Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7f24ad6f-fcfa-41a2-9572-a055cd995eb0.roa
File:                     7f24ad6f-fcfa-41a2-9572-a055cd995eb0.roa (raw, json)
Hash identifier:          b9yqWu76zvu7Bj9zmv1xEPHzWWtA8dsml3lyZdwt/Ug=
Subject key identifier:   44:50:00:63:D7:FC:F1:A1:B8:30:C9:F5:BF:08:74:9F:27:70:3D:FC
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0DA586F1650C8D83BE808FF07211E03F119A63E9
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7f24ad6f-fcfa-41a2-9572-a055cd995eb0.roa
Signing time:             Fri 21 Apr 2023 00:00:00 +0000
ROA not before:           Fri 21 Apr 2023 00:00:00 +0000
ROA not after:            Mon 24 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a5:86:f1:65:0c:8d:83:be:80:8f:f0:72:11:e0:3f:11:9a:63:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 21 00:00:00 2023 GMT
            Not After : Apr 24 23:59:59 2023 GMT
        Subject: serialNumber=82c1d6e0ceda2a5d4c0d0d550a0bd8ec5ef29de5afce5738214959cd510c98ba, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:18:81:16:7a:d1:bd:f0:db:7d:7d:98:e5:67:
                    af:f7:bc:1b:ba:30:3a:e8:c6:20:09:69:8a:bd:d6:
                    95:a8:81:20:b1:e4:5f:27:dc:3a:79:72:45:bc:5d:
                    32:9e:9e:bf:1b:58:1b:3b:e0:00:65:30:53:d9:21:
                    41:cb:d8:18:a5:a5:8c:5b:83:67:fc:c5:e9:cd:8e:
                    b0:0e:0e:fd:b3:78:b5:9c:79:f1:f2:86:35:8e:6a:
                    71:d2:59:5f:52:f1:21:7e:f6:bd:26:07:b2:d7:99:
                    95:7d:fa:0f:12:03:f5:29:73:eb:18:3e:10:65:67:
                    2f:ef:1e:ab:39:17:02:a7:01:fb:10:15:e4:3d:d7:
                    d7:4c:86:46:9d:4f:8b:5e:89:e2:c4:82:ca:15:98:
                    52:79:aa:2a:38:5e:4a:33:01:29:75:54:20:59:b3:
                    44:3b:5e:81:c0:7f:7b:f2:e8:6f:6b:89:d7:39:11:
                    96:32:f8:72:62:35:af:4d:08:49:bd:6c:04:37:05:
                    db:86:5b:af:8c:c5:02:b3:2f:a1:f3:7b:ac:c0:bf:
                    dc:84:82:2b:a8:83:aa:2c:32:14:80:7c:ca:35:f8:
                    dc:5d:76:39:31:c0:f4:03:a0:c0:91:03:db:ed:bf:
                    88:02:38:5d:48:74:67:08:73:86:b9:3d:a6:96:12:
                    8c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:50:00:63:D7:FC:F1:A1:B8:30:C9:F5:BF:08:74:9F:27:70:3D:FC
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7f24ad6f-fcfa-41a2-9572-a055cd995eb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:66:03:10:1c:b8:c9:9b:79:6e:f7:2f:ac:ba:f2:cd:ee:f1:
         00:d1:70:c4:d4:48:ab:b1:94:ea:84:73:2f:6c:a7:e7:32:08:
         f2:84:d1:31:5f:f0:81:74:50:c8:70:c5:7c:40:9b:e6:b2:f1:
         96:58:9c:b7:39:df:cc:e5:42:f1:bb:5b:97:a1:e6:d2:48:d4:
         7f:1c:c7:d1:53:80:c3:21:70:20:e3:1f:74:98:4f:02:10:4a:
         fa:f1:89:ca:51:c7:a1:f9:33:4c:bb:0b:8d:de:e4:91:16:64:
         33:55:db:51:c0:11:3e:57:eb:ae:73:32:02:1f:cb:0a:2e:74:
         37:84:40:8b:9f:c0:b8:69:cb:97:e4:92:ad:ce:de:a0:e5:4f:
         1a:e2:97:59:27:19:3b:67:60:88:81:f2:33:cf:9d:b6:67:15:
         ec:98:f3:82:67:d2:d8:a4:fc:87:bc:6b:01:b9:c3:33:0c:8b:
         56:15:bc:9c:60:2c:16:3a:f7:6c:f8:eb:dc:b3:fb:36:3b:97:
         e5:bd:a4:0b:dc:d5:fd:65:73:19:81:02:82:3b:fa:fb:10:3d:
         05:73:1d:73:54:82:31:ae:4f:37:38:31:21:cd:50:28:23:6b:
         d2:86:89:ed:44:c7:22:96:0e:1e:82:82:62:fb:53:b9:ac:35:
         2f:89:fb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----