Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/de79915f-e3c3-4da3-b6ec-7f43a50e4e34.roa
File:                     de79915f-e3c3-4da3-b6ec-7f43a50e4e34.roa (raw, json)
Hash identifier:          gkZTTi5KbvdI9QzMIzcMEUfOcK2HHzV/xnc//JzFQro=
Subject key identifier:   78:14:57:B3:62:54:92:64:DB:F5:A1:4D:ED:21:BB:F5:48:D1:95:32
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       343AE0673577898C30D6931128D43C37A897F13C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/de79915f-e3c3-4da3-b6ec-7f43a50e4e34.roa
Signing time:             Fri 20 Jan 2023 00:00:00 +0000
ROA not before:           Fri 20 Jan 2023 00:00:00 +0000
ROA not after:            Mon 23 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3a:e0:67:35:77:89:8c:30:d6:93:11:28:d4:3c:37:a8:97:f1:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 20 00:00:00 2023 GMT
            Not After : Jan 23 23:59:59 2023 GMT
        Subject: serialNumber=a3d9d4619d9a52508d295a7b849fd3ae893675843bcb45769b91772ec5065fac, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b8:bc:79:4b:e9:6a:75:f9:84:5e:9c:f4:db:
                    24:e0:6c:ac:17:56:b0:85:53:67:9b:16:49:8a:08:
                    66:91:1d:e7:1a:b0:48:58:76:a4:a3:e9:5f:e2:53:
                    af:f0:59:4b:28:61:cb:76:85:7e:17:36:88:98:a6:
                    b6:5a:33:fe:56:89:9c:2f:be:6a:e4:c1:2b:a7:bb:
                    80:d2:16:26:f6:2c:8c:e5:03:36:b2:74:8e:ae:cf:
                    4e:52:65:60:15:02:1c:ea:98:02:36:dd:08:26:0d:
                    18:55:da:7b:ee:66:80:e6:a8:d0:3d:50:03:9d:49:
                    27:72:8e:10:be:d4:05:d3:d2:d1:a2:49:33:44:9c:
                    02:20:5d:27:96:71:3b:e7:36:16:fc:1f:94:35:3a:
                    4c:7d:e7:7c:d6:44:c9:ba:32:b2:cc:cc:c7:fc:d9:
                    d6:e8:75:57:c9:2e:59:87:31:4f:c9:c1:a9:3e:27:
                    bf:d7:64:ad:eb:7e:d2:8e:6a:98:b3:74:63:71:cf:
                    8a:c9:f4:9f:51:11:25:5e:92:0d:9a:0c:4e:25:95:
                    bc:1a:6a:40:2b:72:e8:bb:82:93:38:05:14:eb:89:
                    ad:7d:f6:3f:ea:2a:22:76:b6:31:8d:90:43:e6:d7:
                    5f:6e:4e:03:6d:b2:6d:72:36:26:0c:6a:75:8e:16:
                    e5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:14:57:B3:62:54:92:64:DB:F5:A1:4D:ED:21:BB:F5:48:D1:95:32
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/de79915f-e3c3-4da3-b6ec-7f43a50e4e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:81:f9:78:05:b7:7a:fe:18:2d:c6:05:a8:69:81:be:2b:ce:
         25:38:13:73:47:f3:8c:2f:be:86:b0:c6:b0:a1:33:5e:6e:c7:
         7f:eb:a3:3b:6e:2c:f0:b3:9d:6b:0d:0e:ac:44:21:c7:73:9c:
         89:0c:0b:40:1d:7d:2e:7c:1b:31:ae:6c:b3:1f:87:58:8b:60:
         1a:8b:61:cd:ae:e9:f8:f2:2a:f7:f2:3d:f7:4d:d8:28:70:11:
         66:c4:b2:18:f7:f1:91:c3:7d:d8:7f:c2:7b:da:4f:33:49:32:
         01:4b:dc:3a:3e:bc:de:c3:cd:b7:8d:42:c3:8b:f6:72:fe:2f:
         a8:5d:60:c7:e2:80:91:d4:70:62:b0:2d:3d:86:ca:41:d0:18:
         79:d4:ff:09:e9:ab:35:73:34:a2:85:f4:03:cb:b8:5e:9b:d9:
         32:91:e9:09:50:d0:b9:df:da:46:6f:25:d7:27:aa:3d:18:d2:
         91:a1:31:88:60:56:e7:1c:27:b9:6b:99:a6:75:6f:16:d7:72:
         0f:7f:04:ad:7c:06:7d:a3:9d:99:d7:7a:2c:7e:81:26:5d:71:
         42:5b:ec:45:e6:bb:fb:75:5c:63:84:6b:ea:bb:89:3a:fb:55:
         bc:1c:d9:a1:55:0c:ec:69:e9:fd:a7:a5:e5:68:d0:9f:be:bd:
         22:a8:0a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----