Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/116d7063-4bf2-47e7-b83d-c9ae2de609b6.roa
File:                     116d7063-4bf2-47e7-b83d-c9ae2de609b6.roa (raw, json)
Hash identifier:          RBW/gWMupIG3JjJzoRnNMAPKbUS5LqaZuDqnN0Al34o=
Subject key identifier:   1B:80:E2:A0:7F:17:29:59:F7:41:9D:2E:DA:75:22:08:03:2B:1B:67
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5DB2A3B1D4A2A401CFF1F76DCA028EF3D1985A36
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/116d7063-4bf2-47e7-b83d-c9ae2de609b6.roa
Signing time:             Tue 13 Dec 2022 00:00:00 +0000
ROA not before:           Tue 13 Dec 2022 00:00:00 +0000
ROA not after:            Fri 16 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b2:a3:b1:d4:a2:a4:01:cf:f1:f7:6d:ca:02:8e:f3:d1:98:5a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 13 00:00:00 2022 GMT
            Not After : Dec 16 23:59:59 2022 GMT
        Subject: serialNumber=49d304a12f9878351dc0960dd3aa64bf83cc9d3cb28459ec86e0e423090b183e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ab:2b:62:93:b8:86:e4:4d:f2:67:02:6c:3b:
                    12:73:d4:81:81:45:2d:52:27:06:3b:6b:7e:0a:a0:
                    87:63:62:ef:69:5f:8b:95:47:65:1b:fa:22:77:57:
                    bc:7a:95:56:0e:db:63:80:92:27:27:26:6e:c1:3c:
                    73:e1:b8:bf:f0:0b:93:a7:8e:ed:4e:71:34:55:1d:
                    d6:36:93:18:78:6c:82:52:80:ef:59:68:d8:67:7d:
                    0d:27:21:dc:67:5a:d4:d8:23:d8:de:ed:f3:b0:c1:
                    42:66:0c:ad:53:14:ec:62:47:76:8e:b7:84:3e:8f:
                    e5:d3:ff:ba:82:96:ce:ea:4d:eb:78:d3:55:72:7b:
                    14:60:ef:c4:bb:96:c7:a1:b5:26:77:02:61:97:36:
                    26:c9:de:14:fc:08:fa:91:30:29:31:de:f4:d5:a1:
                    7a:8f:07:60:10:2a:6c:b0:9e:63:4a:de:81:b6:70:
                    74:64:0a:ff:17:27:c8:0d:f9:da:6b:3c:d4:7d:c8:
                    4e:61:1d:fa:86:e0:17:bb:35:ce:a7:2e:b2:3e:d2:
                    da:6c:ab:a2:c6:a2:a2:24:05:64:cd:80:63:22:35:
                    8a:17:1f:0b:41:2f:58:6b:e3:6a:ce:77:f6:3c:a1:
                    ef:3e:cb:55:94:ae:34:be:1e:74:de:25:0a:be:4f:
                    82:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:80:E2:A0:7F:17:29:59:F7:41:9D:2E:DA:75:22:08:03:2B:1B:67
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/116d7063-4bf2-47e7-b83d-c9ae2de609b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:84:47:c7:f5:84:9c:ed:da:60:41:9c:c4:b8:f7:ff:6a:c4:
         36:50:69:17:e8:41:4d:6f:bc:86:7a:a9:26:62:f6:8c:11:b4:
         bf:79:fb:bb:9f:da:a9:61:10:97:51:37:84:48:2e:b7:67:3d:
         64:b8:6f:bd:d6:8a:83:52:44:d3:14:88:f7:49:f4:20:66:b4:
         58:11:e3:66:45:69:4b:70:5d:20:a5:ec:ad:27:ad:f8:6b:20:
         e8:b6:7e:b8:d8:df:a4:e4:da:99:5d:70:95:5e:8f:a7:ba:1c:
         75:ec:dd:69:55:80:8f:00:ee:c2:14:26:de:5a:aa:35:4a:22:
         25:bd:56:70:d2:e5:b9:4f:73:3b:9c:b3:15:ce:dc:2e:13:e7:
         30:05:94:61:a5:fa:fb:6e:e0:05:4e:21:98:d4:d0:4b:b7:b1:
         06:50:20:50:f1:1c:39:8c:8e:68:27:99:49:14:0f:bc:e1:68:
         b7:88:72:3e:1c:fb:8e:d2:7e:7d:29:e2:36:05:07:b4:44:d2:
         38:25:5e:91:bc:0e:53:72:14:52:c6:46:68:0b:d9:5c:cd:fa:
         95:95:32:0b:27:3b:1e:11:a7:68:13:49:65:c4:ea:93:d0:02:
         6c:26:1d:26:99:13:77:97:e8:70:96:c6:a8:c1:7c:1a:7f:ae:
         b2:c2:87:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----