Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/62711c9b-fc9f-4ba1-99de-eaa6e59f2a65.roa
File:                     62711c9b-fc9f-4ba1-99de-eaa6e59f2a65.roa (raw, json)
Hash identifier:          z/lpzpSFpDQhF/EsNuCV/Irs8utoLmfetve8QlEZZUE=
Subject key identifier:   66:2A:F1:18:45:4C:9A:60:DD:22:C9:94:F0:3B:8D:D2:DD:46:47:8E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3C2A00D263106C104A485AA16DD6E6452A8630A1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/62711c9b-fc9f-4ba1-99de-eaa6e59f2a65.roa
Signing time:             Thu 13 Apr 2023 00:00:00 +0000
ROA not before:           Thu 13 Apr 2023 00:00:00 +0000
ROA not after:            Sun 16 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2a:00:d2:63:10:6c:10:4a:48:5a:a1:6d:d6:e6:45:2a:86:30:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 13 00:00:00 2023 GMT
            Not After : Apr 16 23:59:59 2023 GMT
        Subject: serialNumber=591932451d87c983561bd50b36faf7f7ae7367b275137d418fcebd67dcac4f9b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:65:87:63:c9:94:61:bf:38:bb:2c:5e:4e:3a:
                    71:31:dc:d6:b7:e4:f0:d9:1e:45:a1:f6:9f:b5:f3:
                    c3:78:c5:dc:ae:e0:d1:2b:5e:50:4b:8e:03:00:c3:
                    f9:ff:28:92:b0:c3:a0:fa:9c:5d:30:4d:95:12:b6:
                    d3:ab:38:fb:0b:70:42:6a:36:74:f7:97:45:f6:33:
                    33:a3:b8:62:7c:cb:18:4f:42:7c:8d:da:80:8a:cb:
                    9e:a5:41:7a:42:93:b2:69:51:30:ae:dd:07:13:53:
                    c7:63:d0:18:2a:6c:f8:2a:12:0e:79:4d:ed:e7:4d:
                    68:27:c0:de:b1:1e:f9:6e:00:96:75:fd:df:6b:66:
                    f2:97:68:90:55:ed:a3:43:37:e2:59:ea:fd:55:fd:
                    b6:fd:5e:1e:4e:cc:6b:08:1c:6c:38:01:40:8f:9e:
                    e8:ae:e1:ff:7a:b3:90:75:a7:e1:96:41:b6:19:e9:
                    80:12:e0:c1:30:4d:cf:4b:40:87:a6:ce:0e:e9:09:
                    d9:69:41:c2:b5:61:20:c4:f7:03:b6:aa:4e:94:99:
                    73:73:56:eb:24:81:47:75:cd:72:c5:1c:a3:e0:90:
                    cc:8e:a7:3c:e9:ad:e3:9a:be:cd:51:83:c4:35:a9:
                    43:94:7b:88:f6:bf:17:9f:2a:03:6c:16:07:28:58:
                    12:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2A:F1:18:45:4C:9A:60:DD:22:C9:94:F0:3B:8D:D2:DD:46:47:8E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/62711c9b-fc9f-4ba1-99de-eaa6e59f2a65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:7d:dd:92:b4:d4:30:26:6a:88:39:5f:1d:5a:1e:93:5a:9a:
         1e:df:af:21:ae:68:d9:21:18:cd:b5:48:16:1c:e3:20:3b:9f:
         28:2a:27:01:6d:1b:52:14:81:e1:95:fa:61:87:80:42:56:a7:
         75:27:33:30:87:f0:69:16:37:be:72:a1:a4:7e:44:9a:16:8f:
         f1:7d:e3:32:c3:1d:1c:4e:87:73:87:b6:b5:7f:fb:c9:28:c5:
         9a:41:b4:75:b5:a0:f4:94:90:3f:26:9a:3e:22:fb:c2:81:9f:
         e4:c6:0f:c1:46:b3:ea:a2:d0:4e:58:aa:ff:92:ed:e4:c7:ad:
         7a:f7:d4:69:70:29:ab:96:64:cf:79:01:7b:6d:6e:7c:ba:ee:
         b7:92:c2:88:1d:af:08:f6:3d:31:67:41:be:c8:d1:8f:00:cf:
         7a:b7:5b:a5:a8:7c:07:7b:33:a1:62:ec:38:de:b6:b6:31:c1:
         a0:e2:f9:a4:27:29:bf:5f:73:09:fb:0c:3f:07:6b:12:0a:b8:
         bc:8c:2a:c0:1d:42:45:e9:97:1c:d3:0d:b7:52:c2:28:9c:28:
         6a:56:67:d2:ff:1f:10:d1:5d:5f:03:0d:b3:56:4a:15:43:7f:
         32:e4:f1:34:5f:cb:ea:f6:fa:fd:ea:c7:d7:b4:38:23:7d:83:
         9d:8f:64:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----