Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c79c0149-2ba9-4b85-81c8-7e067aa55943.roa
File:                     c79c0149-2ba9-4b85-81c8-7e067aa55943.roa (raw, json)
Hash identifier:          jzB8wXQJS2kbfR0bKVnliDDgH2835PPNK3A0ZV8wT9M=
Subject key identifier:   3E:52:34:EC:80:D3:F1:15:65:DB:E8:BF:B6:C4:10:CD:0D:89:03:6A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4B5521D51EB42BB6B4B7E9D071F60E269760C5BA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c79c0149-2ba9-4b85-81c8-7e067aa55943.roa
Signing time:             Sun 02 Apr 2023 00:00:00 +0000
ROA not before:           Sun 02 Apr 2023 00:00:00 +0000
ROA not after:            Wed 05 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:55:21:d5:1e:b4:2b:b6:b4:b7:e9:d0:71:f6:0e:26:97:60:c5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  2 00:00:00 2023 GMT
            Not After : Apr  5 23:59:59 2023 GMT
        Subject: serialNumber=d3b00168b2deaa327171d6aa19ae7ae11cbc070064a1774c691a2183ac2c9d70, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c2:88:0d:4a:ff:d9:48:45:ea:b5:57:d3:74:
                    09:4d:fb:28:b2:8b:3d:89:d9:b7:56:d6:47:16:8f:
                    32:8f:68:fa:6c:fd:bc:ec:4d:1f:e9:47:2c:29:f5:
                    dd:ff:97:1f:49:d4:59:cd:c6:47:2a:67:9a:c8:57:
                    f2:7c:71:c7:c9:3f:80:a8:c9:aa:17:86:4d:9e:27:
                    cf:5a:8e:0e:92:cb:67:2a:4d:53:9b:ea:a6:85:15:
                    a6:0e:74:f4:24:fb:04:bb:e8:05:f1:1e:90:fd:5f:
                    41:81:1c:29:04:a3:75:45:6b:a8:23:39:a7:3c:1f:
                    c5:65:0d:02:8c:83:6e:5d:8e:7b:9a:82:71:2c:99:
                    36:2e:71:cd:49:d7:df:b6:5b:e5:57:0a:88:bc:1f:
                    3b:43:10:2a:cc:65:1d:ad:a0:b5:d0:7b:2e:ee:50:
                    cf:39:1e:16:d9:a2:4a:78:48:ba:0f:37:7a:aa:cb:
                    c4:28:e5:b0:8d:68:52:c5:9d:54:3c:69:db:ad:b8:
                    3f:82:7e:9b:cd:29:29:89:ff:46:d7:cd:19:0b:a7:
                    c0:97:db:38:87:df:36:bd:30:8d:f3:f0:7c:78:be:
                    0d:4e:eb:b8:08:98:49:19:32:0e:ce:44:81:3e:ff:
                    77:c9:4e:27:f9:6e:df:05:eb:cf:e5:b6:eb:d3:2f:
                    f2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:52:34:EC:80:D3:F1:15:65:DB:E8:BF:B6:C4:10:CD:0D:89:03:6A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c79c0149-2ba9-4b85-81c8-7e067aa55943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:e9:a3:aa:ea:5f:b9:b7:4a:3b:9b:34:7d:8b:93:7c:8a:53:
         a3:44:40:c2:90:38:bc:38:2c:da:00:2f:0e:27:26:10:18:f3:
         4d:77:a3:b2:2a:42:f6:30:0d:00:2b:3d:7e:f6:45:e3:c6:f3:
         1a:a4:88:85:6a:ff:b2:a7:6d:84:bf:1b:18:a3:46:02:0c:e0:
         40:d4:3d:d5:23:9e:da:43:3c:96:a0:d8:54:ea:8a:d2:7d:ba:
         79:76:96:96:77:db:a8:e3:f2:98:c2:dd:48:b6:75:43:42:d3:
         7c:5f:a2:3b:0c:f3:72:e2:cd:be:6a:59:95:85:56:d8:77:76:
         64:de:4e:64:c1:d9:b8:13:c5:3f:dc:cc:83:0d:0a:e2:15:f7:
         7d:fd:f6:67:bb:81:e9:b5:83:b5:96:c0:93:37:ee:af:b8:2f:
         15:5d:67:55:ac:86:5e:42:6d:ed:2c:aa:68:27:3f:a6:81:73:
         9c:a3:da:ab:34:b2:fe:bd:7c:ff:c6:2a:83:d2:fc:6e:19:69:
         09:92:0a:86:65:ee:86:06:b7:05:40:ea:61:30:69:f1:6a:96:
         c3:66:46:79:84:b0:08:8c:1d:af:97:49:67:0f:d7:23:41:ec:
         ac:42:b3:4a:33:bc:8f:1f:91:9c:4f:b6:cc:42:e5:ad:46:16:
         ba:cf:0b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----