Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6a4a99e7-1a07-426b-b485-a4481c71d73b.roa
File:                     6a4a99e7-1a07-426b-b485-a4481c71d73b.roa (raw, json)
Hash identifier:          4bf5J5/n6OqUf/ft7XskC3GXtaYbiqpbCMMJb5K17GQ=
Subject key identifier:   E3:DF:B4:D6:8C:B4:E7:32:63:6F:13:C2:9F:11:51:75:8B:4F:91:B6
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       737BB67F0C675F2FB99445DD461585B2D5916299
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6a4a99e7-1a07-426b-b485-a4481c71d73b.roa
Signing time:             Tue 31 Jan 2023 00:00:00 +0000
ROA not before:           Tue 31 Jan 2023 00:00:00 +0000
ROA not after:            Fri 03 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7b:b6:7f:0c:67:5f:2f:b9:94:45:dd:46:15:85:b2:d5:91:62:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 31 00:00:00 2023 GMT
            Not After : Feb  3 23:59:59 2023 GMT
        Subject: serialNumber=8b7a91e63c68507a6a879ecf43a4a8dbd9b73d9fffa25f9d4a6a2723d515d262, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6d:e1:59:5c:0d:f7:c9:81:c8:98:37:e7:90:
                    6e:83:5e:c9:f1:af:0c:d9:b6:79:f4:b5:55:fb:2e:
                    e2:af:30:36:ce:f8:3d:e9:8d:d6:8d:a8:7e:d4:5e:
                    da:ce:bf:8f:2f:00:35:94:98:6f:2b:f6:3b:81:fb:
                    46:ee:69:ff:5e:2f:1e:4f:9f:9e:c1:82:6e:b7:15:
                    c7:35:58:40:be:13:e3:6e:f9:0b:4b:4b:de:71:bb:
                    84:ee:4b:05:12:72:0e:89:55:ee:c5:32:55:0c:3b:
                    a7:fd:c4:a6:88:b7:fd:fb:33:c0:aa:5c:1f:d1:78:
                    22:dd:9f:a7:f4:4b:e8:70:11:55:8d:a3:14:09:35:
                    ca:d9:76:68:bd:35:31:9e:8f:e7:f5:55:61:1d:73:
                    04:bf:8f:fe:c7:15:15:e0:cf:1c:59:3b:a6:c1:fd:
                    93:d5:8d:e9:3d:2b:c5:bd:c0:19:58:77:ce:d7:03:
                    c4:86:03:4a:ee:43:ac:38:83:47:c4:b3:0d:53:65:
                    a8:c2:36:48:d4:be:d1:42:59:5c:f1:67:3d:ee:03:
                    01:00:4a:ce:ce:f2:8a:f3:bc:c8:9c:21:bf:2a:ff:
                    a3:30:b5:42:a3:eb:56:e7:cc:44:12:0d:59:3a:2d:
                    11:f4:a9:3a:dd:03:a1:24:56:7e:ab:ed:b6:79:bf:
                    d1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DF:B4:D6:8C:B4:E7:32:63:6F:13:C2:9F:11:51:75:8B:4F:91:B6
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6a4a99e7-1a07-426b-b485-a4481c71d73b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:ba:5d:3b:5d:0e:0a:ed:3e:23:6f:13:eb:91:37:c4:97:98:
         d8:a8:f3:5e:f2:d1:23:9f:9e:bf:57:65:54:80:9b:92:e3:43:
         55:d8:5b:4a:f2:3a:2e:8a:f9:1b:67:ba:a7:51:1e:18:b1:71:
         61:c2:66:ae:cb:c6:f7:7d:3b:32:cf:0a:09:7d:fe:3c:3f:82:
         1d:67:e9:68:33:d8:d3:df:46:83:1c:1f:6b:48:5b:b3:a0:73:
         e6:4f:1a:56:7c:dd:74:fb:91:17:c9:62:ab:9c:02:20:26:e0:
         76:28:81:e6:f0:48:f2:f9:2d:5e:e4:b8:ae:14:45:0c:45:f0:
         4c:02:63:3f:62:a8:d0:52:f9:05:40:2e:b4:81:15:67:4e:4a:
         fe:37:10:04:d7:db:7d:1c:f2:cc:47:b0:d2:38:c4:f5:df:89:
         80:ca:7b:fc:44:b9:6b:c5:8b:da:64:c2:5c:01:d0:c4:55:f0:
         79:4e:2c:00:59:6c:1a:13:d5:d2:5d:2a:41:c3:33:ea:6d:42:
         3b:c9:75:9e:09:36:8e:2c:8b:8d:4a:33:fb:42:8d:00:4c:55:
         1b:7d:a6:0d:26:a1:e7:b6:8b:78:37:cb:22:1c:f7:23:07:ea:
         10:28:c7:eb:ab:5f:45:ad:b2:89:f4:dc:88:d3:c5:16:53:38:
         6a:e7:04:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----