Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/41a0f3b1-5c4d-4ee1-9e22-8cdfe5c84f56.roa
File:                     41a0f3b1-5c4d-4ee1-9e22-8cdfe5c84f56.roa (raw, json)
Hash identifier:          weXnNvcs3FlRgIS6Q8ua8oguJSD2fCqbfOmgMsp4oZQ=
Subject key identifier:   83:5F:93:A7:9E:DD:0E:43:FA:11:F0:BA:CA:89:99:12:A2:F0:A6:03
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0DFBF463207AB41C3F0C461FDDE895C64336F96A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/41a0f3b1-5c4d-4ee1-9e22-8cdfe5c84f56.roa
Signing time:             Mon 16 Jan 2023 00:00:00 +0000
ROA not before:           Mon 16 Jan 2023 00:00:00 +0000
ROA not after:            Thu 19 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:fb:f4:63:20:7a:b4:1c:3f:0c:46:1f:dd:e8:95:c6:43:36:f9:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 16 00:00:00 2023 GMT
            Not After : Jan 19 23:59:59 2023 GMT
        Subject: serialNumber=d8ad23c720a24cc55b9607e6c13d52f1b8d00e33c74ffccccf4d86224e27fb98, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d2:5d:58:1d:9c:d5:c1:5b:69:a6:c6:4c:ff:
                    7a:cf:ee:3c:a5:d4:a9:e6:71:00:ba:68:99:f6:4f:
                    27:74:aa:4b:d8:70:71:73:55:bc:fb:65:f0:38:ff:
                    44:cc:ea:26:13:20:33:4b:9b:9b:7c:bb:88:43:dc:
                    95:8f:00:d0:24:59:b8:b1:42:44:53:da:c5:ba:80:
                    dc:75:bb:fe:df:05:bb:a9:e3:28:84:3a:4f:7b:4c:
                    b5:43:37:40:78:24:5a:6d:65:c7:bd:83:e7:52:96:
                    f6:be:b1:d7:23:85:54:2d:ff:26:05:54:84:a0:31:
                    82:6a:b0:f2:1f:db:5f:bf:5c:39:6a:07:ec:e2:9c:
                    ac:7e:0e:c3:31:1c:71:75:04:4b:17:1e:02:a7:88:
                    d7:08:79:62:14:55:a1:ad:66:fe:49:70:81:6b:f9:
                    f5:b2:d4:80:56:4c:2d:97:5b:d0:5b:ab:b1:99:39:
                    4d:24:a5:00:d7:cd:be:8c:ed:7d:b6:19:01:06:a8:
                    78:4b:b0:a4:e2:5c:3b:a9:cb:c4:cb:cb:3b:49:c3:
                    60:bf:a6:88:9e:c0:5f:4a:00:4a:c6:1b:aa:37:1f:
                    72:ed:7b:d2:32:31:35:b2:3f:99:e3:27:96:72:d2:
                    33:47:28:e0:75:42:a7:74:b6:eb:18:fa:99:7f:8f:
                    5f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5F:93:A7:9E:DD:0E:43:FA:11:F0:BA:CA:89:99:12:A2:F0:A6:03
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/41a0f3b1-5c4d-4ee1-9e22-8cdfe5c84f56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:5a:ec:a6:16:f1:14:e3:86:5b:04:7a:a2:b1:8f:fe:06:b1:
         a6:0a:e0:23:ca:a3:ef:00:6d:92:a6:0d:1b:90:3a:92:9a:93:
         d8:47:f7:bd:30:90:14:46:b7:65:d9:c1:41:8b:7b:f3:f7:52:
         8d:ea:b0:3c:64:b2:c7:04:9f:af:0e:97:e3:56:d5:f3:df:23:
         5b:b1:fe:ea:7f:b0:17:bb:53:ef:33:d3:4a:fd:51:ab:03:16:
         95:d0:2d:fc:6f:cb:e0:55:fc:4d:97:60:f9:11:d1:f7:68:2f:
         90:40:19:7e:61:bd:99:75:8a:d4:51:1b:5c:df:f7:22:04:49:
         bc:bf:6c:cc:10:be:5a:c1:44:57:3b:19:01:ad:ab:04:ef:98:
         0a:82:8c:79:1e:82:97:0a:4b:52:a2:ee:f4:e0:c2:08:7e:aa:
         eb:aa:aa:82:c5:a0:d7:02:ac:62:2c:1f:e4:66:38:13:a2:1c:
         33:70:d4:d5:ec:28:3c:c9:9b:6c:46:47:6f:2a:30:a7:cf:4b:
         c6:98:a6:1b:4d:c0:bd:03:32:89:03:6d:3d:a2:62:26:ce:b7:
         70:60:ca:3f:3b:ed:b1:cb:cf:8c:68:c0:6e:2d:ab:7e:39:3e:
         78:aa:60:5a:6b:87:8d:53:c1:11:ac:07:a8:01:82:8f:20:9b:
         42:eb:6e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----