Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7a25e724-9241-4819-b3c4-a8c27d5abef3.roa
File:                     7a25e724-9241-4819-b3c4-a8c27d5abef3.roa (raw, json)
Hash identifier:          w46IF+jYD1g/rJm7omG6tYv4CRLiP4U4qg2h45mkAPA=
Subject key identifier:   D7:5E:31:8D:6B:2E:F4:32:D9:E4:B2:7B:FD:1A:90:1F:BD:CB:31:B6
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       749D507A19F7134F0122846C2216EC9E94EC8C7A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7a25e724-9241-4819-b3c4-a8c27d5abef3.roa
Signing time:             Fri 07 Apr 2023 00:00:00 +0000
ROA not before:           Fri 07 Apr 2023 00:00:00 +0000
ROA not after:            Mon 10 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9d:50:7a:19:f7:13:4f:01:22:84:6c:22:16:ec:9e:94:ec:8c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  7 00:00:00 2023 GMT
            Not After : Apr 10 23:59:59 2023 GMT
        Subject: serialNumber=6c72b62debe8354b846aff75dc756c81521414d8f12dcbd982d93c24b8f1006b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:bf:ec:7c:96:b9:38:63:c5:78:aa:9b:ed:
                    28:e6:d1:d9:29:d1:0b:4e:d0:97:7a:a0:79:7b:31:
                    6b:c5:fe:26:13:67:3c:1b:b2:d5:7d:5c:8b:73:22:
                    4a:05:9e:f3:ae:5f:5a:71:96:cf:b8:cd:5f:4e:f2:
                    42:73:c4:62:b9:24:dd:70:42:85:65:95:4f:c6:0a:
                    a1:8a:2c:24:a3:e4:12:30:f4:65:26:7a:36:10:df:
                    95:6f:28:be:40:7a:3c:f4:d7:05:1c:1a:23:55:d1:
                    dd:7f:29:8f:de:5b:95:95:cb:24:ac:91:88:ae:5e:
                    ee:f4:3d:ca:8b:cb:9a:fe:db:f4:75:d8:44:a9:c4:
                    f2:c0:80:75:6e:15:9a:95:e2:4b:d2:d3:7b:56:47:
                    e1:12:de:64:24:7f:35:3e:29:91:9d:03:0a:24:b9:
                    8d:c2:17:a9:92:01:95:ad:3b:64:c0:c0:bb:84:9b:
                    9a:53:d7:fe:01:0f:8b:75:19:c8:82:91:47:34:fb:
                    cc:a2:b0:c7:e8:df:07:d6:f0:75:2e:05:51:28:ca:
                    16:b8:7a:8b:60:63:09:32:26:61:68:90:f2:79:fa:
                    4b:91:eb:90:56:ef:0b:55:89:6f:5f:65:3f:8d:fb:
                    7a:b7:f2:8b:5d:09:c5:5d:ab:b5:0c:d2:f1:a8:8f:
                    42:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5E:31:8D:6B:2E:F4:32:D9:E4:B2:7B:FD:1A:90:1F:BD:CB:31:B6
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7a25e724-9241-4819-b3c4-a8c27d5abef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:72:b4:b8:28:da:d5:9d:29:55:b7:9f:fe:f0:3d:3d:c4:9d:
         77:32:3b:58:a6:ea:a2:cd:55:7c:aa:16:14:c8:82:b0:42:99:
         dc:32:02:f6:b0:42:0f:90:76:a5:90:7d:c0:20:ef:04:7d:f0:
         1f:72:89:bb:c2:5d:2b:b2:fe:a7:f0:98:72:38:38:3b:df:f8:
         53:02:c1:10:7b:3f:88:8f:59:ee:6e:fb:6e:50:95:75:ae:ce:
         fb:28:36:b3:4c:64:57:a5:b5:ee:30:cf:4a:7c:76:e5:c7:04:
         78:7c:84:4e:a2:6d:cf:dd:04:05:63:cc:d7:5a:a3:7d:d0:72:
         1c:7e:a6:98:31:e0:0b:93:e4:61:9e:56:8c:b5:b3:85:d3:14:
         06:98:4e:d8:5f:e3:00:1d:59:93:ba:45:6b:2a:9e:9f:b3:1d:
         d0:60:99:dd:d6:a4:5e:0d:30:85:7e:d8:64:36:2f:a8:cd:12:
         0f:2c:1c:ab:78:df:f5:6e:f9:f6:48:20:10:c7:56:6f:30:4f:
         22:35:a8:4c:5c:85:e6:9b:d9:d5:fb:f2:cb:c9:30:bf:20:3a:
         13:19:24:6d:d4:53:f5:13:09:7d:95:ae:d5:6e:a0:8b:66:04:
         7b:e6:fb:74:7c:4d:89:48:fa:4e:aa:22:0a:d0:60:c1:fd:f1:
         e9:e6:25:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----