Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7f26fe07-eb53-4c6c-b3aa-ab4da77ca5a7.roa
File:                     7f26fe07-eb53-4c6c-b3aa-ab4da77ca5a7.roa (raw, json)
Hash identifier:          fDiVfkc0w+kASFXdNNlk7HS3OBw5Qnw5yPXMld7GG7U=
Subject key identifier:   C4:13:CF:5B:AA:5A:8A:06:10:E4:46:9B:8E:F6:F4:00:EA:47:37:81
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0232C2D857DFCC3E964BFF4EAE36C11E14BF6F69
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7f26fe07-eb53-4c6c-b3aa-ab4da77ca5a7.roa
Signing time:             Wed 15 Mar 2023 00:00:00 +0000
ROA not before:           Wed 15 Mar 2023 00:00:00 +0000
ROA not after:            Sat 18 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:32:c2:d8:57:df:cc:3e:96:4b:ff:4e:ae:36:c1:1e:14:bf:6f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 15 00:00:00 2023 GMT
            Not After : Mar 18 23:59:59 2023 GMT
        Subject: serialNumber=b02648f1d4ff27658829af1158952d7be370551e0cd87e6730fd6571345f19aa, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:46:5d:39:ff:3e:21:30:97:19:22:4b:a2:9a:
                    75:a2:3a:91:a5:76:5c:2d:4d:e5:2a:cf:79:e0:61:
                    57:7f:22:b5:b1:1c:f5:95:11:bf:ad:8c:43:12:5a:
                    5a:51:9c:47:ed:f1:51:b9:5d:02:83:2e:12:b6:22:
                    80:14:cc:36:65:d6:62:1c:5d:4e:b7:c2:c4:77:3f:
                    b5:e6:9f:d8:60:e4:cc:62:e3:be:f6:fc:d8:ff:d1:
                    10:69:59:04:0a:74:a9:68:39:da:b2:fa:b6:05:8c:
                    a7:72:f3:e0:c8:ff:5d:80:12:28:26:6a:8c:e9:a1:
                    71:d2:9d:df:95:3e:ec:04:a2:91:40:f8:42:f6:35:
                    1f:4c:76:38:f6:8d:37:ed:5b:5c:99:dc:61:07:91:
                    da:7e:1e:b2:a4:1d:57:56:ce:4a:9f:56:13:6c:e9:
                    b2:d7:7a:5d:16:3b:40:04:2b:a7:e9:41:b7:c2:57:
                    6f:9f:ed:56:9c:a0:01:c6:ce:b2:0f:b8:d1:42:f0:
                    89:54:09:01:61:70:26:f5:76:63:4d:7d:c6:27:d5:
                    0a:f4:af:b7:4d:e7:6e:ca:52:51:fb:2f:d8:dc:9b:
                    0d:6c:e3:5f:a4:85:96:28:8f:b2:f6:06:43:f9:c8:
                    38:38:15:fa:86:95:e5:93:dd:d8:49:93:4c:85:f8:
                    8f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:13:CF:5B:AA:5A:8A:06:10:E4:46:9B:8E:F6:F4:00:EA:47:37:81
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7f26fe07-eb53-4c6c-b3aa-ab4da77ca5a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:e0:18:ec:2f:50:2b:b0:5a:3e:3b:9b:af:0a:d3:df:e9:b0:
         75:9b:0b:43:0d:94:86:f5:49:90:7c:b4:70:b6:1c:3b:05:6c:
         f3:e9:c3:e8:24:98:54:64:08:95:28:9c:d0:78:b8:1c:e6:84:
         8b:59:23:58:c4:98:f2:e5:d6:a9:05:5e:06:d4:3d:b8:6e:79:
         d4:ed:0a:17:4e:4d:73:bc:22:c9:d5:fb:ad:77:44:4f:4b:ed:
         1e:3e:d7:e2:a6:04:5c:11:76:79:62:66:b7:ab:00:75:59:4c:
         14:f9:b6:ed:1b:2b:5c:cc:e3:e8:14:f4:84:58:8c:ff:ea:73:
         20:70:70:19:b4:79:1a:76:b0:47:26:d5:2a:37:18:1c:07:6e:
         ba:e6:fd:9e:19:af:90:1f:58:6f:dc:92:b4:44:ed:f1:57:78:
         a1:13:e4:e3:b8:d3:d5:04:a2:30:05:fc:a0:f6:f5:ea:57:79:
         81:4e:62:cd:d9:36:94:a6:0e:14:5e:94:fc:f9:35:ec:19:11:
         ab:6d:02:e0:e9:1d:4a:9f:eb:94:5a:14:ae:13:28:e1:78:87:
         3e:99:72:b0:44:47:59:03:22:de:3d:3b:f8:d3:16:2f:eb:5f:
         c7:ba:6b:14:92:0b:2d:8b:45:19:b4:de:9d:a1:66:24:57:d2:
         07:d1:7c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----