Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/33283a26-7a0d-4fc2-ac89-36d1822f76ae.roa
File:                     33283a26-7a0d-4fc2-ac89-36d1822f76ae.roa (raw, json)
Hash identifier:          MOen6RAHL348rd99Hh9xXXL/k0WFKcV2RgCIGRDA2Ig=
Subject key identifier:   B6:D5:59:E3:E9:79:3E:3F:55:50:E8:BC:69:41:44:F5:F6:C3:BE:55
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0D3A9A2F576D4209E5F2C667517576FE0BB0794A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/33283a26-7a0d-4fc2-ac89-36d1822f76ae.roa
Signing time:             Sun 16 Apr 2023 00:00:00 +0000
ROA not before:           Sun 16 Apr 2023 00:00:00 +0000
ROA not after:            Wed 19 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3a:9a:2f:57:6d:42:09:e5:f2:c6:67:51:75:76:fe:0b:b0:79:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 16 00:00:00 2023 GMT
            Not After : Apr 19 23:59:59 2023 GMT
        Subject: serialNumber=9c3accad3c57695369cb75275a850b4c5a3a76f577c4db7b3aaab479ea54ca03, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:03:22:ea:38:c8:0e:65:65:24:90:b3:fc:4b:
                    f1:fb:42:48:2b:7f:56:79:20:f5:e2:9b:9d:a9:d8:
                    fc:4e:15:3f:6d:8a:1e:10:f1:08:e5:bd:cc:b0:ae:
                    88:37:f9:08:65:8b:6d:93:19:e8:83:32:10:9c:80:
                    70:0b:08:3f:ba:11:75:fc:d0:90:92:3d:b2:c0:d4:
                    8a:9c:48:eb:fc:bf:5b:87:e9:da:04:ef:68:a7:55:
                    0c:38:b6:42:72:33:61:a8:02:d9:f6:c2:35:99:eb:
                    52:34:73:b7:00:20:ba:f4:8c:f1:66:47:6d:3c:81:
                    87:3f:79:f8:46:09:e8:9d:29:50:42:fd:b9:e9:4d:
                    8b:7b:3e:f9:60:9f:eb:ed:fd:7b:28:14:a3:b4:f9:
                    4a:2f:a1:48:ad:00:dd:48:e8:15:7f:97:84:cf:a6:
                    90:bc:24:06:87:ee:b0:56:4a:86:05:04:b0:c7:82:
                    92:6b:bb:13:3c:78:11:72:89:74:8c:00:36:b5:75:
                    82:86:1c:4d:5d:d4:0f:48:f2:57:c3:36:0d:80:9c:
                    a7:b7:e1:93:c4:30:d6:1b:eb:60:c6:b6:79:c7:18:
                    a3:b0:89:40:f8:4e:37:ba:6f:2f:b0:e8:79:fd:c9:
                    cb:19:96:1b:9e:ca:20:5a:fb:58:98:2d:7f:05:46:
                    8e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D5:59:E3:E9:79:3E:3F:55:50:E8:BC:69:41:44:F5:F6:C3:BE:55
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/33283a26-7a0d-4fc2-ac89-36d1822f76ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:b6:d1:25:4e:c8:82:38:e7:fe:ed:47:34:78:1a:24:cd:e9:
         98:5a:a2:21:a6:a0:3d:74:97:83:4e:a9:45:dc:6c:19:8c:80:
         62:95:1e:a0:06:a8:39:cf:a5:d0:2d:34:88:9d:a3:20:93:99:
         fc:9c:35:21:ef:56:4b:b7:78:c5:a6:ba:38:87:2d:02:cd:08:
         3e:ec:93:de:1e:9f:7d:8e:c6:b4:30:0c:1e:4f:26:08:12:f6:
         61:7f:26:d1:91:11:aa:07:ca:f9:51:b5:e9:62:9b:59:7c:85:
         d8:46:0b:ac:8d:f3:5d:01:4f:9b:9e:5a:fb:a4:1c:6d:d5:e1:
         03:32:4e:2a:41:02:d4:f9:3c:fa:d0:f2:ff:54:54:8d:49:23:
         6d:33:95:2d:49:56:14:2a:73:f6:a5:e1:27:20:f2:02:01:a0:
         d9:c1:d9:75:5a:68:d5:a2:42:96:82:ba:27:21:1e:90:cc:72:
         82:6a:e1:7f:d8:be:a6:1b:8b:46:ce:20:55:bd:62:55:2c:73:
         2e:4a:e4:df:3f:ea:fe:8f:77:c1:2e:fb:b3:30:5f:77:55:9f:
         ae:64:92:b2:0c:26:55:6b:c5:a8:e5:a3:38:49:03:ba:21:55:
         73:8b:4e:a4:29:07:cd:05:0b:73:38:ac:0c:06:cc:3b:77:d0:
         eb:1a:67:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----