Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d7c0e7c1-018c-4ace-bf32-b12598cbffe5.roa
File:                     d7c0e7c1-018c-4ace-bf32-b12598cbffe5.roa (raw, json)
Hash identifier:          tvYj76zaE9oGC/fjGf/9lP3+5cp7g4L/36QgpZVeS6o=
Subject key identifier:   05:B7:30:54:31:43:56:A9:E5:B0:2C:F6:1B:58:7B:0E:00:10:73:4D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       067288A829219E819005D8892579323887CC3024
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d7c0e7c1-018c-4ace-bf32-b12598cbffe5.roa
Signing time:             Wed 18 Jan 2023 00:00:00 +0000
ROA not before:           Wed 18 Jan 2023 00:00:00 +0000
ROA not after:            Sat 21 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:72:88:a8:29:21:9e:81:90:05:d8:89:25:79:32:38:87:cc:30:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 18 00:00:00 2023 GMT
            Not After : Jan 21 23:59:59 2023 GMT
        Subject: serialNumber=03e3df7f8b8070817838cc2aa20d0f5df956efb659436bc2d189017b4321f41e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4c:30:c4:ac:9c:9e:41:06:8a:1f:d7:0d:03:
                    17:c9:f8:10:54:09:61:e7:bb:be:e1:29:6c:05:fc:
                    7f:be:52:22:68:17:b8:f7:db:cc:e8:0a:d8:93:dd:
                    87:71:4b:6a:67:90:2f:4d:28:47:9c:32:1a:2a:25:
                    e1:5c:58:c2:e9:5e:a1:d5:dd:92:8b:9c:9a:c1:a1:
                    63:64:a5:ce:db:19:5e:a9:8b:9f:5b:c2:ab:0e:5e:
                    0a:e1:49:5b:1b:09:0a:3d:74:c0:39:ef:33:11:82:
                    07:58:a7:a9:ce:6f:06:4a:31:c3:dc:59:b2:07:70:
                    17:28:36:5a:2d:42:26:dc:cb:28:d4:67:05:4c:03:
                    45:60:e2:3b:7c:f8:28:82:f9:f3:85:ad:cb:bb:8c:
                    6f:3c:c4:84:38:eb:1f:60:cc:48:53:35:b4:5e:5f:
                    26:e5:82:15:05:31:7b:c6:90:fb:cf:1b:61:32:e7:
                    43:f6:38:a5:35:25:f9:8d:51:15:72:f8:34:e4:e0:
                    cb:84:91:65:94:b8:a3:91:2f:d2:23:8a:c9:13:e4:
                    2c:59:06:cb:6b:e3:cd:31:0a:ae:65:92:8c:d4:5d:
                    3b:d0:68:58:d9:92:14:bc:83:fe:dd:b6:7a:c5:67:
                    18:8f:89:9d:62:ef:fb:90:13:28:0a:cb:c6:72:35:
                    22:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B7:30:54:31:43:56:A9:E5:B0:2C:F6:1B:58:7B:0E:00:10:73:4D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d7c0e7c1-018c-4ace-bf32-b12598cbffe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:c7:5e:90:6c:5d:b5:85:12:c1:c4:bf:22:a4:93:cb:53:ea:
         5c:ce:98:3a:3e:02:ef:42:57:d0:08:d7:de:3e:b7:3e:03:9a:
         f3:a8:1d:c9:a6:8a:c6:f3:00:31:5e:c6:fa:cc:36:a3:d6:7c:
         31:27:d5:46:52:ff:9c:1d:2b:24:f8:5f:07:5e:99:35:92:0c:
         58:b1:3d:0e:fb:6a:15:d7:39:15:85:74:ff:75:dd:13:54:37:
         6c:38:20:ba:3a:3e:7d:4f:bd:23:04:6c:3b:58:64:cd:25:24:
         fc:f4:c2:a9:aa:d9:9d:12:ff:b2:26:df:f2:9f:bb:83:f4:26:
         e5:ca:ad:93:78:cb:36:76:99:4c:13:5d:34:8e:bf:50:88:7e:
         b7:33:c9:cb:34:ae:6c:12:7c:59:70:3a:a2:32:eb:c5:31:2a:
         61:38:af:0c:6a:80:47:e7:0f:1a:b2:42:55:b6:11:9c:c3:ab:
         21:41:8c:f9:b0:d3:86:0c:e9:45:ab:42:90:b9:07:4f:5f:16:
         2f:ae:bd:19:52:e2:0d:27:cf:9b:fc:e0:79:40:71:25:6c:4b:
         3a:a9:57:11:b2:e4:a1:53:cc:23:c7:54:a1:d1:42:6c:4c:83:
         31:a1:20:56:1e:d6:cf:ab:48:10:b2:6b:ec:7a:ec:8e:2f:4d:
         f8:21:07:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----