Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/79fe14ce-b250-4a97-bff2-5c50cd21527e.roa
File:                     79fe14ce-b250-4a97-bff2-5c50cd21527e.roa (raw, json)
Hash identifier:          KioSjRYFiKrJMvBHj0/JC0wZMAwgT47KGJ+pKWdiI2o=
Subject key identifier:   8B:E7:D8:EA:42:67:D8:1D:33:8B:E0:0A:B8:57:B6:B1:37:8D:9F:EB
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       19FB72AD3621ABFFFF113CE8751D1DA48986A496
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/79fe14ce-b250-4a97-bff2-5c50cd21527e.roa
Signing time:             Sun 12 Mar 2023 00:00:00 +0000
ROA not before:           Sun 12 Mar 2023 00:00:00 +0000
ROA not after:            Wed 15 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fb:72:ad:36:21:ab:ff:ff:11:3c:e8:75:1d:1d:a4:89:86:a4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 12 00:00:00 2023 GMT
            Not After : Mar 15 23:59:59 2023 GMT
        Subject: serialNumber=0804dab1f11b4c39a61e8e87a03cad74fb982581981a2f4ff58ea1c8ecb6d89f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f4:50:a8:30:4a:d3:c3:0a:57:1a:1c:c3:e0:
                    11:0f:79:04:2f:14:4a:8e:b5:2f:2b:d6:0d:70:16:
                    4e:7e:6e:ae:8e:09:62:2f:f3:03:d4:86:4f:51:b2:
                    11:bf:c9:05:74:b3:ff:a9:22:85:9f:4d:d6:f6:40:
                    c8:f6:df:9d:6a:b7:d1:cf:ef:30:f2:d5:83:7d:b8:
                    9f:48:9a:3d:ae:b0:90:7c:b3:94:ee:d7:1c:0c:bb:
                    b0:f7:62:2e:f4:bc:36:c5:0b:1b:12:4d:45:06:f5:
                    ab:bd:69:92:30:fa:dc:c5:e5:71:0c:de:2e:99:ed:
                    fc:30:fc:bd:aa:d5:b5:9d:68:98:12:43:fe:63:c6:
                    5f:fb:f9:df:7c:b4:da:f9:78:f7:3c:e0:ed:fd:55:
                    83:bc:a1:bc:05:b6:8e:9d:55:5c:d1:7f:29:ae:82:
                    8e:25:9c:76:c9:7b:91:eb:2c:b3:dc:0d:8a:4f:9d:
                    69:05:f7:08:76:47:84:7c:f3:1a:b7:a8:a2:a4:78:
                    97:57:61:ab:a6:c2:30:36:ef:d8:8c:20:1f:83:60:
                    48:ef:80:f8:e2:38:e0:d5:01:98:26:97:ea:6f:07:
                    25:d0:b8:d4:df:d2:1c:51:91:50:22:98:ac:a5:8e:
                    6b:49:2b:48:c8:2a:74:d6:97:1f:5f:43:4b:89:a4:
                    cb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E7:D8:EA:42:67:D8:1D:33:8B:E0:0A:B8:57:B6:B1:37:8D:9F:EB
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/79fe14ce-b250-4a97-bff2-5c50cd21527e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:fe:e2:01:55:9d:3c:a0:81:4e:bc:16:7c:52:34:fa:b8:05:
         b9:28:ee:89:c1:68:32:1d:4e:de:1b:05:a3:56:f8:bd:77:08:
         88:3e:40:cb:d7:03:b3:23:71:f1:bf:3c:c8:23:7d:6d:ce:fd:
         04:35:6b:9f:fa:c9:37:05:84:58:c6:5c:02:c4:8c:98:5d:89:
         a1:b4:d9:f2:39:1f:51:a9:8b:69:0d:b5:e1:6a:bb:be:3e:94:
         58:4d:b0:e4:e0:56:e7:2e:dc:72:04:96:ee:8e:b2:19:89:50:
         79:3a:45:b9:99:f8:6f:6f:99:13:3e:e7:d6:80:20:42:cd:52:
         4a:23:14:ab:ec:82:71:04:b6:4e:08:95:8f:40:9d:5e:e2:5b:
         30:37:65:cd:31:c5:c6:63:ec:aa:e3:94:06:be:8a:eb:a3:6d:
         25:8d:b6:49:6d:a5:7e:bb:b4:c0:1a:d3:f5:52:28:f0:2e:7b:
         8f:ed:b4:64:58:9c:33:74:76:a0:07:f8:35:b7:4b:d4:3b:6a:
         82:bb:17:ed:8e:be:2b:0b:6e:f0:5b:ed:af:14:26:ce:b3:9d:
         d5:2a:a0:40:cc:57:f2:dd:2b:f2:1d:7a:d1:31:2e:7e:b1:e4:
         8b:6c:e4:03:30:97:05:15:48:f3:b0:66:a9:aa:79:e1:30:ed:
         5f:80:ba:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----