Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/79c818cd-ecef-4d39-acf0-ff9ac5d47fe3.roa
File:                     79c818cd-ecef-4d39-acf0-ff9ac5d47fe3.roa (raw, json)
Hash identifier:          z06aRqGWFUOIQDenKXvTL3VQD+/eU7mbOj0gA2yFfWM=
Subject key identifier:   5A:93:BB:2F:7D:8A:4E:0D:7C:60:7F:74:0E:A2:9B:83:61:3B:5D:FA
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       67F548C5A862A79A5182E306089F6524C7C813A5
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/79c818cd-ecef-4d39-acf0-ff9ac5d47fe3.roa
Signing time:             Sun 09 Apr 2023 00:00:00 +0000
ROA not before:           Sun 09 Apr 2023 00:00:00 +0000
ROA not after:            Wed 12 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f5:48:c5:a8:62:a7:9a:51:82:e3:06:08:9f:65:24:c7:c8:13:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  9 00:00:00 2023 GMT
            Not After : Apr 12 23:59:59 2023 GMT
        Subject: serialNumber=4d8ab2177f9db538fe776ab0ba62cd36a1033bebef7a3f9df7822bb22958a61d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cf:fc:ae:62:f0:8c:25:7d:4f:a2:d0:4e:a4:
                    24:26:57:aa:e4:c8:a2:64:cb:7e:89:dc:93:da:13:
                    f6:32:28:b1:df:37:df:da:cc:bf:f1:6a:70:1e:97:
                    89:bc:2f:78:8f:43:e3:fc:91:eb:23:47:af:68:c2:
                    22:eb:b3:a1:e6:20:26:55:58:f6:7c:86:9e:11:56:
                    90:0e:85:81:bd:48:7a:e3:00:ac:d0:1d:63:a7:d7:
                    75:75:3f:6b:24:3f:67:0d:84:e3:53:38:60:7d:70:
                    8b:f3:6c:2a:38:7c:c5:e2:a6:b0:89:f3:6a:e9:55:
                    6f:e2:bc:3a:07:04:cc:b7:25:6a:07:f7:51:07:e0:
                    13:9e:e1:b8:aa:57:5a:cc:ca:1f:b0:13:95:97:89:
                    ea:58:43:4e:1e:d8:76:60:e9:e9:74:89:d1:9a:fd:
                    69:0c:bb:b8:c8:a8:dc:05:82:84:bc:5c:bf:04:e4:
                    3d:4e:cf:2d:b4:e7:0a:20:d8:50:81:5c:c8:5e:eb:
                    02:90:4d:a8:00:0d:dd:8b:90:15:30:21:b8:86:ed:
                    5f:d2:87:df:b4:d2:8a:51:47:7e:c4:30:41:db:f6:
                    fa:1d:18:78:d4:df:03:61:50:79:d7:ff:ca:2a:e4:
                    d7:fa:ff:d5:e5:dd:b3:c8:09:07:78:b7:09:f5:e1:
                    55:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:93:BB:2F:7D:8A:4E:0D:7C:60:7F:74:0E:A2:9B:83:61:3B:5D:FA
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/79c818cd-ecef-4d39-acf0-ff9ac5d47fe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:9a:7c:70:06:c0:f3:10:de:d7:68:8c:12:32:d9:93:4c:6f:
         f6:48:1d:2b:12:7d:ef:a5:11:63:ba:b1:9b:bc:23:ac:0e:c1:
         e7:79:66:53:8c:f3:f0:10:a7:4a:04:a7:87:47:68:f1:d3:f9:
         df:97:d7:cb:c4:fe:ec:4d:4f:85:fa:be:05:b7:b4:c3:c9:ed:
         1f:5f:25:0d:4a:b8:b9:19:b0:ce:50:24:96:2c:9f:6b:4d:bd:
         51:75:b4:48:7c:a1:83:5f:96:9b:81:1d:67:b2:76:aa:b7:c1:
         e3:ff:99:12:54:76:ec:32:7d:84:46:70:46:ae:8c:05:14:85:
         db:b7:61:04:84:66:07:ed:68:b8:52:1a:0d:9f:73:dc:61:c7:
         99:8d:65:9c:6d:27:b6:c1:8f:7c:b9:b3:7f:26:90:c1:31:98:
         d0:ee:c0:40:f4:f8:a4:85:30:a9:83:26:d9:45:0d:53:65:60:
         71:1d:97:68:5d:67:1e:30:e2:8c:59:07:0a:9d:e4:a8:f1:43:
         44:c4:44:5f:73:d6:e7:03:74:83:b1:40:f1:34:96:f7:f8:6b:
         d4:0b:c2:18:03:7a:f7:5d:2d:24:b9:e9:9d:39:76:9b:59:e1:
         da:f5:e3:4b:91:3a:d0:b0:9f:19:46:85:15:20:6e:19:29:11:
         6a:1f:5a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----