Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0823ae41-f2fd-47d8-aaec-f78fb907f2c7.roa
File:                     0823ae41-f2fd-47d8-aaec-f78fb907f2c7.roa (raw, json)
Hash identifier:          FIFaFmgdNsQygnjqw85NFnvidLb5w8DdBZfWDm6ccLU=
Subject key identifier:   F0:1A:41:A4:25:20:B1:39:C6:BA:97:E1:7D:CF:7F:8F:AA:A4:CD:44
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       156EB8881E6EB281AA70FC5A2D005D4BFC6F16EC
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0823ae41-f2fd-47d8-aaec-f78fb907f2c7.roa
Signing time:             Mon 06 Mar 2023 00:00:00 +0000
ROA not before:           Mon 06 Mar 2023 00:00:00 +0000
ROA not after:            Thu 09 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6e:b8:88:1e:6e:b2:81:aa:70:fc:5a:2d:00:5d:4b:fc:6f:16:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  6 00:00:00 2023 GMT
            Not After : Mar  9 23:59:59 2023 GMT
        Subject: serialNumber=bbb2d6d785c20d429b044396f114f6913a4714a6c0216c1ede0dd53e164e5805, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:5a:30:d9:99:0d:2d:d2:9b:d6:6a:80:5d:
                    94:5b:7c:dd:ba:b3:ef:f9:b0:06:79:a3:0c:f3:9f:
                    1a:8e:2c:21:ba:4e:8e:f0:61:11:df:93:37:b3:5e:
                    d2:6e:1c:ee:c1:df:87:73:3a:db:6e:7e:11:94:39:
                    ab:90:c2:55:bf:e3:b4:5f:f6:18:59:a0:67:3c:bf:
                    ff:3d:af:80:fa:c2:cd:d3:7f:4a:31:15:99:6b:de:
                    8a:a3:c4:17:48:2a:1d:39:ce:d3:8e:99:ac:17:ba:
                    23:70:aa:09:3c:3b:90:ca:10:6d:d4:d2:fe:78:e5:
                    58:a1:2e:64:27:52:7b:83:1a:37:d3:f2:cd:c2:3d:
                    5f:e4:ef:68:a3:da:7a:c9:cf:d7:9e:97:93:ca:07:
                    a4:c0:7a:9f:6e:85:df:a0:52:0e:2c:84:7a:ed:be:
                    2a:81:b1:57:e4:72:81:60:d7:0b:91:9e:6e:d3:f2:
                    b3:4b:6c:28:93:f5:fb:bd:28:e1:7f:63:87:aa:c8:
                    f9:5b:07:39:a6:1f:ec:d2:69:b9:4b:a5:d5:d0:f4:
                    b9:1a:41:a8:bc:50:31:70:85:b2:fb:01:f0:8d:6e:
                    bf:1c:a3:fd:f5:01:d4:fe:09:30:c3:da:19:84:eb:
                    bb:07:9f:f9:16:7c:1c:76:b8:54:ba:ec:a1:bd:ec:
                    e6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1A:41:A4:25:20:B1:39:C6:BA:97:E1:7D:CF:7F:8F:AA:A4:CD:44
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0823ae41-f2fd-47d8-aaec-f78fb907f2c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:19:66:63:57:fc:31:f8:e6:13:d9:74:fa:90:0b:f5:5c:56:
         d7:cf:5d:c5:7d:34:c9:6e:ce:cb:9c:0f:1d:da:ab:3f:ff:ff:
         a7:4f:ad:49:c5:71:36:31:45:90:91:c2:03:cc:e0:44:09:71:
         69:c3:11:6a:27:3d:81:e8:e1:5c:60:b4:0d:1a:0d:fe:6e:8f:
         5f:71:9d:80:b2:8e:48:73:a2:9a:1e:2d:a2:0e:2c:86:db:6f:
         4c:1d:79:3c:ec:4b:b6:55:81:73:92:7b:14:b4:6d:8c:52:ee:
         41:df:4e:c2:5f:e9:c1:71:e9:5e:d9:65:d0:88:bd:55:28:41:
         58:fe:4c:4f:c4:51:46:da:ed:b7:a4:58:a5:ff:d3:99:a0:47:
         8f:52:aa:e9:eb:93:5c:fc:87:a6:ad:d3:be:3d:0f:a3:75:e4:
         76:21:93:eb:5e:d8:88:5a:a6:08:1e:89:93:1a:81:f6:d4:0c:
         d3:4a:ce:b7:42:09:0e:be:4a:40:bf:ca:52:23:77:58:51:a6:
         3f:13:83:56:25:04:ed:42:4a:72:73:91:84:ea:de:f9:c5:a7:
         df:0b:22:a0:13:2c:fb:bd:f6:d9:47:a5:5f:ad:e4:e0:be:a7:
         09:66:68:4b:ba:42:d4:38:f4:3f:f0:3e:e6:bc:1f:0a:96:53:
         6e:dc:02:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----