1d:3e:20:e1:
                    cc:7c:46:42:17:07:06:3d:cd:60:ae:16:69:1f:31:
                    d9:44:64:5b:42:d0:9b:af:26:61:03:be:eb:0a:9d:
                    b3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C5:09:6B:D0:F2:13:27:B0:2C:1D:BB:8A:7A:85:E9:2F:41:D9:AE
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/24d0af1e-eec3-4793-a08f-3acbd5dc7c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:d8:95:04:1d:fb:e8:28:72:00:3c:5c:dc:3f:48:2f:f7:5b:
         df:57:ff:aa:20:ec:0c:a5:96:8a:ea:06:31:56:c2:29:e6:7e:
         ce:fc:8d:b4:26:24:c8:64:d6:f5:a2:14:15:1e:15:20:cf:43:
         d5:41:0b:be:f9:45:42:a2:3f:1d:9b:be:25:48:9e:f3:f0:c3:
         b1:f5:60:b6:4b:d7:a1:e2:ba:29:45:ea:00:4f:44:66:b7:53:
         0f:64:03:07:c0:1f:19:71:0e:30:38:08:db:66:61:fe:05:e4:
         d9:dc:f7:0a:a4:01:0c:ab:a8:79:9f:73:dd:00:55:15:34:ee:
         65:07:7b:75:61:b9:6a:15:0d:cb:ca:73:ee:64:6e:8c:06:83:
         1e:a8:ed:0e:0b:e9:62:1a:46:97:04:9b:c8:f9:7b:10:ec:76:
         e5:55:33:a9:a6:f8:41:65:a6:5c:b8:ac:2e:db:a9:aa:eb:21:
         66:a1:01:44:4b:4f:76:84:b7:71:26:4d:05:8b:3d:47:94:00:
         43:9f:9c:f8:1c:1d:7f:56:cc:9f:c5:f2:d2:3d:8c:23:b1:d7:
         a0:a5:e2:50:47:5a:df:4d:65:1d:44:66:e2:36:97:fc:8e:cc:
         65:7e:05:dd:0f:f9:35:3c:e8:24:a9:5c:ad:9a:5e:89:f0:d8:
         e1:89:bc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----