Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c36a77dc-10d6-4b4f-8ec0-f5a3e3bbbc6e.roa
File:                     c36a77dc-10d6-4b4f-8ec0-f5a3e3bbbc6e.roa (raw, json)
Hash identifier:          JQEBqO4IbNkxmHmKSJSy0PnatJx6f0c8e8vMbToSucc=
Subject key identifier:   8C:BE:55:CF:AE:70:DB:A6:95:F0:88:46:7C:77:1F:F5:C6:67:71:73
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6E97E88C3C326AAAEE86C0E5B1C9E738D63FAD4E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c36a77dc-10d6-4b4f-8ec0-f5a3e3bbbc6e.roa
Signing time:             Fri 17 Feb 2023 00:00:00 +0000
ROA not before:           Fri 17 Feb 2023 00:00:00 +0000
ROA not after:            Mon 20 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:97:e8:8c:3c:32:6a:aa:ee:86:c0:e5:b1:c9:e7:38:d6:3f:ad:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 17 00:00:00 2023 GMT
            Not After : Feb 20 23:59:59 2023 GMT
        Subject: serialNumber=f1a13c2f26c5c2c7719f91c86340a4aae712f6637868bbc4c11212514584b86b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:de:7a:e5:c3:b6:4c:71:09:26:d0:84:9c:20:
                    fd:93:96:1f:11:a6:89:60:38:a6:4e:d9:76:e3:40:
                    40:4c:2b:65:57:ed:39:13:03:db:9e:0c:dc:a8:25:
                    14:a1:c4:10:07:39:a3:fd:9c:e5:d3:ba:6b:76:07:
                    9d:15:b3:fd:bb:b1:7a:39:08:23:c0:1a:8b:55:78:
                    1d:e8:96:c3:91:99:2f:d8:51:79:cd:4b:f5:f9:f4:
                    90:9d:31:d4:6c:aa:f1:cb:81:f9:f2:6f:a0:11:7a:
                    ce:39:44:95:98:57:62:d4:ad:34:2b:3d:ec:8e:65:
                    71:8b:db:fa:45:14:a4:f2:89:01:e3:e0:c7:38:74:
                    3d:8d:a8:2b:54:29:dc:3f:28:b9:fb:17:f9:a7:ec:
                    bd:ee:85:c4:cb:09:a6:1b:d2:e3:17:73:29:79:f1:
                    e9:7e:91:ed:9a:61:9c:db:13:26:ef:eb:0c:25:f5:
                    d1:7e:6a:bb:a3:17:1e:4f:f3:09:9f:14:46:7b:c7:
                    0a:5b:28:fc:58:5e:31:d1:f7:47:f7:26:38:22:5a:
                    47:54:ad:49:30:c4:9a:de:49:f7:07:80:c0:f1:9d:
                    e1:44:f9:2b:87:01:7d:46:e7:51:41:96:f3:c9:d2:
                    bc:14:ee:41:c6:a8:51:af:0d:b2:80:2e:1e:65:bd:
                    7d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BE:55:CF:AE:70:DB:A6:95:F0:88:46:7C:77:1F:F5:C6:67:71:73
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c36a77dc-10d6-4b4f-8ec0-f5a3e3bbbc6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:20:eb:c5:c2:d6:aa:2f:34:c9:9a:2c:7c:c0:04:d9:ba:34:
         8d:3d:97:5b:10:d2:cf:b1:86:71:b7:54:5a:55:13:62:f7:e8:
         93:fd:ae:27:96:4c:30:1f:ab:bb:3e:b1:33:86:b0:a6:6c:95:
         9b:02:67:da:59:75:14:8d:26:1f:28:bf:13:4b:2f:7d:08:a2:
         54:ef:07:4d:9d:da:54:85:8f:28:e4:ee:0d:28:2d:c6:ea:c7:
         b0:f4:e7:96:77:8d:08:99:4d:e5:a2:ff:cb:bd:d1:54:2a:8d:
         af:63:42:97:55:28:55:8c:eb:ae:0c:f4:08:26:35:32:b0:9f:
         88:f0:9c:2f:79:a2:00:57:ef:11:98:03:13:76:38:77:b6:24:
         82:07:61:39:4c:3c:0a:9c:e4:7f:d1:44:83:bb:86:03:59:fe:
         9c:ce:84:95:77:64:6c:d0:81:3b:13:e0:d0:0b:73:f5:d5:72:
         20:2f:d8:e3:43:d4:a9:89:2c:ee:c8:d4:74:48:66:9f:87:d1:
         4d:09:bf:c1:8c:e0:e4:03:a3:2e:9e:84:51:68:1c:c4:86:6e:
         34:27:ef:9a:87:94:0d:77:7c:26:d5:dc:ff:dc:4b:05:6f:ea:
         48:a8:32:77:98:c2:b3:8c:ac:ae:8f:48:bc:a9:24:ab:57:8a:
         44:5e:aa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----