Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0b3ae2fc-a920-41ed-a0e4-42c68f2f369f.roa
File:                     0b3ae2fc-a920-41ed-a0e4-42c68f2f369f.roa (raw, json)
Hash identifier:          2ZtmN2CDy0P7YB7aVij3q97FNPJzyXcF6MY0TwoDXhI=
Subject key identifier:   42:B9:15:F7:D4:7A:B2:48:92:4A:02:D5:DE:31:9B:18:CE:B0:D3:10
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0E7EA0AE974A794AA682F188BE641D6715BE2DCD
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0b3ae2fc-a920-41ed-a0e4-42c68f2f369f.roa
Signing time:             Thu 11 May 2023 00:00:00 +0000
ROA not before:           Thu 11 May 2023 00:00:00 +0000
ROA not after:            Sun 14 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7e:a0:ae:97:4a:79:4a:a6:82:f1:88:be:64:1d:67:15:be:2d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 11 00:00:00 2023 GMT
            Not After : May 14 23:59:59 2023 GMT
        Subject: serialNumber=28245825979f0a38ccb691a5b5d90755066fee6ced3f3278d6d571eced688840, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:2c:30:8a:b9:63:27:91:cf:b2:0b:d1:80:
                    d7:5f:34:ad:b5:87:79:32:67:fb:8d:37:19:19:84:
                    6e:77:d7:2f:79:7f:53:94:ac:1a:96:d8:eb:2d:e1:
                    28:37:01:4b:51:f3:e8:17:fe:c8:1f:8d:08:08:d2:
                    9a:0e:f1:b2:6f:ca:1b:1d:3c:76:23:c1:ca:3a:81:
                    41:ce:b7:75:c8:51:21:4e:01:da:b5:fd:c3:5b:a3:
                    5c:d5:e0:a5:88:6e:53:1d:81:26:c0:43:36:54:c4:
                    b1:72:24:33:d4:df:85:34:b6:5f:14:32:bc:41:34:
                    f7:b1:5e:90:73:c2:36:09:6b:10:0a:2c:af:87:e7:
                    6a:ec:49:77:12:27:f0:0d:46:59:b8:65:0a:ed:0f:
                    d5:e0:8a:cd:c4:ab:60:cf:42:45:5c:e0:4f:ad:4e:
                    0b:e1:aa:ec:d6:c0:14:b0:17:69:40:c8:b0:f0:88:
                    be:84:3c:18:74:f7:f4:4c:1c:29:fc:49:27:51:de:
                    5c:a1:70:83:85:3b:80:7c:a5:1d:fd:c6:98:1a:a4:
                    6b:62:2b:52:b0:29:1a:dd:cc:c2:61:64:df:ef:09:
                    53:9d:5c:32:16:90:d2:f0:5b:38:19:0a:a4:5c:02:
                    da:ee:c2:8d:db:53:82:3f:35:c7:d4:7f:79:40:f2:
                    07:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B9:15:F7:D4:7A:B2:48:92:4A:02:D5:DE:31:9B:18:CE:B0:D3:10
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0b3ae2fc-a920-41ed-a0e4-42c68f2f369f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:34:96:78:e1:bc:18:31:da:e7:26:f4:94:41:9a:29:db:c2:
         d8:dd:f6:90:b7:61:97:8a:53:b8:71:ae:2b:2e:34:5d:b7:3e:
         2f:49:b9:eb:00:ec:09:e6:bc:6e:ca:f1:43:3d:f4:0e:71:d0:
         4c:5f:8b:dc:5b:f6:f4:43:20:f5:c4:f4:68:1f:7e:5e:eb:49:
         2b:b5:e5:b9:9a:bf:a4:c6:5c:07:70:3f:94:be:b9:65:59:f4:
         18:f5:3e:1d:c3:bc:05:09:97:e9:90:a7:24:52:cd:94:47:25:
         78:6a:ce:e0:f9:cc:d3:ba:06:07:71:74:57:52:87:a8:b7:77:
         c1:d1:02:87:6a:df:13:f8:2c:08:dd:f8:d3:7d:7f:88:60:57:
         89:03:c2:98:0a:73:51:c6:36:b6:28:cc:0f:ce:62:c6:4c:05:
         e1:0d:c8:79:ad:7d:af:ce:f2:7c:b5:07:36:6a:b6:16:3b:32:
         83:4d:15:8c:79:cc:1e:96:10:80:32:60:a3:e5:e9:ff:8f:9e:
         c7:13:55:d7:6b:5f:87:e1:63:ee:b1:87:50:3a:bc:39:07:d0:
         75:2f:c3:15:42:b9:67:65:a0:d4:2f:ac:a0:0d:67:d5:7d:8b:
         aa:d5:c2:38:0e:a4:37:2d:37:3c:4a:0d:e6:43:d8:82:56:1e:
         ac:d6:b7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----