Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3031e458-9dab-4efb-b3f2-d159f13b8c84.roa
File:                     3031e458-9dab-4efb-b3f2-d159f13b8c84.roa (raw, json)
Hash identifier:          ox141+J9f0le08Y5Va+Co9DGj2aCiCdCOGaxPpqsJXo=
Subject key identifier:   D9:94:8C:F9:0B:9D:AC:5A:5A:FD:04:41:A5:BB:D0:B9:48:03:C1:7F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       11BD17EE4A985F0AA067FBC0ACBF5AAB1EB87A42
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3031e458-9dab-4efb-b3f2-d159f13b8c84.roa
Signing time:             Sun 02 Apr 2023 00:00:00 +0000
ROA not before:           Sun 02 Apr 2023 00:00:00 +0000
ROA not after:            Wed 05 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:bd:17:ee:4a:98:5f:0a:a0:67:fb:c0:ac:bf:5a:ab:1e:b8:7a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  2 00:00:00 2023 GMT
            Not After : Apr  5 23:59:59 2023 GMT
        Subject: serialNumber=a653db18ac275b9c06e79fbe1305063ec3bcb840bb31720a2b24fac5931df3de, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:06:99:f3:e1:6d:e5:03:2a:96:b1:80:fc:5a:
                    92:9d:7e:42:fb:3a:59:03:6d:e8:8e:7b:8c:8a:c8:
                    2c:3c:09:1e:c7:29:12:ca:98:cd:a1:5b:32:82:05:
                    ca:fe:c5:00:aa:a2:ef:aa:51:c3:50:81:97:8b:d7:
                    8c:ac:32:1f:0a:b0:e3:7e:f3:6f:d6:74:3f:dd:9f:
                    97:d1:9a:e0:d0:6f:7d:b3:3e:82:bf:f4:72:17:31:
                    ea:dc:9b:1f:e8:10:16:7d:94:f2:38:ad:43:58:51:
                    e7:a4:95:ae:5d:bd:18:a4:b6:e7:68:a1:1c:08:06:
                    f3:9a:de:6a:92:6f:fd:f7:15:17:a5:ae:c5:ac:6f:
                    8e:69:b4:7d:37:ed:96:f0:8b:49:36:31:d1:97:ae:
                    04:7f:6e:07:ff:0e:b7:60:f6:a5:23:03:ca:4f:7f:
                    3a:eb:bc:ae:bf:c6:83:de:d3:05:39:11:e8:ea:d1:
                    dd:49:3f:c4:bc:26:56:99:84:4a:57:f5:35:64:08:
                    16:73:56:e6:98:fa:78:72:84:9b:b2:8d:43:4a:32:
                    54:1f:92:3b:59:40:d1:2e:b8:35:bc:ff:f5:9c:ca:
                    ae:7e:5a:25:a9:03:c1:33:57:35:9f:93:63:17:0d:
                    9c:f7:6b:4c:02:98:b6:61:11:3c:98:af:b4:18:9f:
                    67:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:94:8C:F9:0B:9D:AC:5A:5A:FD:04:41:A5:BB:D0:B9:48:03:C1:7F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3031e458-9dab-4efb-b3f2-d159f13b8c84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:4c:63:25:49:30:ad:b4:bb:ec:d0:4d:28:a4:a4:6c:62:06:
         27:78:dd:a0:e0:c5:36:4c:9e:5c:f5:3b:ee:60:41:0c:5e:db:
         3b:d6:f9:d8:d1:bd:7b:f3:eb:4c:44:80:19:87:a7:80:8e:e4:
         a7:04:a8:b8:7f:c6:97:00:4f:61:9f:aa:49:b1:eb:78:92:67:
         4f:15:a9:0d:b7:7a:1d:34:b9:b9:63:c7:50:16:0f:0f:2f:56:
         58:76:f6:66:5d:63:48:10:5e:8f:f8:16:d6:e0:1c:19:7a:a2:
         dc:28:31:3d:94:15:f3:03:04:69:62:4e:cd:a1:02:61:8c:23:
         cf:2c:8e:83:e9:c8:9c:73:36:5f:de:c3:c7:c3:00:b0:75:ca:
         0b:5c:c4:79:37:fe:f9:91:b9:2a:51:4e:69:7f:74:1a:ab:b5:
         90:58:b4:3b:6a:13:04:03:a9:c6:d0:08:7e:ee:7b:98:70:ff:
         c1:12:13:0e:e5:df:f1:6d:b4:0b:6b:97:bb:3f:30:9a:09:2a:
         35:ec:87:4d:aa:82:ff:ae:a6:63:54:c9:74:8f:11:bb:54:13:
         6f:40:6b:16:e8:93:24:ff:fe:f9:24:f7:4b:d6:2a:27:c9:eb:
         f0:31:70:d1:15:8f:57:c9:fe:ee:c8:31:b1:f3:a6:dd:e9:ce:
         36:03:28:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----