Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/49bdaba6-3ee1-4273-a6b9-b3a06b27ca6a.roa
File:                     49bdaba6-3ee1-4273-a6b9-b3a06b27ca6a.roa (raw, json)
Hash identifier:          VMERn+87L1W36E/WHIg6vw08NKMKQpw0sFLCCTe2QMs=
Subject key identifier:   3D:5A:80:88:6D:C2:20:C1:C8:AE:6A:D1:D6:7D:F7:36:93:F3:44:9D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       66AA51460DA8FBB841BDB9E24D4D990B2708DAF2
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/49bdaba6-3ee1-4273-a6b9-b3a06b27ca6a.roa
Signing time:             Mon 13 Mar 2023 00:00:00 +0000
ROA not before:           Mon 13 Mar 2023 00:00:00 +0000
ROA not after:            Thu 16 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:aa:51:46:0d:a8:fb:b8:41:bd:b9:e2:4d:4d:99:0b:27:08:da:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 13 00:00:00 2023 GMT
            Not After : Mar 16 23:59:59 2023 GMT
        Subject: serialNumber=50e0c5976747df5b924b9629855b3bc543a980ba51280cc69ee2618302a8f9e4, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c3:ff:5f:9b:63:07:d6:4c:47:ae:62:0e:1d:
                    0b:07:fe:35:37:65:a0:91:3c:96:fc:04:21:49:85:
                    8b:d5:45:ba:e6:3d:8f:a3:df:0a:0d:bd:23:ce:03:
                    24:2d:c6:6b:67:fa:17:61:49:2d:43:d3:6f:a0:cd:
                    69:46:d2:40:ee:7c:58:75:2a:69:26:fb:f3:ec:71:
                    ce:96:86:f3:d2:ce:7f:1d:f2:ba:d7:15:b9:c0:ae:
                    19:ff:42:3f:bb:a1:64:63:1c:9f:2c:d1:74:7e:5f:
                    db:7a:6e:f0:22:d7:e0:cd:ab:20:db:b8:68:67:44:
                    97:24:62:37:32:3c:ed:06:0e:a6:41:8c:0b:1b:ca:
                    c0:cb:98:62:ff:f9:51:16:b3:53:4c:2e:73:43:3f:
                    f5:b0:63:65:15:14:4c:4f:2d:ff:34:ab:78:d9:ba:
                    d5:29:12:6f:5c:a5:3f:cf:ea:a6:b2:70:9d:18:a2:
                    58:01:bf:65:29:45:76:fa:12:c6:1f:94:a6:ab:36:
                    aa:81:09:5b:95:0c:a1:e0:78:db:ab:1f:84:84:77:
                    f2:29:47:67:4b:0f:74:3a:24:28:fb:3d:c0:11:d2:
                    62:b4:ec:21:a0:aa:26:d1:36:c9:8b:0a:7d:7b:04:
                    df:23:37:20:96:c4:26:e2:b8:ef:5d:9f:cb:3a:88:
                    6c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5A:80:88:6D:C2:20:C1:C8:AE:6A:D1:D6:7D:F7:36:93:F3:44:9D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/49bdaba6-3ee1-4273-a6b9-b3a06b27ca6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:8b:14:45:3f:4f:99:59:38:57:e3:fb:77:52:86:a2:13:64:
         72:fc:37:03:17:4f:c8:1a:f1:2a:a8:79:72:ec:59:64:fd:97:
         c5:07:29:e2:21:76:6e:d7:f6:e9:99:50:54:f6:c3:70:cb:17:
         12:b8:16:4d:3f:7f:9a:cf:6c:15:56:04:d1:00:19:a2:38:fe:
         21:98:69:46:7d:ad:dc:1a:07:b2:5b:4d:26:4a:b7:9b:be:b7:
         ba:f9:c6:05:35:ee:3c:e7:4d:1d:3a:b6:37:14:b2:70:e6:98:
         dd:3b:bb:74:0c:56:fe:a7:8e:ed:f9:e4:75:08:e6:4d:2a:19:
         f8:c1:79:27:cc:bd:3e:20:db:5c:fc:ab:c2:8f:79:32:82:20:
         61:0e:27:c7:90:34:33:a8:63:60:80:78:be:86:9d:01:b6:0d:
         1b:d4:10:65:bb:90:59:02:4b:35:e2:4e:99:2a:76:e9:81:af:
         f3:21:84:03:75:3d:3b:9e:d1:a4:a9:58:d8:2d:bb:3b:c5:d6:
         e5:cc:c7:9d:a8:a0:a1:a0:a7:63:77:4b:b4:de:10:e2:9f:ff:
         8a:02:0f:75:67:e1:b4:f6:a3:6d:e6:a5:f2:50:95:ef:8d:c5:
         3c:3f:9b:d4:b2:f5:ac:d0:0f:19:b0:77:a4:c1:50:17:ab:6b:
         98:c8:aa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----