Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/24e75d78-fa46-4d64-b62a-9a305a7e025f.roa
File:                     24e75d78-fa46-4d64-b62a-9a305a7e025f.roa (raw, json)
Hash identifier:          24Krv29Tm3xzvaJxI+1PkAbUvaYabcMKLBQS+1zMUCI=
Subject key identifier:   ED:B9:40:74:07:5D:7C:D3:C0:12:C5:E7:A9:CC:B8:1D:76:32:8A:7A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       44AC98BFBACD81522BA18348B7E96CA64377466D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/24e75d78-fa46-4d64-b62a-9a305a7e025f.roa
Signing time:             Sat 11 Feb 2023 00:00:00 +0000
ROA not before:           Sat 11 Feb 2023 00:00:00 +0000
ROA not after:            Tue 14 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ac:98:bf:ba:cd:81:52:2b:a1:83:48:b7:e9:6c:a6:43:77:46:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 11 00:00:00 2023 GMT
            Not After : Feb 14 23:59:59 2023 GMT
        Subject: serialNumber=5a6e25db27014c4cdedff3983dcddee99bf2ba216a5b87420402be5c57dfa305, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:ba:5e:63:9b:da:61:af:ec:56:59:49:6c:
                    91:4c:17:ba:86:54:49:c9:b9:80:09:6c:5c:41:4c:
                    d6:3c:f2:c8:b6:2a:e9:0b:0e:04:b3:ae:2f:0a:46:
                    af:9d:8b:5d:04:1a:7e:e7:3d:b0:6c:ef:e3:12:04:
                    9a:87:97:c1:3a:6e:c0:14:db:a5:7f:3a:d6:74:19:
                    d0:2e:44:c7:d9:60:39:36:8a:66:57:a6:e5:74:06:
                    bc:2f:92:16:52:df:17:f7:97:21:1b:2d:f8:ff:2f:
                    3e:50:c0:9e:e4:da:fe:40:69:66:d7:d6:e3:a9:7d:
                    9b:b8:1f:a7:2e:82:a8:36:d6:c6:ed:0e:d1:f0:26:
                    0d:67:b1:1c:b7:cd:7e:71:3c:07:e6:19:a4:0c:f5:
                    37:2b:0b:74:f5:f3:6a:d9:63:e7:52:22:0e:c7:2c:
                    fe:07:d6:23:96:46:9b:c0:9f:59:a1:25:3a:60:50:
                    34:88:ef:e0:80:5c:ab:a6:b7:c4:a7:cd:0b:67:43:
                    30:b4:86:b2:b3:8c:14:85:05:41:14:b9:4f:c2:a9:
                    23:a4:f5:ae:30:7d:c2:09:15:9c:7d:c5:ca:56:54:
                    ef:4a:b8:11:1b:b7:3c:f4:97:a2:be:f1:bc:b0:55:
                    c6:af:08:d2:3d:43:0a:0c:4e:51:f3:72:8c:c9:21:
                    f5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B9:40:74:07:5D:7C:D3:C0:12:C5:E7:A9:CC:B8:1D:76:32:8A:7A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/24e75d78-fa46-4d64-b62a-9a305a7e025f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:72:47:c1:c1:c3:71:3f:55:7f:d1:d3:46:1d:ce:7e:71:ce:
         b5:91:40:05:6b:ca:de:9b:dd:18:8c:f9:b9:c0:bf:54:41:4c:
         3a:1d:25:07:2f:13:96:eb:91:48:37:a3:6d:67:82:52:91:99:
         e6:8f:c2:0e:07:a6:77:2d:c4:0d:f4:54:a4:79:ea:4e:93:49:
         71:a6:fa:99:0d:b3:cd:ef:44:b8:a9:0f:1e:8a:67:3d:6e:67:
         a5:a0:4e:b1:9b:24:f6:99:68:57:86:5c:e6:6d:c9:66:06:ab:
         61:0e:cf:c9:1d:a8:68:8e:85:2a:35:b3:eb:7e:c2:ff:2f:76:
         09:01:58:70:98:fd:2b:a8:c2:75:02:41:9c:28:95:6d:80:8c:
         f8:28:71:af:26:96:a5:5f:0d:9e:ac:a2:82:62:df:9f:d3:ea:
         9c:b0:90:d4:5f:fc:ab:8d:00:85:6b:d6:7d:90:20:95:c0:65:
         f1:27:f2:c0:39:83:46:3e:61:7b:f5:41:15:81:a4:f5:3e:58:
         dd:02:36:89:46:f5:99:00:e3:81:1e:18:83:dc:a7:28:41:67:
         ba:66:f7:1c:c1:f6:2d:69:32:00:0f:65:19:7e:dc:35:c0:38:
         38:c8:6f:f8:65:17:68:a7:0e:45:a7:51:3e:75:6d:5a:d1:8e:
         42:04:8a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----