Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/92bed12d-e383-4b7a-b8f4-8fc3eaea48cb.roa
File:                     92bed12d-e383-4b7a-b8f4-8fc3eaea48cb.roa (raw, json)
Hash identifier:          Ara02Oi0bi+6PRunVkMRnN/siKlpTYPoGmTIefEw7d4=
Subject key identifier:   0F:A6:A9:19:0E:3C:70:16:94:5D:63:DD:EE:37:A3:1C:86:C5:6C:B8
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7EDB2CEA670D504FFBABCCB85925D266A87D4A02
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/92bed12d-e383-4b7a-b8f4-8fc3eaea48cb.roa
Signing time:             Mon 01 May 2023 00:00:00 +0000
ROA not before:           Mon 01 May 2023 00:00:00 +0000
ROA not after:            Thu 04 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:db:2c:ea:67:0d:50:4f:fb:ab:cc:b8:59:25:d2:66:a8:7d:4a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May  1 00:00:00 2023 GMT
            Not After : May  4 23:59:59 2023 GMT
        Subject: serialNumber=cd64fcd69b03b8cb8934e067423af3ead1cbce2a79f4fc265e26ca7a1a0c240d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:20:bf:1c:5e:7a:11:fa:38:5b:b6:f6:f2:ef:
                    f3:a3:c0:25:8a:fa:87:95:85:e4:6f:6c:21:c9:78:
                    d1:86:97:8d:17:4a:24:69:d7:7c:bf:95:02:b2:03:
                    e7:c4:de:78:ae:02:6a:fc:21:fa:42:76:90:c6:20:
                    9f:1f:cc:39:80:77:a3:26:d4:49:fb:c1:10:d6:f3:
                    51:b4:25:cb:ed:d9:b9:1f:4c:69:eb:42:ed:db:9c:
                    0a:2b:9c:b5:48:31:6e:99:9a:09:55:c4:49:20:ff:
                    97:6e:08:e1:9d:e9:e9:86:ca:82:e6:b9:21:04:39:
                    a4:b2:ac:e6:2a:0e:fb:cf:3e:d2:14:be:09:d4:80:
                    bd:b4:99:a4:b1:77:26:1b:90:84:3d:43:c9:bc:05:
                    25:47:5a:ac:2b:3a:ef:04:88:3f:31:6d:de:e5:0e:
                    a8:ff:58:bd:6b:70:a3:be:3a:4d:61:ea:01:7d:d7:
                    0e:8a:d6:06:9a:87:96:b1:33:63:2a:a6:03:57:5b:
                    10:cd:88:93:07:3c:08:da:1a:ea:9c:fc:45:e7:90:
                    dd:87:a3:0c:f8:df:2d:a3:cc:17:a2:cc:b5:37:70:
                    18:ca:16:0d:47:fa:a1:d4:c0:17:1c:3c:af:94:45:
                    f2:67:d9:aa:c8:ae:22:53:fb:d3:75:76:1e:d1:be:
                    94:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A6:A9:19:0E:3C:70:16:94:5D:63:DD:EE:37:A3:1C:86:C5:6C:B8
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/92bed12d-e383-4b7a-b8f4-8fc3eaea48cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:7a:db:0f:8d:6a:94:44:e6:c7:df:ec:ff:c0:ff:9c:20:eb:
         25:28:64:e2:a6:37:3d:f5:6f:8c:c8:3c:59:7a:86:b1:4a:71:
         a9:c5:1c:24:66:62:31:af:7a:39:9f:d3:34:0a:e4:e3:c1:68:
         c5:7e:bc:5f:5e:a1:1d:94:c8:aa:90:12:ee:dc:3e:d0:75:ab:
         a2:a2:85:3c:df:af:4d:a8:f9:bd:5c:20:cf:f1:f5:97:09:62:
         5c:8c:2b:13:ca:3f:db:8c:ac:3a:87:c6:3e:22:18:2f:2c:1f:
         c6:f4:7c:b0:58:43:af:dd:89:d2:cf:f2:a0:f6:45:41:de:4a:
         cf:83:dd:c8:52:dd:63:81:5b:33:a6:73:d4:29:82:fb:6f:11:
         28:3f:ec:91:7d:d8:04:95:9b:c5:04:ac:97:e6:82:2b:84:66:
         6c:bb:c5:93:5c:b2:ed:3e:f1:d3:32:64:a4:d5:8f:e4:5d:e4:
         61:42:15:4d:ba:b3:9f:04:9b:8e:f6:93:50:09:80:55:34:60:
         44:87:5e:12:a8:8c:4a:d3:2a:23:4c:e3:6c:11:0b:ab:85:b3:
         08:fd:ba:56:b7:8b:f3:4a:7c:50:f2:4d:da:a9:40:0a:91:de:
         1a:17:5b:d6:0d:7b:c2:b9:b0:a4:08:49:8d:27:66:15:a1:8c:
         0a:c1:fa:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----