Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4ea40793-55e7-4f0f-a57e-64cefaf394a5.roa
File:                     4ea40793-55e7-4f0f-a57e-64cefaf394a5.roa (raw, json)
Hash identifier:          xgd5IdgzZrqElztfWnewKAwnX5YerLBxkxLzE91ALtE=
Subject key identifier:   B9:4B:8E:BD:FE:D7:64:1A:67:46:22:A1:63:48:7B:6B:BE:7A:A9:AF
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0563D0581FEC858E271C40EFEBF89C7A39F9792E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4ea40793-55e7-4f0f-a57e-64cefaf394a5.roa
Signing time:             Thu 23 Feb 2023 00:00:00 +0000
ROA not before:           Thu 23 Feb 2023 00:00:00 +0000
ROA not after:            Sun 26 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:63:d0:58:1f:ec:85:8e:27:1c:40:ef:eb:f8:9c:7a:39:f9:79:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 23 00:00:00 2023 GMT
            Not After : Feb 26 23:59:59 2023 GMT
        Subject: serialNumber=c4a335a1fe56ebf4ed3aa6222c07e1c597bee3fb1cfb890aeb80f9cc014bc838, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:0e:f6:6a:38:5c:b2:45:92:8d:77:a3:43:
                    b7:2b:3f:b8:fa:77:b7:81:f6:a6:9f:b4:f2:c6:99:
                    44:15:bd:82:2c:b5:78:f8:b3:83:7a:cb:8f:69:79:
                    2c:17:5d:6b:f3:89:9b:3c:e3:8a:b4:39:cc:44:4d:
                    c6:8e:84:ab:a7:bc:05:f5:0c:25:61:c5:89:00:a8:
                    f5:71:4e:45:d6:cf:ca:e1:0f:0f:b1:e1:a0:f6:54:
                    c1:d0:78:a6:a3:30:f1:e2:fc:0f:6c:31:bf:57:24:
                    d4:5a:f3:1b:55:60:38:8f:9e:18:63:f4:d5:93:53:
                    20:81:29:df:81:b3:e1:72:60:37:79:63:83:b5:b7:
                    15:9e:44:64:55:c5:1c:ee:de:18:cd:15:2c:6d:a3:
                    c5:27:c4:94:31:ef:39:e1:18:d6:58:29:cd:eb:c2:
                    b0:a4:8f:64:57:7c:7a:04:5d:5b:13:a4:7d:b9:d5:
                    55:d5:82:36:19:b6:b3:53:82:fc:04:62:31:17:9c:
                    32:71:ad:e8:88:ff:66:f9:ec:d5:ea:44:1d:5e:50:
                    43:1f:69:db:c6:10:d9:32:96:48:40:76:7f:2c:d3:
                    4b:84:99:f9:b0:05:53:76:e4:af:84:73:57:c1:28:
                    5d:48:d1:ee:d4:18:fd:74:50:6f:dc:fb:ce:86:0b:
                    57:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4B:8E:BD:FE:D7:64:1A:67:46:22:A1:63:48:7B:6B:BE:7A:A9:AF
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4ea40793-55e7-4f0f-a57e-64cefaf394a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:58:9a:0c:62:13:67:3b:29:63:99:99:03:88:ad:27:a3:39:
         39:3e:b1:18:6f:1f:52:0e:c8:6f:13:ec:70:ae:e5:8e:6c:ad:
         13:1e:94:54:6a:05:e5:eb:4c:aa:b7:fb:ce:65:f0:05:f2:f1:
         1c:73:71:24:e7:1b:0c:5d:3c:a1:09:5d:d8:d0:35:37:c8:6a:
         ce:2a:a9:97:1e:27:27:5d:e4:2a:41:64:b5:57:85:66:c3:0b:
         9c:b0:32:40:22:d2:09:c3:66:37:b4:a5:56:82:f1:d7:db:20:
         dc:06:09:4e:df:30:67:d3:25:c0:05:83:27:1b:6c:e8:bf:32:
         79:72:60:91:95:2d:c8:16:9c:18:9a:5f:1b:72:df:d3:51:0e:
         2a:0f:99:ad:6a:98:51:4e:c9:aa:f4:21:9d:69:46:4a:60:bd:
         77:e7:c8:89:ec:d3:e5:06:5e:b9:7c:4c:2c:89:d9:ce:21:f7:
         f0:42:14:f0:4a:9c:1d:62:94:53:b8:e2:0c:20:97:c7:1e:3f:
         0c:a1:87:a9:4e:6d:60:f7:8a:18:de:c0:8a:5a:3f:dc:79:5c:
         64:9e:63:11:af:a0:08:7a:aa:48:cf:51:28:bf:2e:c5:58:ff:
         4d:8e:08:6e:51:0a:a5:12:82:85:75:c6:1f:bc:70:79:32:67:
         7a:2f:b3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----