Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/25281d08-5e70-4bf3-bee3-b3a209cfcfe6.roa
File:                     25281d08-5e70-4bf3-bee3-b3a209cfcfe6.roa (raw, json)
Hash identifier:          Vj/ukquKDtXbs7ooyiVVI9e/sgVIfbc6YU87Oy4+Dhs=
Subject key identifier:   B8:86:8F:DA:8C:B6:03:96:9B:B4:2A:DA:AF:A7:54:01:3C:CF:08:EF
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3DF283B9B05A4FBB572E8F889E8E77750275D72C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/25281d08-5e70-4bf3-bee3-b3a209cfcfe6.roa
Signing time:             Tue 04 Apr 2023 00:00:00 +0000
ROA not before:           Tue 04 Apr 2023 00:00:00 +0000
ROA not after:            Fri 07 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f2:83:b9:b0:5a:4f:bb:57:2e:8f:88:9e:8e:77:75:02:75:d7:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  4 00:00:00 2023 GMT
            Not After : Apr  7 23:59:59 2023 GMT
        Subject: serialNumber=56e1728e4f8d9502a9fd0826c5429503e84dc6fec47f1d5dd21fbd6fcdb6ce2b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:81:00:07:fc:bf:b9:07:9b:a5:86:7d:87:0d:
                    6d:dd:a5:ad:ac:ad:52:e0:03:0a:9f:d0:fc:8d:6e:
                    07:d7:41:44:97:b5:e8:64:3e:fc:f5:f4:21:20:04:
                    d0:64:7b:ec:2f:ba:24:57:37:7d:c1:92:b4:89:11:
                    38:05:dd:0d:9c:8a:e9:24:34:ef:0f:31:ab:61:c5:
                    60:e3:5c:9a:2e:be:92:82:2f:b8:95:59:54:69:bc:
                    f6:52:47:d4:1b:db:5e:50:5c:96:83:f8:bb:63:11:
                    d4:a0:2f:e0:f7:a6:f7:f4:eb:1c:78:9e:1d:ee:40:
                    51:98:68:9e:2a:19:4d:12:df:06:4a:8e:03:b7:63:
                    60:7f:6e:1c:09:ff:39:ca:09:3d:43:3a:8d:03:8f:
                    16:e1:3e:d2:a3:d2:b6:8b:c5:91:09:69:b5:41:68:
                    79:cb:e2:13:94:39:c3:a9:fa:a9:92:ee:3e:59:d2:
                    db:be:a9:3f:4e:c4:75:38:29:2b:40:9f:a2:62:4b:
                    11:20:db:5e:c9:bc:44:ae:99:2e:9a:05:00:59:40:
                    21:d3:be:d1:b4:05:e7:5e:94:85:32:9c:aa:f3:e2:
                    9b:f9:fd:69:06:c6:e1:df:7c:63:92:0b:a2:40:f1:
                    e0:ac:84:a9:82:47:81:88:59:6f:0f:c2:20:c4:70:
                    78:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:86:8F:DA:8C:B6:03:96:9B:B4:2A:DA:AF:A7:54:01:3C:CF:08:EF
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/25281d08-5e70-4bf3-bee3-b3a209cfcfe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:c6:c6:86:5b:ed:fa:36:5e:0e:6e:63:3e:f7:de:fd:f3:08:
         1d:b1:cc:6a:1e:bb:52:8e:ed:8b:ff:20:8f:1f:c9:64:f9:fc:
         e3:30:4b:e8:cc:f1:ea:d7:42:ba:ae:2e:a8:6a:e0:28:f1:0f:
         76:1c:15:a1:bc:f0:02:33:96:57:08:86:b9:40:76:02:30:05:
         22:95:c3:99:a2:58:8c:1d:ab:f2:ec:fd:8d:60:3b:64:f5:ce:
         95:18:41:b2:7e:b5:27:fe:b5:a3:ba:f2:ac:6a:63:be:4c:e6:
         1a:1b:f6:83:b6:af:35:e8:91:46:5c:01:80:b3:2c:76:53:74:
         f6:a3:d2:c6:32:60:52:8c:97:b1:2d:8e:b4:de:1e:30:1c:2c:
         87:18:66:9d:bb:e2:ef:54:43:66:97:ac:2c:6a:b3:5b:3d:2b:
         74:b9:c5:4c:f6:af:1b:9e:3a:4d:44:43:9b:e4:65:dd:70:8a:
         1b:fe:19:f7:3f:12:90:a8:b5:2f:94:17:85:d6:28:1a:69:30:
         b9:bb:fd:f8:38:44:2e:1a:3b:38:da:9e:e9:a5:ef:d9:a8:f9:
         c9:67:1b:ff:3a:e4:e4:0d:0e:76:8d:20:4e:c7:f0:f9:ff:9e:
         5e:9a:00:24:e6:ce:b7:2d:c4:78:63:da:e2:e9:f3:8c:12:ef:
         7d:ef:09:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----