Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3e5a2300-8db7-48de-bdd7-8876918e4ccf.roa
File:                     3e5a2300-8db7-48de-bdd7-8876918e4ccf.roa (raw, json)
Hash identifier:          iCZ1fVe0Uk6QH9vloxm110m7Zt7+b8aN9ThzDpCWD7o=
Subject key identifier:   87:65:8A:3A:93:1D:22:32:99:C1:D6:CF:03:76:1B:A2:AB:A0:2B:3A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       494AF81800D41FCD71D49DCC10C51D2C5440CA77
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3e5a2300-8db7-48de-bdd7-8876918e4ccf.roa
Signing time:             Tue 14 Feb 2023 00:00:00 +0000
ROA not before:           Tue 14 Feb 2023 00:00:00 +0000
ROA not after:            Fri 17 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4a:f8:18:00:d4:1f:cd:71:d4:9d:cc:10:c5:1d:2c:54:40:ca:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 14 00:00:00 2023 GMT
            Not After : Feb 17 23:59:59 2023 GMT
        Subject: serialNumber=fb5da1ed2649f11775107591d780325e4945ed64ac51cdc229931216c607b355, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:51:e6:45:80:be:4a:f6:5b:e7:3d:f7:85:
                    e1:f3:97:ce:fc:fd:6e:81:39:cc:02:ac:7f:16:f5:
                    fe:e7:af:c4:98:e8:f3:90:f2:94:f0:3d:af:aa:b9:
                    90:47:60:91:ce:96:10:80:58:cf:7a:1c:b9:89:a2:
                    6d:ef:e4:4c:c6:fa:f0:23:7f:40:89:17:7f:75:f2:
                    c2:71:07:cb:ed:34:c7:22:84:59:1a:64:de:d4:9e:
                    b6:4d:1c:57:9c:0f:38:cc:48:dc:8f:39:3e:7f:8e:
                    02:e0:34:d7:0c:41:98:cd:d6:ce:94:e3:32:02:74:
                    6b:d0:59:5e:15:be:e0:93:72:99:6f:fc:4b:5f:f8:
                    b3:d4:3c:9a:71:b1:48:14:7d:2d:7d:fe:ca:5f:63:
                    40:12:db:d2:49:5f:90:fa:8f:67:22:68:a4:75:41:
                    3a:3d:37:2b:5e:95:2b:c4:02:5e:60:64:90:fb:dd:
                    92:63:b3:6e:81:69:70:bd:0e:31:d4:e8:ab:16:5c:
                    0f:f0:a1:7a:d0:3e:1c:aa:50:f3:7b:fa:9c:63:49:
                    df:23:27:28:93:1a:c4:5f:3a:05:10:6e:51:ff:f6:
                    a3:5f:5c:6b:fb:10:8c:78:c5:7e:06:d0:d0:28:c6:
                    41:37:50:52:8c:ed:17:e2:fb:7d:24:b0:0b:58:0a:
                    71:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:65:8A:3A:93:1D:22:32:99:C1:D6:CF:03:76:1B:A2:AB:A0:2B:3A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3e5a2300-8db7-48de-bdd7-8876918e4ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:90:c7:d9:35:e0:8f:f4:54:fd:9e:5b:51:97:45:95:76:96:
         5c:6d:5b:e8:ae:3e:d3:a8:31:17:28:82:fd:17:c9:a7:2f:86:
         d1:f1:38:44:5d:08:74:95:cc:2b:6c:fa:33:c9:83:f6:69:9b:
         40:b8:73:89:57:b4:39:45:a6:43:2b:cc:e8:97:b6:8f:1e:c0:
         ef:d5:de:d4:84:2b:0e:d2:3e:6c:07:de:7c:ed:06:28:48:35:
         ef:54:60:36:cb:10:79:04:ea:d9:c3:5e:9c:2f:57:23:7d:1d:
         16:24:80:70:62:17:e8:57:95:e9:97:c9:d0:16:8e:55:c5:c0:
         31:5d:50:13:94:c6:79:28:d3:e2:fc:89:4d:be:b3:6c:e7:16:
         e3:51:e0:ce:31:15:cb:ee:8a:d8:c3:aa:fb:b1:da:08:fb:dd:
         79:87:2a:c0:f2:8b:08:20:f9:84:16:78:6a:5f:75:73:2f:38:
         d6:b5:ec:aa:83:da:05:aa:f1:60:91:7a:35:7e:16:fe:7d:b4:
         51:a5:9d:bb:d6:ab:84:3b:f9:49:db:62:35:bf:8f:3b:61:f4:
         7c:0a:df:48:10:2a:c8:95:bf:e8:03:16:14:21:23:ea:71:32:
         76:6d:ce:44:a7:87:04:76:d3:18:96:4f:b2:c2:f2:b0:c9:f6:
         26:d3:6a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----