Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2fa82b01-cdf2-442c-9cdc-a3c41c91d723.roa
File:                     2fa82b01-cdf2-442c-9cdc-a3c41c91d723.roa (raw, json)
Hash identifier:          laC+/1ps1k4nsQ5+YxgkoBD8EWlM9OnxxRoC+C3ktK0=
Subject key identifier:   59:D1:B8:73:52:F9:D9:5F:87:05:40:C6:5D:27:28:AA:F2:88:24:04
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       71359064019FACE27C95680F7A5C8506EC30F8A6
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2fa82b01-cdf2-442c-9cdc-a3c41c91d723.roa
Signing time:             Thu 11 May 2023 00:00:00 +0000
ROA not before:           Thu 11 May 2023 00:00:00 +0000
ROA not after:            Sun 14 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:35:90:64:01:9f:ac:e2:7c:95:68:0f:7a:5c:85:06:ec:30:f8:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 11 00:00:00 2023 GMT
            Not After : May 14 23:59:59 2023 GMT
        Subject: serialNumber=84eb714f8c314566908164137995c2a92ec7db1c6acc1103d992549946685875, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2b:20:8c:2f:98:1f:6b:eb:2d:50:f5:35:f6:
                    20:47:af:43:e8:29:69:b2:53:74:64:1c:f1:8f:f1:
                    56:de:6d:86:06:d9:7e:23:f7:9d:be:66:16:4e:ef:
                    72:99:9e:7c:51:ea:59:a1:f1:e9:2c:b5:e2:00:80:
                    07:93:27:a2:a6:fa:32:5a:19:8b:ba:2d:68:63:93:
                    c1:e5:c9:33:fe:f0:59:31:e5:b8:d9:26:3f:e3:41:
                    d1:05:f6:5c:fb:1e:2c:f8:1c:1b:e3:7c:34:3d:2f:
                    3f:f1:68:3b:f3:a2:bd:5b:b7:0e:40:09:6e:d7:c9:
                    5d:ff:c6:b3:61:99:1f:54:4c:a8:f4:e3:32:fc:18:
                    50:11:a8:60:35:3f:fb:f8:f9:85:82:2f:3b:38:b3:
                    bf:23:82:7d:53:83:24:c3:b7:bf:1e:67:d9:0f:8a:
                    59:9b:b3:0e:f9:0b:46:4e:71:73:94:5a:af:22:ee:
                    82:2f:b2:ad:9b:ec:98:8d:86:72:62:98:da:e1:17:
                    19:0f:cc:88:34:2e:c7:7d:6a:12:9f:f8:a3:10:bd:
                    90:00:2f:e3:dc:07:26:a3:84:1d:84:01:bc:20:49:
                    60:3c:1a:02:c8:64:13:33:b6:75:83:ea:ef:43:fc:
                    0e:e2:eb:72:68:59:e5:d2:6f:bf:9f:ab:06:6c:9c:
                    a2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D1:B8:73:52:F9:D9:5F:87:05:40:C6:5D:27:28:AA:F2:88:24:04
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2fa82b01-cdf2-442c-9cdc-a3c41c91d723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:c8:46:10:1a:20:5f:dc:cf:ab:5d:35:7d:06:c1:de:a3:21:
         33:a6:58:20:72:59:22:88:ae:64:00:c0:7b:12:e8:c9:91:7d:
         64:5b:b8:ed:25:c2:1b:36:99:5e:9a:85:48:70:bd:6a:85:83:
         1e:33:14:fe:c1:d4:3f:08:5c:ad:ed:62:80:7d:4b:54:6f:ac:
         8f:a5:9e:4c:7d:5b:11:df:89:8a:f8:bd:43:5a:a5:48:4c:2e:
         03:2f:6d:6d:15:72:81:95:da:c2:49:4a:78:0e:c2:df:ac:52:
         e9:c4:57:80:40:74:32:cf:92:ab:d0:13:49:c2:57:8c:2b:cd:
         c3:e0:8f:40:14:7f:ee:a9:80:a1:8d:d5:f9:c2:71:b8:0a:2e:
         a3:5b:4f:96:e9:bd:70:1a:88:4b:77:d6:ef:5b:ac:4e:b7:08:
         a8:6a:a6:8d:91:7a:03:97:d0:fa:59:19:d7:76:f6:c9:70:1d:
         e9:d5:17:c8:3b:e9:33:09:c1:bd:af:90:66:ff:db:96:c2:b8:
         6c:ea:3c:4d:74:44:fc:3f:51:de:18:cb:5e:33:42:b4:41:04:
         7f:5c:c2:ab:24:f9:3a:6e:81:75:d5:53:ad:da:74:1d:6b:24:
         e8:b0:82:33:f7:f3:bb:1b:b3:18:e6:3a:8a:bd:d9:ce:d0:1c:
         bd:43:8d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----