Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ee1fe940-67f8-455f-8f64-8404318ec7c6.roa
File:                     ee1fe940-67f8-455f-8f64-8404318ec7c6.roa (raw, json)
Hash identifier:          36ZXharjq7+GyPISnwOvNhJ/ozm59woTdZGJKCmS7bo=
Subject key identifier:   C4:4A:95:86:FA:9F:5E:B1:9E:B8:D7:1A:AD:60:7C:ED:94:D1:22:77
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4782B0EEE4BFA0B6B20779C6325DD7FC99E7F54D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ee1fe940-67f8-455f-8f64-8404318ec7c6.roa
Signing time:             Wed 12 Apr 2023 00:00:00 +0000
ROA not before:           Wed 12 Apr 2023 00:00:00 +0000
ROA not after:            Sat 15 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:82:b0:ee:e4:bf:a0:b6:b2:07:79:c6:32:5d:d7:fc:99:e7:f5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 12 00:00:00 2023 GMT
            Not After : Apr 15 23:59:59 2023 GMT
        Subject: serialNumber=9c76f333adf7024e4e787a10845aadb8c7eb9df683e3e059362dc0b4d0bc4100, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c7:eb:1f:3d:67:a3:8b:2a:aa:ce:19:57:f2:
                    7e:40:f5:1b:33:02:04:9c:54:cb:a9:12:1a:3a:a3:
                    5c:bf:01:64:23:d2:d7:e2:07:f4:77:12:de:be:b1:
                    7a:bd:ec:15:41:6e:4e:89:23:27:68:23:7c:be:3f:
                    08:8e:d6:a5:07:ed:dc:32:75:fd:fd:88:8b:e0:21:
                    f1:53:23:3d:8e:78:3c:69:a2:35:02:ad:a6:01:5b:
                    5f:5e:40:ec:5e:b1:6c:17:86:f8:7c:23:59:ea:66:
                    2a:d3:7e:b8:8e:72:7b:e7:30:0c:88:cd:69:af:82:
                    e3:c1:7a:d1:9a:70:fc:d6:44:fc:21:82:2a:45:23:
                    bf:e7:e4:71:19:ca:e4:00:55:2b:07:fa:8f:58:aa:
                    db:49:ae:b5:3d:ca:33:10:91:14:6a:1f:87:a6:42:
                    62:b2:c8:5e:e5:6a:cb:6d:ba:8a:de:8d:5c:3a:33:
                    52:78:4f:04:0f:6f:25:08:49:0d:e1:26:22:14:b0:
                    a2:c2:c4:4a:fa:15:3d:c6:d3:1b:30:1e:a9:10:83:
                    24:0f:2a:ce:1b:b4:cf:56:c9:27:40:d1:b3:d3:63:
                    63:a5:e9:ca:75:d1:42:71:ae:07:cb:73:79:08:5e:
                    95:23:17:ee:4b:5e:06:bf:f4:89:af:dc:0f:cd:aa:
                    70:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4A:95:86:FA:9F:5E:B1:9E:B8:D7:1A:AD:60:7C:ED:94:D1:22:77
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ee1fe940-67f8-455f-8f64-8404318ec7c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:fc:0e:30:68:03:54:ee:2e:88:9b:7b:66:ce:80:0b:c2:2c:
         70:03:ec:0e:4b:60:95:30:13:c1:5b:8c:ed:99:cc:a1:b3:8f:
         01:5a:63:22:6b:48:6e:4d:bc:08:c8:41:93:f2:38:cb:a2:7f:
         3d:33:3e:3c:97:5c:b5:29:ea:91:eb:37:7c:54:e5:2f:23:80:
         81:9a:41:29:ad:05:54:40:67:2d:e1:a7:d9:31:32:98:31:1f:
         82:7f:5b:ef:28:4a:df:d6:48:13:f6:99:14:1c:99:a3:d6:e3:
         a3:9f:da:47:67:c7:f7:ac:e9:fc:9b:36:9d:d0:15:a2:51:78:
         dc:78:36:10:97:d0:8c:3f:ec:54:fc:fd:17:1e:df:5d:e0:97:
         51:25:9d:1c:f3:42:d3:fb:24:95:12:d3:e0:83:a9:c6:99:79:
         78:af:e3:03:c2:40:6d:70:d0:5a:f2:7a:5b:b5:83:4f:bd:85:
         f8:cb:4f:c1:82:66:39:3e:8e:0b:1d:1a:f8:a6:bb:d8:3c:27:
         10:94:dc:45:3d:9b:b5:12:79:16:b8:70:62:a9:ef:9e:1c:80:
         26:f9:55:3a:e8:16:6e:8a:03:33:7c:04:58:1a:57:be:f5:0a:
         be:78:41:c2:5a:8f:9e:ec:51:53:75:04:f3:29:b2:84:6c:b2:
         f5:a0:c5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----