Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f0e7572a-d0ff-46e2-a0a6-bfd96625dcbf.roa
File:                     f0e7572a-d0ff-46e2-a0a6-bfd96625dcbf.roa (raw, json)
Hash identifier:          unLvJBjmeuvyroBHX98JXm0HASqSdKPq0F4dkRoEUNY=
Subject key identifier:   1E:B8:9C:37:62:FB:FC:E3:94:D3:F2:8C:8C:73:E0:F1:11:10:7A:2E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7D64D18662C08BC7B17A243925856D0C018CDF18
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f0e7572a-d0ff-46e2-a0a6-bfd96625dcbf.roa
Signing time:             Mon 06 Mar 2023 00:00:00 +0000
ROA not before:           Mon 06 Mar 2023 00:00:00 +0000
ROA not after:            Thu 09 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:64:d1:86:62:c0:8b:c7:b1:7a:24:39:25:85:6d:0c:01:8c:df:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  6 00:00:00 2023 GMT
            Not After : Mar  9 23:59:59 2023 GMT
        Subject: serialNumber=cd0cd7fc71f2b32a99203f1b276a3ec21b6135a50d414f90e24bb5f9c1c01c93, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e0:ec:dd:bd:1e:73:a9:91:e1:ce:f8:ad:18:
                    82:ed:17:60:1b:e0:fe:06:d3:d6:2f:e7:df:ae:0c:
                    dd:e9:7a:91:26:15:54:67:89:ae:2c:2c:75:3e:13:
                    ae:cc:09:99:79:a4:76:d9:9f:38:00:3e:5c:8d:72:
                    62:51:2b:0a:42:5b:b1:55:49:d0:b5:80:41:23:62:
                    68:7c:26:55:21:5e:b1:b7:d7:16:b1:f4:dd:bc:f5:
                    ab:db:42:8c:86:47:03:52:aa:54:b1:50:1f:8e:cd:
                    87:38:0c:f1:09:36:2f:2f:40:d3:92:1e:22:a4:e5:
                    63:c7:d2:5f:ad:31:2a:df:3b:a6:76:04:b0:d0:6a:
                    80:9a:91:b3:c9:9b:c5:46:c2:bb:0a:b5:ea:29:06:
                    1c:45:58:6f:15:ba:97:12:4a:04:b3:7d:0d:f3:75:
                    f4:ca:95:4c:93:5c:9d:fe:ac:68:48:79:98:46:a5:
                    ac:1f:56:ff:54:9a:3e:72:38:75:33:e5:ce:6c:ac:
                    f9:88:ee:8f:ee:0d:50:8c:41:b7:62:02:8c:a2:9a:
                    f8:2b:df:73:e2:d4:33:b6:46:78:d6:3d:b0:6f:bc:
                    d8:50:a3:6a:68:a9:99:6c:e8:24:95:5c:21:cf:fc:
                    9a:05:ce:99:b4:30:b4:d6:2a:40:2c:bf:24:8f:54:
                    d7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B8:9C:37:62:FB:FC:E3:94:D3:F2:8C:8C:73:E0:F1:11:10:7A:2E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f0e7572a-d0ff-46e2-a0a6-bfd96625dcbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:ca:be:33:da:6a:be:b4:e6:48:06:81:93:64:12:50:38:6b:
         97:ac:ad:22:92:43:a0:80:ea:14:ef:fd:56:e3:fd:08:32:53:
         aa:be:6d:27:f1:d0:5d:f8:6a:eb:02:ec:d9:39:a2:e9:2b:28:
         6b:15:23:a5:5f:dd:be:b3:af:b8:55:ac:da:80:69:dc:50:3f:
         31:32:ce:8c:2f:04:d5:10:5c:1c:0b:41:f5:8d:34:1c:9e:f3:
         75:fe:57:fb:90:f4:22:0e:9a:74:2f:c7:95:df:e7:aa:ef:ff:
         fa:29:7b:69:43:96:32:91:80:73:f6:5a:1a:1a:76:6a:54:82:
         97:18:5c:af:df:38:a4:bb:55:c1:ea:7e:71:2e:28:66:50:5c:
         5b:32:38:f1:a3:1a:52:da:7b:b4:eb:f2:ca:2b:c7:5b:5a:87:
         20:c0:fd:c8:bc:de:b7:ee:ab:ec:91:38:ce:f2:e6:f8:59:bc:
         bb:c8:f0:8e:7d:2b:e7:6a:9b:25:8c:cd:45:89:77:3c:1f:79:
         1b:1f:04:ea:d0:73:ac:d8:f8:a4:71:fd:51:9c:78:11:df:ff:
         ec:5c:97:f6:0b:b8:2e:d0:25:ba:97:17:4d:5b:8f:c4:e1:b7:
         20:33:f3:de:45:77:63:90:3f:b4:7c:3c:27:cf:a4:0f:a8:55:
         e7:d6:0d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----