Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1a43f83d-e908-4d14-894f-5d00d8fba96e.roa
File:                     1a43f83d-e908-4d14-894f-5d00d8fba96e.roa (raw, json)
Hash identifier:          2n9WQVxPbxA+/UW0OgTSUSBW5hPKFnsNlJx8dlbOFSc=
Subject key identifier:   F8:CF:4F:0F:FB:6F:58:18:80:4C:8E:15:38:EC:BE:4C:9B:17:3D:9B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       25C441D1350E3DDA2080342B02027F76C2D46908
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1a43f83d-e908-4d14-894f-5d00d8fba96e.roa
Signing time:             Sun 12 Feb 2023 00:00:00 +0000
ROA not before:           Sun 12 Feb 2023 00:00:00 +0000
ROA not after:            Wed 15 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c4:41:d1:35:0e:3d:da:20:80:34:2b:02:02:7f:76:c2:d4:69:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 12 00:00:00 2023 GMT
            Not After : Feb 15 23:59:59 2023 GMT
        Subject: serialNumber=53820fe0ca59241a2f493d94dcad532d3c505dd29c351d2d72a67d6a77d2dc74, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7e:b0:7c:aa:7f:d6:04:d6:54:96:ef:8d:9d:
                    ce:d3:aa:16:42:db:14:94:d8:cc:55:53:60:6b:db:
                    8a:6b:85:b5:73:0f:f8:29:a4:fd:82:70:ba:53:a4:
                    65:06:96:dd:aa:83:84:e3:84:6e:a6:22:2e:07:04:
                    8a:bb:26:52:08:1e:9a:55:ec:3a:af:1b:f0:ea:1b:
                    21:4c:5f:6b:ff:46:95:bf:c6:21:d8:c6:85:62:41:
                    22:25:c3:b1:67:a8:0c:49:c3:5e:2c:d9:67:ae:b4:
                    e4:e1:1c:45:20:a6:4e:ff:7a:ee:83:2f:05:e3:de:
                    e4:79:45:a6:c9:da:bd:9f:f0:32:d1:f4:cc:44:04:
                    a8:54:3b:80:c4:f7:ae:3d:76:5e:a5:fd:53:0f:8d:
                    2a:36:aa:8f:18:2b:94:75:e2:01:86:84:00:99:5b:
                    4b:a5:02:3e:89:c7:ec:f3:c0:8d:3a:6f:25:56:53:
                    44:af:07:56:1b:d1:4b:83:67:3c:7f:91:d9:bc:c0:
                    39:18:db:82:b0:64:31:e8:2d:91:21:9f:22:5e:ac:
                    ce:6d:d1:c9:12:08:ed:07:2f:1c:da:9a:b3:cb:82:
                    39:44:36:e2:70:6c:60:90:0d:76:47:09:e7:fc:c0:
                    aa:2c:5e:da:fa:bb:0a:1d:7e:3a:45:2c:8a:a1:22:
                    8a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CF:4F:0F:FB:6F:58:18:80:4C:8E:15:38:EC:BE:4C:9B:17:3D:9B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1a43f83d-e908-4d14-894f-5d00d8fba96e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:d5:24:f4:a9:71:9f:6b:30:ed:47:4a:c6:98:cb:32:87:d7:
         7b:46:69:82:ed:7a:12:c7:bc:a9:61:73:29:22:8e:e2:7e:a0:
         07:73:97:03:76:c2:af:1d:62:c1:a0:a8:2a:94:15:e3:c6:e4:
         1d:ce:6d:f0:05:6d:99:b5:a4:23:be:ec:2c:32:ef:ad:2c:41:
         e4:a2:28:57:6f:67:6a:8a:bc:2a:6e:63:db:2d:f2:7f:9c:77:
         4c:42:f7:90:71:aa:84:88:4a:07:54:e9:4b:8a:70:d0:af:de:
         f4:40:c2:4d:c8:e1:9e:71:5f:76:e2:48:8a:4b:ab:6a:4a:a2:
         c7:a9:29:cd:9c:03:c7:73:86:b6:d5:12:6f:35:54:68:f0:5b:
         01:55:19:b9:19:de:05:1d:5c:26:f3:c7:4b:68:d6:7b:27:90:
         21:9e:5f:05:0c:48:19:cd:3c:d4:b7:59:0e:f9:79:f7:c3:69:
         8e:5a:11:84:74:88:30:09:96:cc:e1:c8:3f:20:fe:9e:a6:56:
         70:12:d1:4d:25:54:d2:8a:28:a2:ab:c9:4d:fb:a9:7d:ca:61:
         8a:8c:d3:9a:bf:ee:3d:d0:c7:2b:ce:f1:bc:d2:eb:89:d6:3d:
         c2:30:c7:f2:68:2f:c0:32:45:84:f9:b0:86:f1:8e:51:9a:3d:
         e0:69:d0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----