Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8aceb48d-0b5e-4654-b3d1-1e8b4b43ec36.roa
File:                     8aceb48d-0b5e-4654-b3d1-1e8b4b43ec36.roa (raw, json)
Hash identifier:          0/jx6CDyXSzE+ZL7MHPAmnRqxekcjr1lyrst8WlvqbE=
Subject key identifier:   BE:D5:D2:A8:4A:D6:AD:EB:0B:7C:D9:AD:AF:62:88:16:90:FD:13:35
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1995BEF5244617C96CF8FFC1DB6E67D2EB3B3DF4
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8aceb48d-0b5e-4654-b3d1-1e8b4b43ec36.roa
Signing time:             Sun 16 Apr 2023 00:00:00 +0000
ROA not before:           Sun 16 Apr 2023 00:00:00 +0000
ROA not after:            Wed 19 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:95:be:f5:24:46:17:c9:6c:f8:ff:c1:db:6e:67:d2:eb:3b:3d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 16 00:00:00 2023 GMT
            Not After : Apr 19 23:59:59 2023 GMT
        Subject: serialNumber=00fde53a7de7cbce143ada6bb53c5927b585a31261a69f21b7d2cb035669b5ec, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:07:e3:8c:f0:aa:fb:51:49:d2:30:f8:3b:
                    96:02:f4:a7:6d:3d:97:5b:20:e2:90:7e:22:7a:7d:
                    5b:e8:0d:df:6d:bc:b4:e5:64:66:22:ce:e7:17:e7:
                    fc:75:6f:0c:34:ab:cd:02:7a:0c:1f:59:85:11:fa:
                    4c:54:11:f8:c4:c8:6d:e4:94:2a:63:df:86:1a:1e:
                    4b:86:c7:91:5d:8e:8f:1b:a6:e2:05:3e:df:29:08:
                    42:99:fe:29:e1:7d:24:d9:70:f0:7d:60:d8:d0:69:
                    74:a5:69:65:5c:44:b2:c9:6b:2d:48:4f:67:b8:bc:
                    12:ff:6a:b7:a1:12:88:fa:d1:8d:48:22:0d:8f:9e:
                    c7:b5:5d:b5:96:7a:63:39:8b:48:bf:61:62:ea:04:
                    02:1d:5c:9b:f5:5a:17:ff:c3:6f:93:95:7c:fd:05:
                    cd:56:43:e9:8b:02:ca:86:d6:7d:8b:85:20:b7:14:
                    6c:bb:0e:51:c3:6f:0f:9d:5c:e8:8d:06:56:51:65:
                    71:cd:3b:50:02:db:8d:02:5f:e0:66:60:df:55:1a:
                    f3:d2:5d:3e:c2:59:b3:7a:b4:a8:a5:98:1a:98:f5:
                    c8:4c:63:38:dc:82:64:85:d0:3f:ca:b5:72:57:2e:
                    ca:10:cb:f6:a4:64:36:0d:64:8f:d8:79:d8:d4:ff:
                    77:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D5:D2:A8:4A:D6:AD:EB:0B:7C:D9:AD:AF:62:88:16:90:FD:13:35
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8aceb48d-0b5e-4654-b3d1-1e8b4b43ec36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:d8:06:2d:da:49:e8:98:d9:70:66:08:0b:d0:0f:2b:05:ab:
         ac:b6:88:bf:a1:32:98:8f:c5:0a:11:71:2d:06:00:92:8f:f9:
         21:1c:32:f5:5c:0f:f5:e6:b5:60:d9:fb:04:4c:14:9b:69:24:
         6b:95:af:f7:f4:37:c7:26:2e:bf:e0:cc:44:23:29:04:e0:b6:
         a0:b0:59:ff:a6:b1:d5:79:7c:e6:13:35:83:fc:6e:05:74:e5:
         6e:80:55:ca:b5:08:07:80:65:3b:7a:74:37:fa:ec:41:43:86:
         75:85:e8:51:d9:4c:48:0c:ce:d0:8c:59:45:85:03:f2:f7:e5:
         3d:96:35:a8:a8:21:9d:37:a8:49:2c:7f:fc:37:94:46:c1:89:
         8c:ff:09:41:84:7c:18:84:2a:f9:23:17:d7:02:1c:a4:d0:58:
         59:2d:e1:5c:54:13:b6:e5:fa:62:c2:79:3e:dc:c0:5e:b9:34:
         b8:3f:1c:90:ca:4a:5f:6b:b3:a0:8f:82:73:b4:77:d1:1a:69:
         57:4b:9b:3a:f6:61:26:8b:d3:da:6b:88:41:3b:6e:8c:11:fd:
         0d:74:02:f4:bb:75:09:2d:51:8e:51:d2:d9:84:28:05:83:b7:
         f5:91:90:2b:8e:cc:53:5d:58:19:b5:ab:6e:52:0f:2d:f3:1b:
         13:ec:ae:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----