Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/784cd4ac-d69c-4c6e-9b24-6c93c0cca3d5.roa
File:                     784cd4ac-d69c-4c6e-9b24-6c93c0cca3d5.roa (raw, json)
Hash identifier:          0lmVFmXToJiFniO/vRFFosDu3kfx2ueEXqiF4MbyJBE=
Subject key identifier:   79:49:95:4B:08:37:89:D6:07:2E:FB:B2:D7:70:BF:16:10:7E:F9:2A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0512E02D02A43ED52426162E816853AB5AD6D970
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/784cd4ac-d69c-4c6e-9b24-6c93c0cca3d5.roa
Signing time:             Fri 24 Mar 2023 00:00:00 +0000
ROA not before:           Fri 24 Mar 2023 00:00:00 +0000
ROA not after:            Mon 27 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:12:e0:2d:02:a4:3e:d5:24:26:16:2e:81:68:53:ab:5a:d6:d9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 24 00:00:00 2023 GMT
            Not After : Mar 27 23:59:59 2023 GMT
        Subject: serialNumber=fbad441e607c7ac1ca34012c4a6daa8fc705c26517533c0e3f94dbe9f9b3cda8, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f2:13:7a:e8:74:c7:2a:8e:0a:8c:f4:20:86:
                    72:04:60:03:83:d8:bd:76:0f:9f:aa:36:80:d1:a8:
                    f6:48:d9:04:c4:87:bf:1b:d9:08:75:c4:ff:84:15:
                    fb:2c:bc:33:2d:17:8d:0a:d4:32:cc:0d:ae:05:bb:
                    94:c8:5d:a3:09:01:40:f3:45:2f:14:d6:1d:ef:15:
                    09:c6:33:7a:b2:4e:9a:e8:10:4d:c1:9a:61:67:67:
                    52:23:f9:4e:b1:ce:ce:34:e4:5d:d4:15:59:d6:ff:
                    be:6b:9c:c8:c0:b2:02:21:ee:01:53:86:71:96:ae:
                    61:db:6b:f7:5e:99:73:a6:70:1a:0f:34:b2:63:14:
                    62:8b:9e:04:e0:38:68:87:06:ba:42:74:81:7d:65:
                    56:c7:73:59:27:9a:6b:2a:ef:2a:11:19:1d:f9:07:
                    bb:1d:98:60:80:97:ca:18:be:33:49:f6:1f:55:b1:
                    b2:73:b2:73:5e:ac:15:09:c1:6c:22:46:ae:27:b6:
                    cc:31:ba:ad:03:53:35:7f:e6:74:54:b5:a5:b4:b7:
                    68:0b:f1:4f:5b:8b:78:a7:1a:14:4f:89:8f:20:de:
                    78:2e:25:10:16:99:9a:8c:9d:3e:fb:a0:b6:2c:6c:
                    d1:26:7f:0d:10:af:9d:48:0f:08:33:eb:c8:61:a1:
                    4c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:49:95:4B:08:37:89:D6:07:2E:FB:B2:D7:70:BF:16:10:7E:F9:2A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/784cd4ac-d69c-4c6e-9b24-6c93c0cca3d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:e0:1b:b6:fc:ec:48:98:1a:e6:aa:33:57:6d:9f:e6:dc:ad:
         66:54:2f:27:20:23:13:8d:33:c8:da:03:e9:a4:ee:9d:44:25:
         c3:1b:c9:44:ab:d6:91:9e:82:a3:c2:8d:8a:9b:60:e9:1c:27:
         ee:a1:9f:3c:e1:18:c8:25:1e:d8:ce:67:7f:1f:51:c4:c7:87:
         75:b5:60:cf:7b:03:fa:a9:73:b2:b8:c1:55:1c:84:d7:ca:52:
         90:f2:16:5a:dd:85:f0:87:2f:4f:c1:40:f8:80:5d:af:48:f1:
         e4:5a:a6:c8:7e:42:e4:66:09:d7:c4:6a:82:ca:d6:24:d3:74:
         ab:ee:64:4e:66:d7:e8:73:e4:7b:dc:bc:f7:36:10:34:69:82:
         8c:bb:45:6a:5d:ee:94:32:b2:bb:17:4c:48:89:32:08:c9:f8:
         50:56:24:2e:a5:25:6d:d2:ec:5b:71:04:3b:bc:c8:b1:d5:78:
         30:f2:c7:ad:08:b4:a3:df:22:68:99:00:23:16:5f:8c:b1:1e:
         15:a2:16:19:93:1b:d8:29:eb:72:e8:c8:32:9f:c9:b2:16:b9:
         e1:d1:21:13:2e:26:80:7e:91:8d:f4:ea:20:35:37:11:29:08:
         6d:1d:47:3e:a6:c3:5d:6a:12:60:72:6c:f5:7b:d1:24:ea:7b:
         1c:ce:8c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----