Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/89e3caf1-9160-4e80-a6f2-6de50411ed48.roa
File:                     89e3caf1-9160-4e80-a6f2-6de50411ed48.roa (raw, json)
Hash identifier:          eySmu2IiF8XbmnFu6mr6/IpId1wV42kQEMmwn+Vzh1I=
Subject key identifier:   6A:55:24:BF:7E:A2:4A:1E:BF:B8:7C:3A:43:E3:72:7E:91:3E:4A:EF
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       74B64B1D1F26E7183CA7AD87B210C9A2F6D7F05F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/89e3caf1-9160-4e80-a6f2-6de50411ed48.roa
Signing time:             Mon 16 Jan 2023 00:00:00 +0000
ROA not before:           Mon 16 Jan 2023 00:00:00 +0000
ROA not after:            Thu 19 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b6:4b:1d:1f:26:e7:18:3c:a7:ad:87:b2:10:c9:a2:f6:d7:f0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 16 00:00:00 2023 GMT
            Not After : Jan 19 23:59:59 2023 GMT
        Subject: serialNumber=d7d7207116ea0eeeeaadc80431761db9329054828ac1e36cdc993a1680b6425c, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b3:11:d4:f7:7d:5b:b9:f4:0b:8c:41:48:b2:
                    85:e6:39:69:22:11:51:3c:1f:e5:1d:47:ee:30:aa:
                    93:b1:b7:87:a0:29:a8:5a:31:6a:d8:34:73:82:4d:
                    77:a1:c3:d8:fc:c3:78:29:b7:9e:c1:37:5f:66:f7:
                    2c:36:54:dd:7c:14:c1:c5:b5:9a:31:23:ab:36:2d:
                    46:9c:f6:2d:14:e8:48:f7:b5:02:3b:a7:68:d7:0e:
                    cd:44:6a:86:c7:c7:53:8f:c7:12:6e:5e:8a:0a:bb:
                    e6:e2:f4:69:03:40:5a:e6:72:ae:ec:13:54:4d:88:
                    9d:7a:23:0f:fa:6c:41:5f:53:26:32:80:0b:e3:1b:
                    ce:19:12:b4:e6:6c:6d:93:65:50:13:b4:5d:54:49:
                    e8:11:89:7c:9b:79:6b:b1:19:16:9e:fd:ba:e7:a2:
                    62:48:2d:ed:e1:90:ec:7f:8c:d2:11:96:32:c1:4d:
                    c9:f5:47:b8:86:a2:da:95:e4:e8:af:0a:2e:4d:bd:
                    ef:aa:05:08:39:4b:54:1a:dc:4d:c4:23:df:91:06:
                    2c:e5:bf:60:58:2c:4f:c0:27:84:38:3e:c7:2b:17:
                    71:14:02:03:b5:28:7c:2d:de:8b:2c:5d:cc:78:7f:
                    30:25:78:da:74:d3:24:62:9e:bb:9e:6f:9d:f6:85:
                    f3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:55:24:BF:7E:A2:4A:1E:BF:B8:7C:3A:43:E3:72:7E:91:3E:4A:EF
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/89e3caf1-9160-4e80-a6f2-6de50411ed48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:a0:a4:b0:6a:12:b0:06:c9:82:c3:8c:e0:b1:60:e7:35:af:
         54:c0:53:1a:d8:89:17:50:b3:ad:f5:cf:1d:80:25:7c:a5:43:
         eb:f9:a0:2e:a7:17:c3:04:20:27:34:3f:dc:a7:00:60:c8:4e:
         cd:88:c7:0b:4a:b0:1c:3b:48:bd:cb:2b:55:61:06:65:6a:20:
         60:47:d6:11:95:50:4a:46:f3:79:8c:02:1b:55:4b:e1:05:56:
         e1:1d:92:08:90:9b:87:e6:1c:94:36:c7:2e:e3:e5:5f:c8:cb:
         ad:9f:a8:5f:37:3b:51:b7:2e:2d:f2:ea:ea:1c:2c:65:eb:37:
         0a:57:e3:5c:70:d5:db:03:39:9a:c5:d6:a0:d3:bc:0e:25:49:
         ce:27:3b:c1:16:c8:b8:2b:04:18:a4:8f:51:8f:b5:72:ac:d3:
         5e:80:10:e3:24:d3:e7:36:51:fa:06:d7:0e:0a:ac:58:76:cc:
         f8:cb:7a:f8:f2:c9:65:5a:f5:51:ce:73:02:11:97:2b:fd:0f:
         50:c7:a4:94:a1:de:6c:91:b8:39:ad:09:50:f8:03:f6:17:0b:
         65:78:0b:a3:b1:1c:c9:d6:b7:3b:45:fc:73:b8:e2:6b:86:55:
         cf:16:4f:4a:3d:10:62:a8:df:26:0e:f5:2c:36:28:6e:62:e3:
         5e:b7:f6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----