Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3968681b-c7ad-4bb2-9c34-6a753fe7af8d.roa
File:                     3968681b-c7ad-4bb2-9c34-6a753fe7af8d.roa (raw, json)
Hash identifier:          q1uvv0ghpBiMWiwiPoYUdWn3BG11BPPVIlMZ7orl+Q4=
Subject key identifier:   7E:89:EF:71:35:AF:39:2E:03:76:80:14:75:18:B2:CB:09:C5:48:18
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       79326CC812F1C519860F67EE7D308C31029E4F89
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3968681b-c7ad-4bb2-9c34-6a753fe7af8d.roa
Signing time:             Sun 12 Mar 2023 00:00:00 +0000
ROA not before:           Sun 12 Mar 2023 00:00:00 +0000
ROA not after:            Wed 15 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:32:6c:c8:12:f1:c5:19:86:0f:67:ee:7d:30:8c:31:02:9e:4f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 12 00:00:00 2023 GMT
            Not After : Mar 15 23:59:59 2023 GMT
        Subject: serialNumber=a74ccbb6c20c34fc8c769fcbb287d5f056a8ab3e27364be3d4eba6c75e6cb42f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:74:7d:5c:9f:f5:89:32:2b:85:7f:11:fb:33:
                    f2:cf:1c:bb:b9:f9:33:3b:3f:96:bb:95:f7:e4:d4:
                    bb:32:ff:97:ec:f6:eb:06:63:38:35:ea:4e:a0:ab:
                    f5:b7:8d:40:b3:b3:e4:b1:c4:cd:c6:5c:5a:2b:51:
                    72:36:74:86:a3:3c:84:c9:a4:0d:0e:4b:04:0c:8d:
                    aa:25:20:56:9f:24:2d:9c:4e:72:b6:be:7a:38:36:
                    5d:83:6b:3e:6c:7e:4d:e9:4d:16:11:e3:7c:ee:7b:
                    39:fb:f0:18:cc:3d:cb:da:a8:50:4a:48:0b:5a:15:
                    99:d2:e4:5d:fe:d7:90:ae:fe:88:ef:bd:ae:bd:d7:
                    50:b9:21:0b:68:8a:19:5e:b9:d3:82:2b:21:f6:11:
                    15:62:d6:74:52:9e:7b:fd:5c:27:42:a7:65:1c:56:
                    ba:3c:83:ca:d9:f2:a2:41:cd:bd:fc:17:1a:fd:f5:
                    2a:12:eb:0d:28:f7:8b:21:6e:1a:14:35:d8:84:14:
                    28:87:69:9d:d3:ef:67:be:9f:cc:f6:6a:ea:9e:7c:
                    9c:ee:6d:03:29:bb:c7:fa:59:e4:76:1a:18:17:9f:
                    b3:be:ac:88:ff:9f:41:d9:10:88:eb:6a:37:eb:c0:
                    23:ba:78:f4:f0:2c:89:18:93:05:94:a4:5e:b7:38:
                    ad:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:89:EF:71:35:AF:39:2E:03:76:80:14:75:18:B2:CB:09:C5:48:18
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3968681b-c7ad-4bb2-9c34-6a753fe7af8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:01:ba:fa:ba:51:82:2d:0b:f2:15:80:ce:ba:3c:ba:03:b2:
         ec:c0:41:b9:95:19:b4:5f:6b:12:ea:f9:d3:7e:6d:e9:1a:0c:
         d0:9b:a8:af:b0:e7:06:4e:f7:0c:09:5b:54:57:50:37:d5:0e:
         2a:36:e6:7b:6c:d4:e4:81:b4:b2:d4:1a:8f:76:6a:c8:ce:8a:
         2b:6d:cd:c4:75:ca:be:64:55:71:0a:63:aa:56:69:fd:34:84:
         18:48:fb:ad:32:0e:8a:dc:cc:2e:7b:72:13:f1:41:6b:8e:aa:
         fd:bd:6a:69:82:17:07:1e:3a:ad:2a:b6:b6:cc:1c:13:b8:05:
         c2:31:5e:fa:c4:de:87:a1:79:bb:27:0e:cf:dc:a6:d4:2d:bd:
         d7:8b:3b:36:ae:f6:24:77:f6:c1:f8:ba:b7:5e:4a:ab:40:0a:
         99:dc:af:ff:fc:2c:48:aa:dd:d0:ba:ba:e6:c9:1a:ed:51:5e:
         cb:cb:9c:df:fc:ae:eb:34:d1:98:6e:ef:a9:aa:ea:b1:0b:8e:
         dc:17:d1:1f:04:a6:11:c2:73:95:22:d2:7b:ca:52:99:8f:58:
         c1:05:60:2d:dc:a4:7f:c0:5c:85:1b:a8:7b:a8:ed:c2:4a:f8:
         3f:e0:b8:5f:95:d4:e8:83:9b:aa:a2:18:9b:f0:ef:69:df:e5:
         b8:49:f1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----