Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5b6cb24d-2dd2-42ba-bedd-0908047c3bd2.roa
File:                     5b6cb24d-2dd2-42ba-bedd-0908047c3bd2.roa (raw, json)
Hash identifier:          rPi9as5Esv9FNmt9vTQ9WZtYAkE8sin5uDbTeX+ZmL0=
Subject key identifier:   A5:C5:41:85:EC:42:FE:4D:05:1E:EB:EE:C2:CE:68:94:03:EA:71:D1
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       429DE1C61BA5E81827D95866A7456E34E1CCEDF5
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5b6cb24d-2dd2-42ba-bedd-0908047c3bd2.roa
Signing time:             Sat 11 Feb 2023 00:00:00 +0000
ROA not before:           Sat 11 Feb 2023 00:00:00 +0000
ROA not after:            Tue 14 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9d:e1:c6:1b:a5:e8:18:27:d9:58:66:a7:45:6e:34:e1:cc:ed:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 11 00:00:00 2023 GMT
            Not After : Feb 14 23:59:59 2023 GMT
        Subject: serialNumber=9538f6578501fb714d4cc3007dc4fc092a2ceb9092e96c97baee774b15e1ee5b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:93:3f:8f:c1:3d:a0:3d:f6:24:1b:22:36:90:
                    b3:4b:22:da:bf:6f:7b:4a:88:06:4c:eb:d4:0b:40:
                    dd:59:a3:aa:65:4d:1a:d3:6a:10:ca:6a:05:f8:31:
                    63:00:02:3a:63:3e:e0:47:0a:ce:85:22:33:7e:ba:
                    b9:5e:47:3d:be:bb:eb:f1:83:85:b9:f4:c3:58:65:
                    72:ae:7b:da:66:45:b5:d9:5e:65:39:3f:06:61:4a:
                    c3:f3:75:0c:18:0b:7f:c9:1b:68:35:09:fe:d5:41:
                    53:9b:42:1a:fd:53:d7:28:7f:98:f5:0c:cf:36:49:
                    b2:2c:c6:cf:d6:6c:4f:ef:bc:eb:e7:9e:51:96:31:
                    d4:e5:2b:43:7a:00:1e:ea:18:a1:90:f3:87:68:ef:
                    d3:b5:ca:91:0e:ce:91:4d:18:aa:c0:d6:25:78:29:
                    da:4c:12:26:66:08:66:de:90:de:17:07:c7:dc:fb:
                    23:86:37:66:c5:ac:e4:69:8e:6e:a5:b0:fb:63:d4:
                    19:94:dd:90:94:d6:0e:82:17:ff:8d:0a:38:57:29:
                    c4:06:d9:a4:04:10:46:19:b6:7f:f1:33:07:3b:35:
                    43:ef:10:23:9e:92:c3:d9:a9:5c:a6:42:cc:60:d8:
                    91:0c:81:52:9a:3b:34:4d:56:74:69:33:84:4d:8b:
                    f9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C5:41:85:EC:42:FE:4D:05:1E:EB:EE:C2:CE:68:94:03:EA:71:D1
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5b6cb24d-2dd2-42ba-bedd-0908047c3bd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:fb:a9:74:6e:0e:0c:c6:67:d4:b7:86:72:5a:a5:35:f3:e5:
         cc:98:e3:94:ea:d5:2a:15:ac:93:82:52:bf:a2:19:d8:07:72:
         dd:f9:48:f7:16:40:90:92:7a:e8:ac:15:07:f4:96:55:b2:0a:
         a3:f5:72:50:df:d5:5f:bf:61:4d:68:fe:cc:b6:14:2e:2a:b0:
         3b:90:05:22:9f:b0:9d:c5:e5:25:fe:6e:0b:4f:99:87:7d:88:
         58:09:13:7c:44:a6:a4:ca:b2:4e:58:c0:ba:46:7f:5d:a7:d8:
         26:a5:5b:ae:d0:c9:94:e9:b7:cb:77:60:e4:21:42:98:59:aa:
         2c:c2:b8:da:a3:f8:75:fc:ce:53:24:60:0f:a1:8b:cf:7b:9b:
         8f:a9:99:6c:d0:c7:79:48:41:21:b0:40:cc:da:09:e0:f2:8c:
         cb:6a:a2:38:94:f7:9c:1b:fc:20:40:b2:ef:96:ba:50:aa:74:
         d6:a8:0c:61:84:9c:1b:fe:e0:34:2b:b8:b7:30:6d:6a:3e:ab:
         f3:f4:34:39:73:1d:ce:1b:45:2d:43:ec:3f:bd:26:77:82:dc:
         09:c3:2f:a1:4b:72:69:84:98:ba:af:9d:01:86:87:20:f1:48:
         50:b4:de:9b:1e:6e:a7:ae:07:8c:bc:80:83:ff:eb:3c:65:13:
         30:06:7f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----