Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ef76df7c-eeb9-48a0-9e91-4b57b7548fdd.roa
File:                     ef76df7c-eeb9-48a0-9e91-4b57b7548fdd.roa (raw, json)
Hash identifier:          hlTxDd7CNGsNcdu+/hacfEry6gMKZmuPhT49uOOnjzI=
Subject key identifier:   B6:EC:47:45:34:2D:B3:58:10:96:7A:85:C3:EB:FA:4A:7A:9B:41:58
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7C8717D9E7B4357537BEC24E0849D2A4E55318B5
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ef76df7c-eeb9-48a0-9e91-4b57b7548fdd.roa
Signing time:             Thu 02 Mar 2023 00:00:00 +0000
ROA not before:           Thu 02 Mar 2023 00:00:00 +0000
ROA not after:            Sun 05 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:87:17:d9:e7:b4:35:75:37:be:c2:4e:08:49:d2:a4:e5:53:18:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  2 00:00:00 2023 GMT
            Not After : Mar  5 23:59:59 2023 GMT
        Subject: serialNumber=d0c5d39e581d78005fdda93f5435632f310c9c6fe7fcba15ba998d415ddc68f6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:03:73:37:2f:51:f7:ff:a3:9e:2c:5a:ed:3f:
                    fe:51:fd:38:8e:82:71:02:ef:82:79:5d:05:24:86:
                    42:27:ee:6f:60:70:90:07:c0:c7:86:14:b8:24:21:
                    01:fe:fc:d0:33:b5:ff:b0:c1:d5:21:37:3d:c2:f9:
                    9a:bf:44:fc:1d:ff:20:19:c0:2d:6c:19:46:26:35:
                    f6:fb:4e:2c:e5:ed:05:ae:57:99:14:44:62:fb:5d:
                    39:cd:42:f7:97:4c:d3:1d:97:4c:76:69:44:35:c7:
                    2d:35:31:fd:a8:92:dd:5a:48:90:de:09:a3:f5:7b:
                    d4:f5:67:83:f1:34:c1:cc:44:c9:99:f6:d2:b2:74:
                    64:ab:7c:22:99:e0:9b:8e:9f:da:30:da:98:ac:16:
                    fb:6f:c8:b6:cb:c9:2f:d5:7c:7a:45:0a:ea:6f:66:
                    ae:8e:a5:69:f6:3c:e0:49:e3:ab:5d:28:4b:d3:1e:
                    24:c6:5e:a8:e5:27:f5:f8:3d:c7:71:db:56:05:27:
                    94:cf:da:d1:18:c8:f6:5d:5f:b8:fc:be:40:08:c7:
                    4d:59:88:3e:b0:10:1b:e7:b2:d2:a3:8c:3b:9c:36:
                    d6:7b:1c:a5:c1:95:59:ec:72:fd:d6:81:ce:2f:1e:
                    c6:63:0a:31:b8:01:f9:4c:e8:df:f5:8f:df:2e:22:
                    e3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EC:47:45:34:2D:B3:58:10:96:7A:85:C3:EB:FA:4A:7A:9B:41:58
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ef76df7c-eeb9-48a0-9e91-4b57b7548fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:39:f1:7d:61:fe:31:0e:64:ec:0a:a2:5e:bb:31:b0:72:e8:
         53:83:9a:04:b1:cc:0d:ea:01:e6:03:62:31:c7:6d:99:b0:f0:
         57:55:05:4d:87:3b:4c:ee:05:fd:f4:01:43:dd:5e:68:6c:76:
         9c:17:6f:80:ca:a0:35:13:c1:a5:fc:95:2f:fb:88:d0:db:91:
         b7:8e:1c:af:8b:43:4a:c3:5e:08:97:f2:4c:56:03:24:19:f1:
         0d:f6:04:f2:95:fd:f0:0a:dc:26:07:63:d2:90:20:b6:f0:98:
         c9:fb:80:56:9e:0f:c9:ab:44:33:9f:27:ec:b3:82:cb:18:9b:
         b6:52:23:19:8c:f4:c8:09:13:a3:99:25:b5:67:44:7d:5c:eb:
         ab:bb:a3:28:3e:bc:d7:b0:a1:40:04:4a:32:d7:59:a0:8e:13:
         ec:f4:2c:8d:1f:75:3e:e5:d7:e5:df:9f:e2:e3:1c:8d:09:e9:
         1d:ef:bf:00:06:a1:11:ea:8a:da:02:d2:1c:09:d5:80:0d:0e:
         1d:08:34:c3:61:0e:b9:1c:77:92:ac:30:4a:70:fb:0e:2e:79:
         30:41:7b:63:ec:42:58:7b:33:47:db:53:9f:4d:91:3c:2d:ec:
         5d:23:f1:ee:3b:82:c0:07:45:e8:5b:fb:ff:9c:db:ed:60:f2:
         3b:e5:b0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----