Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4ca3d651-bf4d-47c4-811b-61e5a69c3554.roa
File:                     4ca3d651-bf4d-47c4-811b-61e5a69c3554.roa (raw, json)
Hash identifier:          N+BvO6gVCOq36QQzmUPG3BwPu6v+PvmGTD3ql5m73BI=
Subject key identifier:   C2:E3:33:AB:5A:3F:BD:EC:BA:7B:EA:74:4C:36:19:AE:2E:81:F2:83
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2428CA7B1BCF4FA1DF8FB0FBA153AA331D17B8E3
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4ca3d651-bf4d-47c4-811b-61e5a69c3554.roa
Signing time:             Wed 01 Mar 2023 00:00:00 +0000
ROA not before:           Wed 01 Mar 2023 00:00:00 +0000
ROA not after:            Sat 04 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:28:ca:7b:1b:cf:4f:a1:df:8f:b0:fb:a1:53:aa:33:1d:17:b8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  1 00:00:00 2023 GMT
            Not After : Mar  4 23:59:59 2023 GMT
        Subject: serialNumber=53cb49edc4a66bc2f57d3a7869273c21201249e0916b0f808b74399dfa2834d9, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d7:b4:bd:3f:d6:4c:e9:bf:17:0f:71:66:15:
                    ee:83:bc:27:9a:4b:82:6b:7e:fc:a5:49:96:82:d0:
                    09:88:46:c6:a4:5f:3a:20:72:67:ae:bc:19:06:4f:
                    4b:11:e3:4b:84:ce:86:c2:e5:d4:34:d5:30:31:ea:
                    30:d0:42:3e:e7:28:af:77:43:01:7d:7f:47:9d:d1:
                    13:b7:0c:b1:ff:3b:e8:dc:f7:b7:42:11:6f:a4:74:
                    68:db:27:6d:11:fa:f1:93:a1:8a:17:c1:34:c6:22:
                    70:06:62:4a:d1:f9:f0:91:03:8f:f7:98:cb:5a:ca:
                    ff:68:7e:36:25:56:8f:a3:25:27:20:62:62:ae:79:
                    7b:7b:ef:59:02:20:2b:ce:4d:ee:fc:8d:97:a5:a5:
                    dc:10:5b:68:5f:ca:d3:3a:b8:15:7e:41:d8:bc:55:
                    a3:56:c5:a6:e6:12:0c:81:24:67:93:18:d9:17:65:
                    71:f2:1f:55:90:9e:21:fb:1f:20:32:be:56:e0:00:
                    de:8f:fd:7e:38:57:25:50:51:44:bb:27:c7:8f:1a:
                    17:85:2f:91:ae:06:1e:91:46:39:60:47:9e:a5:be:
                    c3:19:02:9a:ee:ce:f8:89:f1:26:40:be:0b:6d:90:
                    9a:61:a6:ac:cc:40:c4:bc:93:2a:ac:2e:77:bb:f3:
                    72:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E3:33:AB:5A:3F:BD:EC:BA:7B:EA:74:4C:36:19:AE:2E:81:F2:83
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4ca3d651-bf4d-47c4-811b-61e5a69c3554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:e7:d9:6b:da:a4:21:8d:7e:62:62:35:51:a4:fa:36:64:4f:
         84:97:46:29:6f:7b:2a:f1:3d:b0:9a:39:de:31:89:28:4f:ea:
         4b:a5:8e:5c:58:8b:33:1a:65:25:49:c0:32:13:f3:20:8c:db:
         cd:23:02:17:c4:25:0f:35:39:7b:66:7c:e6:9c:ae:f1:a2:1a:
         c6:b1:75:95:91:00:3c:9a:26:4b:05:e1:e8:0a:c7:42:ea:e3:
         b1:9a:59:c5:c2:12:f4:b8:bd:64:91:cb:38:e1:ec:9c:69:3a:
         04:35:71:48:c0:b6:59:58:6a:6c:0d:22:bc:40:d8:4c:60:8c:
         e0:9e:dc:74:e4:2a:27:fa:f9:82:5f:45:be:88:b4:f4:bf:88:
         cb:23:a1:ac:48:c0:21:b7:63:01:37:73:f3:15:a7:d0:a0:88:
         8a:86:16:72:33:05:81:d7:c9:1e:d1:d9:b3:f4:6b:df:ae:a0:
         6e:c8:91:c2:20:78:e5:77:83:54:b0:2f:e9:85:87:7c:51:d0:
         6e:1b:c9:06:77:62:0c:18:77:cf:14:c6:af:e3:84:65:97:33:
         23:84:c9:43:9f:25:13:12:70:6d:df:9d:d2:c0:0b:65:d8:10:
         84:cf:e9:42:ee:1a:ef:15:b7:85:16:61:f4:99:3a:27:9d:64:
         c8:19:76:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----