Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/205a6a33-09c7-4f61-8acb-49a801c05cd6.roa
File:                     205a6a33-09c7-4f61-8acb-49a801c05cd6.roa (raw, json)
Hash identifier:          P/nuvQJazxK7uFaea1dEKeJ8/kmNNXwa/Cd7/mpBgZk=
Subject key identifier:   EB:75:7A:82:8A:01:71:29:F2:06:95:9C:7F:D7:49:CA:99:06:77:33
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1B3BCB5DE8B17C69058EC17E1D5C1CCAB9AE9349
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/205a6a33-09c7-4f61-8acb-49a801c05cd6.roa
Signing time:             Fri 03 Mar 2023 00:00:00 +0000
ROA not before:           Fri 03 Mar 2023 00:00:00 +0000
ROA not after:            Mon 06 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3b:cb:5d:e8:b1:7c:69:05:8e:c1:7e:1d:5c:1c:ca:b9:ae:93:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  3 00:00:00 2023 GMT
            Not After : Mar  6 23:59:59 2023 GMT
        Subject: serialNumber=612f0a3e10901add04524f6e014d91d5e5988eccd730a827f59c4031a2e714de, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3a:a8:f8:51:d7:59:25:cc:95:cc:2d:33:2e:
                    43:9c:35:42:bb:93:64:4f:8a:91:2a:1d:93:fd:e3:
                    85:4f:3b:40:4f:b7:44:5e:ed:b4:86:d4:0b:cc:c2:
                    41:12:72:f5:b3:71:fb:b9:dc:dd:c3:c5:b0:6a:aa:
                    dd:02:21:69:a0:23:77:d4:f1:66:ae:2a:e2:0f:eb:
                    0c:40:f2:ca:01:03:1c:b0:ba:63:59:89:83:33:16:
                    4e:c6:c8:0f:20:13:5b:52:ff:33:4d:ce:3c:7b:7b:
                    3e:c8:12:c4:62:39:37:4e:b8:d3:77:ec:42:cc:12:
                    08:5b:0e:6b:ee:e7:cb:95:53:a5:b0:71:df:01:60:
                    d9:11:a9:13:bb:47:bd:ef:4d:ce:be:0a:de:1b:f0:
                    2d:f8:a9:25:32:d6:30:0e:e2:4a:4b:58:3a:f5:13:
                    c4:a8:5d:e5:9c:eb:53:95:5f:5e:8e:51:41:3c:85:
                    02:1e:c1:26:62:30:fb:fc:1e:31:da:6d:a5:3b:5b:
                    c1:d3:c2:c5:78:86:92:97:88:5c:d0:12:b8:4f:a7:
                    17:de:fb:68:4c:e9:6c:ed:e7:d2:45:1d:9a:dd:fa:
                    8c:13:44:d6:a2:cf:b8:4e:3e:70:23:cb:df:69:d5:
                    df:9f:58:cf:61:95:94:f4:12:53:e0:4f:3b:e8:cf:
                    db:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:75:7A:82:8A:01:71:29:F2:06:95:9C:7F:D7:49:CA:99:06:77:33
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/205a6a33-09c7-4f61-8acb-49a801c05cd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:0d:d8:c1:5d:1c:87:3a:e5:b2:64:e2:5d:c2:06:ba:fb:03:
         6d:c9:64:6b:ae:f7:fd:1e:d7:19:de:02:e3:06:71:3b:1c:93:
         c3:d6:5a:08:2a:cf:54:81:55:81:43:ee:fb:0c:f7:d5:c5:f5:
         ee:35:14:d0:8a:e4:eb:59:85:c5:e7:82:02:df:7d:65:bd:1c:
         1d:40:fe:78:8a:5e:89:f6:3e:7b:8c:18:15:9c:22:66:e8:c8:
         05:fc:eb:00:01:ef:9d:3b:f4:c0:a5:4b:b0:23:b9:8f:cf:10:
         7a:b3:d7:99:27:04:fa:82:8f:df:08:c9:5b:6e:0a:5d:4a:a2:
         18:da:03:50:ca:d5:27:da:6a:5a:92:56:7f:93:10:9d:6e:ca:
         af:c1:4e:bb:96:1a:16:34:1d:53:a2:2c:ec:77:85:5d:72:66:
         31:92:94:17:01:d4:a6:ca:a2:0a:01:32:24:ac:3b:69:5e:f8:
         87:9d:f4:66:07:51:df:fb:71:a3:50:fa:cc:f3:a6:1c:98:85:
         35:4f:13:68:ec:98:52:6e:79:73:e9:00:64:02:ca:00:5a:6e:
         90:98:11:62:9b:0c:5c:6e:6c:ef:7b:f2:5f:9d:e4:bf:b5:b9:
         6b:b5:71:c9:aa:5a:a7:4a:1a:5b:26:72:f2:97:1a:97:73:ba:
         57:7d:4e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----