Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/61d444f6-f862-4bf3-ae93-3dfa60b29038.roa
File:                     61d444f6-f862-4bf3-ae93-3dfa60b29038.roa (raw, json)
Hash identifier:          CBepuL0srJt6DaA8IqLIIYTZRB6vHTSUsnc4LJbBB0E=
Subject key identifier:   7E:62:FF:92:C2:37:15:00:A6:41:7C:8D:75:4D:EE:47:D5:DE:A1:75
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0603D69222DD7DAEDA9DC509CFDE7E57DCE52DEB
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/61d444f6-f862-4bf3-ae93-3dfa60b29038.roa
Signing time:             Sun 09 Apr 2023 00:00:00 +0000
ROA not before:           Sun 09 Apr 2023 00:00:00 +0000
ROA not after:            Wed 12 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:03:d6:92:22:dd:7d:ae:da:9d:c5:09:cf:de:7e:57:dc:e5:2d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  9 00:00:00 2023 GMT
            Not After : Apr 12 23:59:59 2023 GMT
        Subject: serialNumber=11894849c81bfd93990e0847eb4fdd6b42acd1f8faec77eb49fa1702219829a7, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:e6:a7:49:1e:3e:85:68:71:09:5f:43:3a:
                    f5:71:17:14:11:ce:56:86:02:ea:ca:73:54:17:a5:
                    2a:12:80:3c:f1:fa:c5:e5:39:20:f7:fe:6a:c7:d3:
                    5f:ac:36:69:63:ad:f7:94:72:f3:98:5f:87:08:66:
                    1f:77:58:68:1e:2b:c2:ee:5e:ce:ea:86:c4:15:f7:
                    70:c4:8b:3e:34:38:1b:47:e4:6c:93:5e:7c:c1:6e:
                    67:ac:dd:5c:e0:b9:ab:6a:b3:64:be:47:88:ef:07:
                    16:72:7e:86:a9:ee:ce:50:ac:3b:9c:1e:33:20:1a:
                    a5:f3:6e:5f:71:1d:93:dd:e0:9a:f2:b8:1e:a1:44:
                    98:68:10:00:be:f1:3a:fd:82:a3:9e:9f:67:c8:5a:
                    c3:b5:1e:e1:28:ac:ac:85:b3:c7:20:46:bd:84:4e:
                    57:83:9f:6b:69:7b:bf:05:b6:7b:2a:b4:9c:5c:1e:
                    5b:49:e0:98:1a:0e:fc:b5:77:a6:de:6f:eb:b9:8b:
                    63:99:1e:f2:8f:b2:19:c1:8c:7d:04:1c:5a:67:a4:
                    c7:16:7e:3d:2b:f9:bf:29:48:49:68:ab:7f:52:eb:
                    2f:8a:be:60:e1:3c:aa:2e:8b:4a:b4:ec:68:44:0c:
                    5d:86:a0:eb:59:22:a8:68:33:d3:76:37:6b:86:20:
                    8a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:62:FF:92:C2:37:15:00:A6:41:7C:8D:75:4D:EE:47:D5:DE:A1:75
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/61d444f6-f862-4bf3-ae93-3dfa60b29038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:f8:b1:91:a4:97:15:19:9b:fa:87:13:6a:45:b8:04:5c:52:
         4c:c7:e4:e0:70:2a:f2:8b:57:15:bd:5d:65:93:00:c2:dd:63:
         84:00:d4:9a:a6:f1:7f:fe:03:d2:41:c7:e8:7e:2b:1d:93:17:
         63:30:39:29:4d:61:d5:d8:37:3c:be:2d:1b:94:d6:49:dc:b8:
         21:16:0e:bb:95:6a:2e:c6:2b:fc:45:4f:cf:e5:44:93:aa:07:
         74:f1:fa:50:70:cc:e4:5c:81:65:a9:49:17:55:28:7d:14:ab:
         05:6e:00:ed:65:68:5e:49:0d:f3:4e:04:20:59:c7:71:83:fd:
         63:c9:7b:1f:92:7d:30:e4:a4:b8:b6:a1:b9:55:b2:c6:ab:58:
         a2:b4:ba:5d:2f:6c:10:1e:2d:fd:ac:9d:96:da:6b:30:8a:1f:
         00:cc:da:92:9a:15:22:26:87:0a:a6:7f:c9:85:32:b4:45:68:
         e1:3a:b2:45:89:e7:a7:5d:0f:4e:56:e3:3b:91:27:02:23:82:
         0a:35:99:d9:83:9c:0b:e7:21:c7:b3:48:2b:2e:3e:b2:14:6a:
         22:99:78:41:4d:54:91:48:66:38:d6:03:57:84:56:a8:09:c0:
         e7:d4:e2:38:2f:6f:fb:1a:01:79:4c:b7:65:3f:80:93:c0:50:
         9f:b8:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----