Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3929c9c3-e22b-4dc4-8ba5-5b6b25944f2d.roa
File:                     3929c9c3-e22b-4dc4-8ba5-5b6b25944f2d.roa (raw, json)
Hash identifier:          GW+uyVz/DXgJ+n75nCT4vVo7OE8nior/TOzOL83tuoc=
Subject key identifier:   D6:D3:1C:A2:86:BC:40:22:4E:B7:68:6E:D1:A2:D5:2D:56:FC:4B:AC
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7A85D80A100A6204D6B09F35017CA677D417E0D7
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3929c9c3-e22b-4dc4-8ba5-5b6b25944f2d.roa
Signing time:             Fri 03 Mar 2023 00:00:00 +0000
ROA not before:           Fri 03 Mar 2023 00:00:00 +0000
ROA not after:            Mon 06 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:85:d8:0a:10:0a:62:04:d6:b0:9f:35:01:7c:a6:77:d4:17:e0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  3 00:00:00 2023 GMT
            Not After : Mar  6 23:59:59 2023 GMT
        Subject: serialNumber=30d6ef5fcb6ddde7d48763add4f216f0f8f559279a24449b96e53d389961ebfa, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fe:b5:d5:14:b7:56:13:1f:67:ba:d5:cf:0a:
                    00:57:ba:ee:ef:66:36:ee:52:ac:51:13:cd:2f:38:
                    a2:70:14:bc:fa:4d:55:a5:a1:ca:9a:fe:f9:f1:3f:
                    65:4a:44:e2:46:10:12:21:db:0f:a2:49:99:6e:99:
                    01:7e:87:6b:bf:7b:6a:cc:0d:ee:8e:9c:6e:76:b9:
                    cb:bb:3f:8f:8e:c3:e8:2c:12:26:ae:56:13:46:26:
                    9e:bd:62:57:27:25:cc:10:e1:f5:05:15:22:b9:85:
                    9d:cd:0e:ca:19:6d:7d:bc:bc:1d:41:3f:7b:7d:57:
                    28:5c:ed:b3:78:8a:d7:06:f5:ab:86:51:d3:66:a9:
                    ca:fc:9e:e0:4f:2a:d2:b3:28:ab:2b:36:9c:d7:01:
                    a9:96:54:be:fc:42:53:28:3d:8d:6f:70:b9:f0:aa:
                    25:b9:46:29:7d:0b:1d:65:be:f4:d0:49:ec:23:99:
                    0e:45:c4:7e:15:f9:70:bb:4b:9f:25:8f:c9:4f:06:
                    ba:6a:51:71:60:a1:a9:b4:fe:c4:a2:37:f6:ba:4e:
                    a9:05:22:8e:1e:ef:97:6c:2f:b7:1b:61:16:7e:0a:
                    cb:ab:20:91:64:2b:fd:20:ed:2c:f5:11:b7:25:87:
                    b3:1c:8b:af:58:c5:7c:48:fb:38:cf:5d:a2:04:d4:
                    9e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D3:1C:A2:86:BC:40:22:4E:B7:68:6E:D1:A2:D5:2D:56:FC:4B:AC
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3929c9c3-e22b-4dc4-8ba5-5b6b25944f2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:96:98:3d:48:c9:57:1a:bc:8c:eb:e4:55:95:37:6c:10:21:
         e2:f5:bf:37:60:ce:06:27:fc:9b:2a:47:35:ab:57:13:85:bc:
         9b:b3:bc:d7:25:b3:79:46:a6:ef:21:41:a0:88:89:20:85:27:
         10:cf:cd:b4:e2:95:df:53:a1:f1:0d:10:d5:05:a5:2a:13:22:
         c0:09:24:56:52:4e:f8:0c:64:67:ae:c3:86:9c:64:58:91:c5:
         54:23:83:df:53:f8:7b:f0:ac:cf:99:5b:dc:82:26:71:6a:18:
         f1:ad:02:de:f9:44:09:79:e5:29:bd:f5:e9:69:d5:fc:8c:41:
         12:56:d2:4e:0e:73:88:dd:9a:dc:51:88:b5:15:df:c1:5d:c1:
         12:c7:30:4c:18:a7:26:3b:9e:39:2f:b0:db:25:d4:57:00:37:
         67:a3:d3:95:9a:30:62:4c:19:d2:e0:55:bd:a0:29:98:ac:ef:
         9c:bf:c3:d1:fb:98:3f:28:d6:de:7e:58:84:36:ca:15:eb:71:
         fc:95:86:ff:a4:0f:11:3c:14:f2:bc:73:bd:0b:39:cd:8d:0f:
         7c:d5:70:33:33:a3:c6:8f:4c:ea:9e:a3:72:a4:a7:61:da:1e:
         64:42:81:4c:d5:ec:27:ca:fd:b9:5e:1d:c2:a1:fa:0a:1f:16:
         b4:5a:8b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----