Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/dbbf4891-117e-49ed-a168-fe7d47da45bf.roa
File:                     dbbf4891-117e-49ed-a168-fe7d47da45bf.roa (raw, json)
Hash identifier:          uMMZvnl16//ffI4372kRUqlqEwdAqny7u7+zg/6zu7E=
Subject key identifier:   3A:A5:ED:71:80:1E:54:1C:1A:2E:86:3C:56:EC:1B:0E:07:12:5E:00
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       74C23506B0AD5589BC78DBE4ADDE1711E734E79D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/dbbf4891-117e-49ed-a168-fe7d47da45bf.roa
Signing time:             Thu 02 Mar 2023 00:00:00 +0000
ROA not before:           Thu 02 Mar 2023 00:00:00 +0000
ROA not after:            Sun 05 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c2:35:06:b0:ad:55:89:bc:78:db:e4:ad:de:17:11:e7:34:e7:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  2 00:00:00 2023 GMT
            Not After : Mar  5 23:59:59 2023 GMT
        Subject: serialNumber=94108de6196032bba6e210c8655908ee8f7fc3138deba9219f5abd0fe31bef28, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:a1:13:fa:f9:54:6d:f9:54:29:8e:15:3d:
                    7b:b3:df:b2:41:62:fc:5e:ea:27:ed:23:9a:54:2f:
                    58:43:cc:a8:e3:ed:4d:e3:30:53:9f:c7:4d:f6:59:
                    bc:a8:78:e3:f3:b0:b0:52:8f:9e:a3:64:15:5d:89:
                    e5:cc:82:0f:1b:1b:45:f1:ab:c3:87:93:d8:4b:68:
                    30:3b:44:5d:ad:64:9c:ea:de:53:1e:fc:0f:35:57:
                    f5:a8:e5:c1:8b:3f:ac:f6:30:b4:ed:d8:5a:e7:6c:
                    e7:8d:c4:d7:88:ad:38:50:b6:41:38:54:ca:00:f9:
                    ae:0f:28:b5:29:17:ef:12:ab:7c:a3:eb:88:ab:cd:
                    7d:c0:41:1f:37:7e:2f:d3:86:9f:37:41:2a:06:ea:
                    b8:66:af:b3:09:96:56:4c:f4:41:2e:21:f5:ae:4c:
                    cb:9a:08:06:13:b7:ac:3b:bf:f2:0a:36:39:c5:51:
                    90:76:e3:12:53:a2:48:3e:70:1a:c5:a1:d3:7b:77:
                    af:47:c0:86:23:e6:d4:c3:43:72:71:1b:36:99:4f:
                    90:29:d0:01:06:2d:06:3d:a5:df:93:fd:e0:af:7c:
                    95:bf:e1:cf:0d:47:d8:8b:ff:3d:26:61:8d:5c:c1:
                    b7:ac:a4:3b:d1:04:13:4c:aa:83:c0:7e:80:b4:5f:
                    5e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A5:ED:71:80:1E:54:1C:1A:2E:86:3C:56:EC:1B:0E:07:12:5E:00
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/dbbf4891-117e-49ed-a168-fe7d47da45bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:74:21:49:44:3d:8f:5c:ae:f5:78:42:00:2e:64:91:c2:1b:
         e0:2c:d2:7a:22:d1:5f:87:dc:7b:0c:8a:78:ae:65:e0:61:26:
         20:60:ae:a7:a0:05:56:64:8c:7a:af:fc:73:70:45:39:f8:0f:
         82:b6:15:b3:13:90:76:95:ba:ef:02:b7:3e:c2:92:cb:da:cb:
         61:d2:95:6c:4e:80:c0:e3:91:4f:7d:51:7b:9d:0f:0d:8d:38:
         dd:6c:6c:cc:1a:00:8d:b4:53:e0:ff:82:89:7f:3b:73:ea:83:
         07:80:59:8d:39:7b:0a:ca:05:bf:4e:63:05:d0:f0:c3:61:ff:
         dc:fb:da:c1:75:ec:5a:75:81:83:4c:2e:7e:ae:3f:e3:3b:eb:
         4e:27:8c:9e:7f:89:a9:16:d7:3d:c9:83:c4:61:aa:15:ad:f4:
         8e:23:76:a6:35:1c:d9:56:d4:90:ee:54:a2:76:f4:56:1f:04:
         f2:cd:82:ac:43:93:ea:d5:ea:64:58:87:f4:e2:40:f1:86:c1:
         c0:c6:7b:76:02:bf:1a:3c:6c:55:87:6f:e4:91:85:e5:75:6f:
         f2:91:db:ec:4a:dc:b3:f2:ac:c2:00:58:b4:fb:77:80:41:5b:
         93:56:4e:4f:a0:d9:b6:b5:4b:f5:99:ea:c5:a6:d2:47:56:cd:
         f8:47:8c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----