Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/74bb0cf4-2ee4-4183-abae-46c68a44d071.roa
File:                     74bb0cf4-2ee4-4183-abae-46c68a44d071.roa (raw, json)
Hash identifier:          BMi7VgcsEr+fssKa3Gkf2HzHmEvioaV1AaHUQEF5LZg=
Subject key identifier:   B3:FE:7F:06:D7:4F:CF:E3:B0:C5:22:46:44:70:1C:A8:DF:DB:CA:27
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       79D70A0FCBB8E498F3FC881473AD6E7113E4C981
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/74bb0cf4-2ee4-4183-abae-46c68a44d071.roa
Signing time:             Tue 31 Jan 2023 00:00:00 +0000
ROA not before:           Tue 31 Jan 2023 00:00:00 +0000
ROA not after:            Fri 03 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d7:0a:0f:cb:b8:e4:98:f3:fc:88:14:73:ad:6e:71:13:e4:c9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 31 00:00:00 2023 GMT
            Not After : Feb  3 23:59:59 2023 GMT
        Subject: serialNumber=85dc6fad36db088c9c09a42b8595aa02d7e8045e0954b0e9722237db8ce268ee, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:15:6e:4e:24:30:db:f8:71:0a:8e:fc:94:9a:
                    3c:87:e0:50:b1:3a:62:3e:bf:35:1a:9f:fb:33:53:
                    d0:af:a6:c6:62:72:fb:c6:80:5a:06:40:30:06:6c:
                    cc:cd:90:2a:22:42:16:54:33:f3:90:41:4c:12:3b:
                    6d:4e:79:ac:49:4d:5e:5f:f1:7f:99:4b:b6:f6:ac:
                    ef:c7:3c:1a:15:45:75:08:d3:08:b5:82:43:41:b7:
                    d3:5f:ff:85:27:29:11:dc:0e:e6:ef:75:12:fe:0d:
                    06:4e:34:8d:f0:a8:4e:61:f8:52:80:ea:d0:c1:45:
                    20:26:01:0a:46:aa:96:0d:7a:78:3d:0d:6d:0b:e6:
                    61:31:25:ed:b5:dd:a9:a3:12:59:41:40:bc:fb:61:
                    eb:d4:39:3a:3b:3c:25:0b:ca:46:13:43:61:04:a3:
                    ad:c7:a7:40:f7:35:47:47:ff:4b:42:6b:da:f3:24:
                    4a:45:86:75:6c:43:37:70:d9:3e:c7:ef:76:00:2f:
                    3c:e6:5f:07:d6:a1:98:e6:19:e8:23:6f:5d:a1:d7:
                    85:bc:57:41:7d:dd:49:b6:cb:82:43:f8:ee:4d:4c:
                    f8:f2:05:cd:54:e8:d9:7f:92:10:d8:01:58:db:5d:
                    34:a5:8d:d5:9b:22:e2:21:06:4d:a3:79:81:c6:f5:
                    1b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FE:7F:06:D7:4F:CF:E3:B0:C5:22:46:44:70:1C:A8:DF:DB:CA:27
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/74bb0cf4-2ee4-4183-abae-46c68a44d071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:0e:49:af:e9:a0:89:9f:97:42:eb:20:ca:86:77:70:4d:f6:
         b2:af:70:c1:1e:47:8b:c4:53:f0:d5:cf:ad:80:e3:b6:4f:8f:
         06:8a:da:73:af:7b:a3:7d:68:bc:70:14:d1:e9:9c:00:0f:4d:
         4a:b0:b9:7c:04:dd:5f:12:4a:76:45:aa:aa:cc:e3:f0:12:fa:
         86:7f:2b:f3:4e:86:2d:ed:b4:e5:7e:2b:9f:e9:25:b4:d9:2f:
         aa:a7:54:e5:e5:2a:1a:5b:a9:e2:80:0c:5b:84:b5:0f:5c:01:
         da:8c:1d:39:7b:33:25:db:3a:8c:c7:8b:a6:8b:f2:78:3e:df:
         03:fa:4a:01:0b:2d:70:72:04:8f:e1:86:d7:c8:b9:5f:65:b8:
         3d:fb:7b:04:1c:26:5c:71:39:98:1a:67:58:9a:f1:62:7e:22:
         80:44:a7:f6:fa:9d:33:61:49:7a:30:60:2d:1d:17:24:31:61:
         24:35:c9:c0:ca:bd:d1:f3:2a:40:1f:5f:a2:52:8d:f6:82:86:
         de:3d:33:ef:7f:60:4a:ae:95:54:25:35:c2:2c:4a:65:b2:b0:
         f0:96:24:9f:44:fd:57:e4:1c:98:b2:3b:14:79:f7:e1:c9:08:
         ce:10:a4:e9:c8:73:18:06:cb:9b:1d:b5:4e:23:85:17:1f:3c:
         a0:19:0c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----