Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/50d00096-280a-4cd6-8cd8-0abbb39dd285.roa
File:                     50d00096-280a-4cd6-8cd8-0abbb39dd285.roa (raw, json)
Hash identifier:          tjiDp9mU7r11Om78WhB9YDMAq3ct6K8ZAHOwsP+zlKo=
Subject key identifier:   AA:B4:FB:8D:C0:CD:7A:85:8D:AA:12:92:0C:E3:77:CC:05:47:D4:67
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7AFB46BCC8B3C83F2CDE342EA61F664CE61D7B19
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/50d00096-280a-4cd6-8cd8-0abbb39dd285.roa
Signing time:             Tue 14 Mar 2023 00:00:00 +0000
ROA not before:           Tue 14 Mar 2023 00:00:00 +0000
ROA not after:            Fri 17 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fb:46:bc:c8:b3:c8:3f:2c:de:34:2e:a6:1f:66:4c:e6:1d:7b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 14 00:00:00 2023 GMT
            Not After : Mar 17 23:59:59 2023 GMT
        Subject: serialNumber=df58f95ecd4dc3e0260070f4057b3e73b7eed764dd4d5c4441960826143b028e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:2b:e8:56:c5:63:fc:85:5b:56:b1:66:ae:
                    7a:3b:f8:fe:f7:6e:53:28:39:12:09:d9:9f:03:39:
                    87:e3:0f:cf:61:fb:5f:ae:07:e5:53:31:41:ca:76:
                    b9:cf:3a:a1:95:7c:4a:e8:86:79:0f:fb:12:f4:19:
                    6e:20:db:04:73:ad:bd:1b:cb:92:e2:80:0e:12:aa:
                    30:1f:7a:50:5f:d6:1b:f0:37:4f:be:e7:0a:35:fc:
                    e0:93:1d:b9:4e:71:c7:42:85:d8:80:18:0c:2e:6a:
                    6b:31:43:e7:8a:f2:df:8d:d5:12:c5:1c:de:f6:c6:
                    36:9a:8c:80:98:05:5e:65:b8:02:4a:a5:df:b9:c5:
                    69:e1:8d:3d:a3:76:34:0d:c1:30:79:42:04:7a:2f:
                    61:68:b3:a7:c8:a7:0d:ef:da:64:30:a5:5e:7a:cb:
                    49:3d:dc:0c:a6:06:ea:3f:e6:77:34:51:41:59:ba:
                    ca:de:09:77:a0:19:81:52:54:ff:b1:9a:a0:64:82:
                    81:9f:e8:2f:48:20:fa:b1:1f:da:f6:b7:95:10:d5:
                    e0:fe:c8:d6:e6:1a:51:e8:ff:07:b5:7f:cd:3c:f9:
                    4c:3f:79:ab:e6:d5:38:35:4b:4e:f6:17:78:80:36:
                    fc:f4:07:bc:bb:80:d9:f8:45:9f:db:00:62:19:f3:
                    72:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B4:FB:8D:C0:CD:7A:85:8D:AA:12:92:0C:E3:77:CC:05:47:D4:67
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/50d00096-280a-4cd6-8cd8-0abbb39dd285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:4b:31:ad:91:ca:94:d2:78:39:42:8b:6d:76:57:23:79:13:
         a9:27:45:d7:04:2d:27:e1:52:24:21:7e:97:b9:c2:5e:af:42:
         64:88:97:fb:21:3b:4b:89:13:b9:90:0b:22:5b:27:4f:1a:78:
         6a:f8:cc:c8:0a:80:df:95:7f:b0:59:bc:f5:a9:c9:01:bd:c0:
         3a:e1:f0:c6:c8:b6:1a:ea:28:13:92:cc:0b:2b:a4:f4:b6:d2:
         db:a5:a6:8d:e6:6c:a3:ad:bc:20:37:51:b0:7c:28:ce:a6:4f:
         2c:ee:bf:33:e0:44:2f:1f:d0:60:ff:f8:6a:45:b5:9e:d9:c1:
         0c:6a:5f:6c:dd:86:f2:fe:76:c3:f0:8a:7e:08:ff:8b:fb:f1:
         fc:10:d2:b1:2a:25:5a:62:6e:29:dd:3b:76:ee:a1:9c:1d:5b:
         f7:6f:bb:3f:e0:22:76:0c:91:59:38:86:16:76:75:1e:3b:13:
         c0:80:d0:88:de:51:4a:3b:70:4f:06:2f:da:08:1f:68:63:12:
         ab:6c:d7:9f:0c:d5:f9:4c:2f:1d:f9:f8:10:a8:67:7e:1b:77:
         61:dc:b4:22:cb:f8:65:7d:ca:98:aa:09:c7:ac:c9:2d:b1:95:
         b1:3c:cc:de:72:78:86:66:69:7a:82:c5:81:25:ae:5e:28:a4:
         f3:e1:df:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----