Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/380efb1f-0fd2-4a0e-ab47-6257340193a7.roa
File:                     380efb1f-0fd2-4a0e-ab47-6257340193a7.roa (raw, json)
Hash identifier:          aqU0RqlHf8Zjl9TwdTNj7smeOlhAgqEUob9P38Dh6PA=
Subject key identifier:   04:EE:1D:6C:8F:1A:22:A8:80:EE:F8:C2:1B:FC:E3:FB:74:60:19:DA
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0B05508B83747DAC0EBD82EDD96B24143500D7B9
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/380efb1f-0fd2-4a0e-ab47-6257340193a7.roa
Signing time:             Tue 14 Feb 2023 00:00:00 +0000
ROA not before:           Tue 14 Feb 2023 00:00:00 +0000
ROA not after:            Fri 17 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:05:50:8b:83:74:7d:ac:0e:bd:82:ed:d9:6b:24:14:35:00:d7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 14 00:00:00 2023 GMT
            Not After : Feb 17 23:59:59 2023 GMT
        Subject: serialNumber=f6ff92973ae33219e8eebced1156dbb140bb0f56ac716ab8cfd2e40adcb80909, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:e6:2c:3f:75:f0:c5:42:b6:36:62:1d:31:
                    de:98:9f:c1:d9:ad:fe:c1:95:d7:bb:84:0b:8f:db:
                    6c:77:81:5b:be:19:20:5f:cc:91:8b:84:b5:64:cc:
                    e9:fe:69:4e:14:8f:e7:6c:12:68:0a:98:27:eb:b3:
                    31:cb:fb:6b:35:6a:75:e3:2a:1e:15:db:33:c3:c9:
                    03:ca:5d:26:60:44:a4:26:dd:00:db:0b:8a:af:1e:
                    31:ea:ad:26:d8:d6:0b:34:f4:c3:a9:ab:cb:43:69:
                    d2:ae:f4:f5:96:10:92:7e:a7:03:35:7b:ee:87:17:
                    6e:10:6e:a2:86:42:16:36:f5:e5:7b:38:1c:5a:92:
                    a4:43:c6:d2:3c:05:cc:7b:b3:5e:7b:6a:e5:2a:8f:
                    c2:03:35:14:3a:f9:90:bd:ac:02:15:9c:5a:04:3b:
                    48:74:b3:9b:47:5c:4a:a1:20:92:f5:9a:e9:05:ec:
                    fe:ec:89:3b:a6:71:5f:b8:77:13:04:6a:b7:72:a7:
                    74:75:3f:41:49:8a:c9:5e:7d:ac:2d:71:3d:c4:89:
                    8c:25:af:a4:6f:73:72:82:66:2c:0e:f7:cf:a8:4a:
                    8e:29:fe:16:9a:2a:83:66:32:75:4c:d0:df:35:e3:
                    60:70:2b:e8:bf:b1:fe:26:bd:31:ff:47:c8:48:c3:
                    c1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EE:1D:6C:8F:1A:22:A8:80:EE:F8:C2:1B:FC:E3:FB:74:60:19:DA
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/380efb1f-0fd2-4a0e-ab47-6257340193a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:66:54:3f:39:2a:2c:d8:c2:84:90:a3:d6:8c:04:45:99:0e:
         8c:21:81:ef:88:70:6e:08:cc:02:da:49:63:30:11:6c:9e:77:
         48:a6:62:1c:81:f8:60:87:4a:5a:17:fe:f2:c1:c7:3b:c2:7d:
         96:0f:04:e4:91:e3:e5:bd:16:89:e4:3c:09:8d:90:aa:39:b5:
         df:ab:67:a1:63:2d:53:59:36:03:53:83:e7:aa:d5:ec:6b:b2:
         61:6e:eb:4c:e3:33:e1:3e:f2:0e:f2:ae:f1:3f:8f:e9:66:12:
         44:86:d4:8c:30:85:33:92:95:68:d6:38:94:c0:d7:5d:e1:2f:
         7f:41:76:54:f7:48:c5:96:57:d5:07:d2:ea:a0:b4:45:59:14:
         b2:0f:e5:e3:91:91:22:bb:b3:4c:b4:0f:79:54:89:9d:3f:97:
         c8:07:de:5a:f5:6a:64:ff:98:0b:e0:cb:39:20:7a:72:ba:77:
         2f:54:96:d1:1d:a4:77:58:01:e1:59:c2:50:42:84:41:a4:06:
         50:fb:30:19:c8:3f:69:fd:5f:38:9e:b1:2a:79:c6:aa:69:7a:
         28:31:66:ad:4f:8d:81:73:da:08:fc:ec:43:ca:f5:78:17:eb:
         09:da:52:4a:7b:2c:48:85:f2:f9:ad:bb:8e:4a:96:a0:ff:1e:
         54:a6:43:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----