Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/29be2f99-72be-4e7b-aec6-4c494d204cf3.roa
File:                     29be2f99-72be-4e7b-aec6-4c494d204cf3.roa (raw, json)
Hash identifier:          7B5Ogm0cYXI11sJVUlM3kwSEyNr4G1J/cDCVTmHBDy4=
Subject key identifier:   47:EF:A7:3E:98:93:B9:8C:FE:84:2B:7D:87:D3:B5:9F:C4:D0:78:1D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5C73FC5B5663CD0D58202D9BBB8DE2A82B10645A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/29be2f99-72be-4e7b-aec6-4c494d204cf3.roa
Signing time:             Sun 05 Mar 2023 00:00:00 +0000
ROA not before:           Sun 05 Mar 2023 00:00:00 +0000
ROA not after:            Wed 08 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:73:fc:5b:56:63:cd:0d:58:20:2d:9b:bb:8d:e2:a8:2b:10:64:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  5 00:00:00 2023 GMT
            Not After : Mar  8 23:59:59 2023 GMT
        Subject: serialNumber=278647043e891cba020ab162fcbe5c4cb1631b1dfea6dc2021260a6bbf95d9f2, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c2:87:98:be:a6:1c:fc:14:af:7a:2e:09:dd:
                    07:26:b2:37:b1:bc:fe:e0:28:16:f2:a6:c0:d7:41:
                    9c:54:cb:9e:11:1d:12:c6:31:dc:98:85:d2:c4:f8:
                    4e:27:bd:cb:d0:d2:8e:7a:88:7d:fc:35:5b:cf:db:
                    63:fb:81:86:7f:89:1f:43:54:98:1f:c1:2f:82:2d:
                    ec:2c:49:f4:8c:88:65:37:3b:b8:24:a9:b5:14:ef:
                    3c:71:97:2d:2a:e9:a5:c8:e5:64:24:f1:d8:1a:7f:
                    b4:f7:6e:29:e5:b2:76:fb:0d:c3:bc:ab:ee:17:58:
                    c5:12:28:17:ba:3f:db:3a:32:1e:aa:be:94:f7:69:
                    a2:c5:36:b8:db:97:6e:9b:89:eb:7f:9b:29:9a:43:
                    0f:39:04:a9:d5:58:b1:a9:62:ad:2f:db:73:3e:7a:
                    89:7a:ef:78:f9:e3:17:90:8c:e2:3b:10:e8:c0:2c:
                    46:dd:ff:c9:07:40:c1:1d:e4:b0:4f:98:a2:79:53:
                    bb:0d:df:8a:1f:c0:cf:f9:8d:80:c8:f9:e2:66:be:
                    33:6a:26:70:d1:f8:d4:1b:43:c8:88:a8:42:1a:8c:
                    63:08:42:39:a4:07:d3:df:53:53:68:56:c6:fa:25:
                    fb:11:3c:3f:ba:f1:02:8b:ef:ae:8c:4f:53:30:1d:
                    16:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EF:A7:3E:98:93:B9:8C:FE:84:2B:7D:87:D3:B5:9F:C4:D0:78:1D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/29be2f99-72be-4e7b-aec6-4c494d204cf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:92:ea:38:95:9e:84:e2:de:a6:0e:b6:5f:c1:27:be:e6:e2:
         d2:42:71:01:1b:c6:6f:5e:e2:ff:e8:44:50:dc:13:f6:d2:45:
         51:b6:49:df:e8:ed:bb:b0:87:8d:ab:a7:dc:18:b1:ea:73:7b:
         6a:cd:6e:58:e9:33:a7:08:ad:dc:2c:ce:a8:e3:e9:c7:29:15:
         57:a4:6b:f5:6a:4c:da:df:52:f8:8e:38:f0:f7:f1:7b:4f:01:
         a0:39:7e:f5:d6:7b:96:2f:93:ef:a3:e0:df:89:f7:c4:76:5a:
         74:af:ae:fc:a9:d1:30:6b:da:c8:d5:f6:d0:dc:51:1e:03:f8:
         25:77:54:c8:25:9e:45:7b:e8:61:ac:02:cc:2b:87:33:a2:05:
         3e:cc:6b:57:4d:34:18:93:6a:d6:a7:62:ef:55:44:fc:74:2a:
         d6:d2:0f:93:73:33:47:3a:f1:60:3d:2e:7e:23:77:4e:b5:3a:
         07:da:c2:2a:f0:b9:99:36:a5:16:f8:60:7d:af:71:1b:08:15:
         c4:fe:fc:cf:04:7d:6d:48:ca:7b:77:96:f7:14:0d:2a:c3:bc:
         b6:37:b9:fa:12:f6:d3:30:10:1b:af:d8:23:ff:3f:da:f3:bd:
         af:79:4d:69:e2:c0:af:bf:60:be:19:2b:b8:70:6a:14:d5:9a:
         c8:c6:ce:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----