Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4fda7ce4-4dd8-411f-a6cd-e3c864852012.roa
File:                     4fda7ce4-4dd8-411f-a6cd-e3c864852012.roa (raw, json)
Hash identifier:          f+hKqmrgq4+yk/SXqfOf/YO4mosUC+UXYwsJIII304c=
Subject key identifier:   E5:68:7F:D6:A8:76:D0:2E:D1:DC:99:3D:4B:AA:BB:4E:3A:1E:B0:B3
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2F628241CFE1CB59896F991512D153E9A1C25279
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4fda7ce4-4dd8-411f-a6cd-e3c864852012.roa
Signing time:             Wed 04 Jan 2023 00:00:00 +0000
ROA not before:           Wed 04 Jan 2023 00:00:00 +0000
ROA not after:            Sat 07 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:62:82:41:cf:e1:cb:59:89:6f:99:15:12:d1:53:e9:a1:c2:52:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan  4 00:00:00 2023 GMT
            Not After : Jan  7 23:59:59 2023 GMT
        Subject: serialNumber=0bab4a1de64194c78f4e4b215a145bb160b8f5be41990ed68131edff2201b5c3, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:de:ee:9e:53:4c:3d:50:c8:48:da:23:65:f0:
                    5d:a2:66:2a:81:9f:18:d2:c3:5a:e4:0c:94:0a:e1:
                    67:ed:6b:61:17:83:7e:ea:ea:88:e1:9b:9f:a9:48:
                    ac:ed:42:26:75:99:a0:14:3f:1d:d2:ac:99:2a:c5:
                    28:91:b1:47:0f:e4:6b:74:31:33:25:d5:b1:9b:d9:
                    ec:cb:9d:ad:11:0f:a4:c7:55:70:2d:c6:42:8e:59:
                    c5:40:38:47:ae:1c:6e:4e:eb:af:c8:3d:0f:f9:b7:
                    e3:de:66:a9:e4:f4:3d:99:c6:8d:2b:53:81:bd:17:
                    f2:99:a6:24:58:93:c7:83:e2:ed:be:d9:b3:96:8a:
                    e7:5c:21:17:17:71:a0:ad:70:dc:7c:34:7b:2a:c4:
                    63:dc:02:ff:d3:72:31:6e:ea:9f:82:bf:02:b1:d9:
                    fc:10:00:69:39:7d:83:6f:37:00:db:d4:a7:d0:1e:
                    94:51:40:ef:05:b4:7b:66:19:07:ae:6d:99:5a:f2:
                    5d:87:75:bd:88:dc:ac:b2:aa:04:17:60:a1:61:e9:
                    8f:13:dd:e3:30:11:6b:e1:1b:44:13:3a:7e:ff:6b:
                    60:b6:b2:d5:85:a8:ac:1b:39:4a:93:a6:4e:93:98:
                    64:d7:af:aa:6c:0e:b3:9e:06:51:56:13:f3:f3:a5:
                    ae:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:68:7F:D6:A8:76:D0:2E:D1:DC:99:3D:4B:AA:BB:4E:3A:1E:B0:B3
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4fda7ce4-4dd8-411f-a6cd-e3c864852012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:31:63:28:2f:5f:49:43:67:4a:89:34:e5:72:99:c0:83:25:
         37:29:a6:1d:64:b6:17:7a:a9:80:9c:5c:2c:92:8e:44:09:97:
         65:35:32:2a:be:e7:3e:f2:c0:0e:fa:ef:d1:ac:12:ee:9e:23:
         14:0d:61:8d:3c:c9:83:51:c8:5c:55:14:9c:b9:f0:67:c1:70:
         74:69:b2:b3:9c:ea:18:fb:4a:c4:e4:fb:1f:71:93:d5:38:ab:
         e3:bb:88:95:39:bc:a6:19:cc:a1:ea:06:ed:77:ab:18:84:4a:
         ec:bd:ac:e5:82:3c:9c:74:f3:c9:10:7c:45:11:80:82:e7:48:
         d4:8f:6e:82:d6:10:68:34:92:e2:98:e8:38:e5:52:b8:57:e3:
         5c:d7:6a:a6:f4:99:52:f4:62:4e:41:08:7d:95:f0:a9:13:26:
         4e:d1:f1:fa:55:47:22:dc:eb:1b:fd:0c:16:c5:5d:6d:e1:95:
         3f:bd:be:e0:fa:b7:24:0b:92:e2:6f:18:a5:38:d9:83:b4:dd:
         f5:c9:6a:f0:22:a8:ba:d6:35:cd:fb:f6:5e:f5:a5:d9:70:03:
         00:7a:07:ef:58:36:0a:39:de:a6:03:81:53:46:f8:07:f8:4a:
         b6:32:ff:c7:f2:9e:55:c0:53:db:e2:f6:7e:e5:ce:d8:43:8a:
         af:da:b8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----