Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3d67979d-9dec-45f4-9781-1e1e6fb7887a.roa
File:                     3d67979d-9dec-45f4-9781-1e1e6fb7887a.roa (raw, json)
Hash identifier:          GeJtQuIIJlA7sBoDNDwvkU/pNKqg8oozTp2hd9CJ4VU=
Subject key identifier:   D3:BE:B4:55:2B:B9:A2:90:E1:FE:26:0A:B3:F9:A1:34:FF:B5:35:CB
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       36B51EA48EEE25D2014EC81DBBA8DC4057CEAF4A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3d67979d-9dec-45f4-9781-1e1e6fb7887a.roa
Signing time:             Tue 11 Apr 2023 00:00:00 +0000
ROA not before:           Tue 11 Apr 2023 00:00:00 +0000
ROA not after:            Fri 14 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b5:1e:a4:8e:ee:25:d2:01:4e:c8:1d:bb:a8:dc:40:57:ce:af:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 11 00:00:00 2023 GMT
            Not After : Apr 14 23:59:59 2023 GMT
        Subject: serialNumber=1d6ce1cea2593ce34e8b891a7772944330701139c30986b2781ee84e5c31ea8d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:e5:4f:cb:15:a9:c3:0d:11:7e:d6:d4:2d:
                    ea:91:a1:61:00:73:cd:19:17:54:3b:23:48:33:be:
                    be:43:65:61:77:f5:cf:0b:2b:7d:16:39:51:88:1d:
                    a7:b6:e5:dc:18:ab:3f:8f:47:10:99:e1:7e:04:00:
                    01:b8:67:20:f6:dc:38:5b:73:39:72:8a:20:7e:c0:
                    af:24:44:51:83:11:49:36:40:8d:9c:a7:9d:2f:8a:
                    83:97:58:2c:72:18:b1:9d:f1:ab:27:f5:68:df:a0:
                    a2:a0:c1:a4:c6:7e:82:df:91:0f:9f:af:5d:18:9c:
                    6d:91:c8:4a:a3:bc:38:9c:83:e8:d0:43:7c:e1:1b:
                    c8:cb:86:50:c8:1d:05:a1:b5:6b:b5:b9:cb:e4:85:
                    0d:60:b8:02:08:d3:0f:2d:19:79:27:19:c5:b3:d1:
                    e0:22:c5:cf:20:68:22:58:ce:20:3d:e3:8a:fc:5e:
                    29:f6:c3:39:11:70:a4:e4:6f:e7:09:a6:b2:3a:19:
                    55:24:c7:7e:53:09:65:c1:a2:37:53:9e:df:8a:77:
                    8d:4c:1d:92:7e:48:51:71:ba:28:06:2d:cc:56:5a:
                    f0:40:79:ef:77:ab:09:b1:29:ed:6c:54:40:fa:5b:
                    c1:03:17:91:7c:b3:25:d5:67:fe:6d:50:7f:2f:79:
                    f0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BE:B4:55:2B:B9:A2:90:E1:FE:26:0A:B3:F9:A1:34:FF:B5:35:CB
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3d67979d-9dec-45f4-9781-1e1e6fb7887a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:1c:71:2b:49:55:4b:ab:78:4b:b5:5b:88:f2:79:43:c0:29:
         d7:c7:d2:5b:17:90:fc:b5:f6:5a:c7:ef:c5:5b:12:60:8e:38:
         5b:5b:1d:2e:48:b1:fb:6c:7e:ae:aa:22:aa:b6:a1:20:c5:37:
         73:1e:89:1b:21:e8:d7:da:7e:0d:b9:6d:89:90:c4:56:5f:97:
         d8:ea:3c:a1:2b:5f:bd:53:f0:b4:d0:1e:c2:10:75:04:20:3a:
         9e:40:8d:ce:c3:ab:f7:bb:88:56:1f:37:bd:88:b7:c2:c2:b2:
         a6:90:c8:a6:33:87:fb:1f:44:e0:36:2e:22:64:1e:df:02:87:
         67:00:a9:d5:a8:19:9b:56:97:36:75:34:72:c0:3f:55:16:79:
         de:d8:9b:87:c7:22:ab:a1:cc:da:a4:4b:ca:c2:52:a0:d3:55:
         58:78:14:1d:bc:1b:84:79:b6:a4:65:45:ef:9a:08:46:0e:fd:
         d8:fb:0c:6c:77:8b:97:04:3a:98:13:d4:38:3a:b8:dd:bd:e7:
         62:31:2a:9f:a8:1d:24:3f:e1:df:43:2c:59:52:52:49:e8:57:
         19:ef:ed:8b:fa:b1:55:dd:ae:80:e7:d4:6d:0d:c5:ca:ed:b4:
         1e:23:ed:c7:84:b1:eb:05:58:bc:eb:62:31:97:b5:16:60:9c:
         04:fb:33:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----