Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8f48643e-7e6c-43f2-87d1-ffb6f3c81de5.roa
File:                     8f48643e-7e6c-43f2-87d1-ffb6f3c81de5.roa (raw, json)
Hash identifier:          lgTs9yvJkOmEtWuGXoi3VMoyRegtvIzVPZmYqHn0IBo=
Subject key identifier:   F3:62:27:F6:5A:45:7E:8F:2E:AB:65:AF:04:B3:DB:2D:A0:79:E7:E8
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       513BFD4FAF53E25EF45AAE088B750D27A8765E65
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8f48643e-7e6c-43f2-87d1-ffb6f3c81de5.roa
Signing time:             Sat 01 Apr 2023 00:00:00 +0000
ROA not before:           Sat 01 Apr 2023 00:00:00 +0000
ROA not after:            Tue 04 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3b:fd:4f:af:53:e2:5e:f4:5a:ae:08:8b:75:0d:27:a8:76:5e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  1 00:00:00 2023 GMT
            Not After : Apr  4 23:59:59 2023 GMT
        Subject: serialNumber=2af68bb100270ff80f141ee001e7e31991fb1f385e2e54423fd35ae557cd83c8, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:93:20:49:60:9a:cf:bc:52:96:c8:b6:69:26:
                    11:24:31:9a:19:fb:de:f9:4d:2e:f3:09:3e:10:99:
                    d8:03:78:cd:cf:31:11:ee:b0:2b:c3:87:81:58:ec:
                    06:94:d9:b8:56:3c:06:e3:b4:88:2b:ed:c4:be:87:
                    26:44:43:f4:f9:c4:34:c1:8a:0b:ac:dd:08:b0:8a:
                    6c:f4:8e:fc:f3:a6:b4:18:16:1c:01:fd:a7:8d:da:
                    5d:8e:e8:b7:1b:a4:38:f1:05:97:b0:71:b8:f6:68:
                    f8:14:bc:8a:dd:dd:29:7b:d6:74:c5:e9:f8:6b:25:
                    7a:39:28:46:6f:cd:29:ca:f1:1d:90:55:d7:88:8a:
                    a7:57:cd:90:1b:23:6e:58:f7:80:16:e8:76:39:e9:
                    5a:99:26:fb:aa:2c:c3:48:d0:6f:76:db:f1:87:2c:
                    49:db:4c:b9:88:bd:7c:2c:a6:4b:c0:1c:3d:e6:eb:
                    2c:9e:b3:f2:4e:3c:d5:6c:56:9a:be:38:cc:35:f1:
                    f9:d5:fb:d0:dd:e1:2d:e7:39:e3:e1:3e:c4:8a:55:
                    ce:71:b4:cf:1b:98:71:53:99:94:5c:09:2b:41:b6:
                    38:29:2e:2b:4c:25:1a:1c:69:7d:e1:36:cc:e9:bd:
                    ce:f6:eb:87:5d:90:2c:36:e9:53:76:28:ec:3b:93:
                    21:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:62:27:F6:5A:45:7E:8F:2E:AB:65:AF:04:B3:DB:2D:A0:79:E7:E8
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8f48643e-7e6c-43f2-87d1-ffb6f3c81de5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:d4:00:68:8a:cd:e4:0b:88:c2:b8:ba:8e:2d:7c:71:c6:ca:
         56:8b:64:0e:3a:18:bc:5a:6e:88:9b:b5:22:38:8d:0b:a7:5d:
         60:69:86:16:fb:c2:aa:51:6c:18:fc:99:a9:4d:34:96:89:6b:
         f2:51:86:66:56:58:ce:76:de:f1:8a:42:c2:e2:21:0b:43:d5:
         80:40:29:96:cd:bc:46:49:b8:39:a2:34:7e:91:cc:4c:58:8a:
         66:eb:1e:80:6c:bb:02:0c:e7:92:3e:3e:96:50:20:3c:01:26:
         97:16:ee:b3:9d:e7:39:ae:34:41:55:b0:bc:03:74:c2:96:cf:
         c1:b5:11:1b:6a:31:21:c6:b1:04:ef:90:57:a7:fd:d1:3f:08:
         ce:f9:9a:77:f8:ec:3b:b1:a1:61:f4:61:b6:7e:7b:58:4f:ff:
         ae:63:48:df:0e:22:a1:bb:b5:af:fe:b5:d3:0b:73:b1:34:2b:
         71:d2:a9:0c:20:68:87:95:c4:6c:25:51:6c:f6:82:d7:31:79:
         c0:9f:bb:47:2f:80:fc:f5:4c:45:d4:9e:3f:72:5c:67:ea:5a:
         00:92:40:14:78:94:00:fa:99:3c:bc:3f:a4:6e:e9:85:16:dd:
         6b:14:49:a5:3e:fc:a1:70:6e:ef:2f:b9:97:70:6c:d5:b8:ef:
         ac:31:18:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----