Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bdc6a40a-b88f-4abf-8d65-671ff43d6cb9.roa
File:                     bdc6a40a-b88f-4abf-8d65-671ff43d6cb9.roa (raw, json)
Hash identifier:          SYB4moq5KO+tNRRVfDD3ni462r7FikQfAwaFfR2Ftjk=
Subject key identifier:   2E:73:B2:0A:FF:10:7C:59:9F:C9:0D:C7:7C:4F:AB:04:61:54:E7:93
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3F2CDC56E0D1AE18F9D080353BC8EBBCECDF8AC2
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bdc6a40a-b88f-4abf-8d65-671ff43d6cb9.roa
Signing time:             Tue 20 Dec 2022 00:00:00 +0000
ROA not before:           Tue 20 Dec 2022 00:00:00 +0000
ROA not after:            Fri 23 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2c:dc:56:e0:d1:ae:18:f9:d0:80:35:3b:c8:eb:bc:ec:df:8a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 20 00:00:00 2022 GMT
            Not After : Dec 23 23:59:59 2022 GMT
        Subject: serialNumber=6748ef78cb9c32e240396f2f520dda1ceb362921865368964fd84e5c3ad17032, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6c:6c:03:f1:2d:e9:95:4c:73:9f:ab:b9:6a:
                    d0:c1:e8:bc:5d:a9:e4:ef:4f:73:75:d3:c6:69:b2:
                    a6:5f:7d:2f:1e:10:87:cc:fc:e2:fe:be:ed:4f:38:
                    8b:82:6e:0c:03:86:69:a3:ae:98:2c:b7:df:5d:60:
                    5b:68:22:55:e6:c7:6f:01:10:0c:de:99:8b:7d:88:
                    cd:69:72:21:44:e9:3e:26:42:ba:7a:e8:48:21:da:
                    f8:a8:21:cc:b9:61:46:b3:6c:f8:bd:ce:0a:7e:5c:
                    dd:80:88:80:e4:39:60:cf:12:7c:25:2c:5b:fc:75:
                    b6:ff:89:d3:e2:c3:13:16:28:a8:1e:ee:e2:f8:b2:
                    f7:ee:13:37:74:24:0d:72:2a:7b:49:87:e9:30:7c:
                    39:6a:57:0c:96:ae:b8:2f:65:89:11:7e:2a:9d:7e:
                    08:42:cf:e9:d3:d9:38:bf:ec:7a:f6:ed:4d:fd:1f:
                    8e:11:00:fe:b8:17:6c:38:1e:c9:64:d1:a9:6f:61:
                    2a:4b:d3:3d:55:18:1e:f7:5d:f8:55:fc:cc:df:b9:
                    2c:c6:28:a0:c1:a5:d4:21:ab:69:56:9b:90:2b:21:
                    e4:93:52:7a:da:1f:50:f5:7d:e4:60:e4:49:e5:fb:
                    9f:30:98:f3:a8:54:84:02:ab:4e:1c:6a:38:04:5f:
                    da:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:73:B2:0A:FF:10:7C:59:9F:C9:0D:C7:7C:4F:AB:04:61:54:E7:93
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bdc6a40a-b88f-4abf-8d65-671ff43d6cb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:12:01:7a:20:52:05:a0:00:90:1f:10:9a:9a:3d:0f:e5:b2:
         3d:a4:fd:0d:90:76:ba:0e:d6:aa:56:c6:f0:b4:aa:65:0b:19:
         2d:43:4a:4b:a6:93:56:e6:32:bb:0d:95:e6:ee:87:a9:66:7f:
         76:33:ef:2e:00:12:15:2f:23:0b:86:b6:bb:25:69:ed:59:b0:
         a2:60:cd:0b:59:d5:c4:4e:65:c5:4e:2a:d9:81:78:90:4e:e3:
         4b:f3:da:88:92:e4:eb:5f:f8:5c:e8:07:d1:36:a3:4c:2a:11:
         ba:ba:35:d7:6b:c1:6a:96:94:eb:31:1e:1e:c1:e3:1b:ed:d8:
         b3:81:d8:7b:f8:81:ee:5a:5c:09:ce:c0:34:42:9c:4d:1a:23:
         4e:48:c7:b8:ab:50:e3:45:30:5c:31:c5:f2:5d:f2:dd:6a:c9:
         89:24:8a:7a:65:a7:d4:68:39:50:30:f7:48:94:44:cb:5b:80:
         32:b9:33:d6:26:74:19:b2:b3:74:30:e2:b1:48:1b:91:54:8b:
         5c:5e:5e:68:57:73:af:6e:07:df:8a:33:ab:46:f0:7d:73:dc:
         62:04:f3:c8:54:e6:f7:24:19:d5:34:f0:1a:76:fa:b8:27:ef:
         dd:9e:e8:1c:fe:18:8f:c4:a5:94:d2:4f:1c:ab:a9:85:4f:91:
         d7:91:9b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----