Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/509b56e2-9be0-4bc9-a5de-b4c4d54e8252.roa
File:                     509b56e2-9be0-4bc9-a5de-b4c4d54e8252.roa (raw, json)
Hash identifier:          j3YsQXSr6JU01N3uNppAQnBJmegWJDEmHZWa/iTlPO4=
Subject key identifier:   35:B3:DC:DF:79:9C:D6:FC:F7:DA:BC:D1:54:34:09:E7:FD:0F:C9:25
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       748983AE34DF5879E6649EA762BBB93FB3459A6A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/509b56e2-9be0-4bc9-a5de-b4c4d54e8252.roa
Signing time:             Sun 04 Jun 2023 00:00:00 +0000
ROA not before:           Sun 04 Jun 2023 00:00:00 +0000
ROA not after:            Wed 07 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:89:83:ae:34:df:58:79:e6:64:9e:a7:62:bb:b9:3f:b3:45:9a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun  4 00:00:00 2023 GMT
            Not After : Jun  7 23:59:59 2023 GMT
        Subject: serialNumber=7ad5f30a8a4758bf99152e9b065042ca54c144b2614ca748577da235b3e19a18, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fd:7d:01:c8:aa:30:67:c0:e9:1d:e6:c4:d9:
                    cd:26:7b:7c:aa:be:6e:d1:20:57:7c:bb:55:fa:bd:
                    ff:2d:ab:8d:23:c0:8b:1e:67:fe:a8:3b:ea:f9:59:
                    be:66:fe:2b:bf:f6:30:80:5c:44:ac:3e:25:a7:01:
                    1b:64:c6:8f:55:b9:b5:bd:97:5c:6b:57:de:c5:d1:
                    50:fc:5c:2c:6e:73:3f:06:36:f7:8c:ef:81:91:d5:
                    22:ba:a3:59:19:7e:90:a0:c6:e2:f7:b6:50:8b:18:
                    aa:6e:17:dc:5c:02:37:3d:77:f9:3a:5f:d6:00:70:
                    65:90:d4:0c:b0:18:38:28:bb:c7:66:3c:1c:6c:28:
                    f1:7b:2c:0a:8a:e0:28:0e:8a:93:f9:8f:d9:94:02:
                    2b:cd:4c:33:7f:b2:67:9f:bd:5b:ad:be:8b:18:b9:
                    fd:ca:33:31:37:c4:06:0f:34:3d:74:98:67:d1:92:
                    5c:c0:54:6e:e3:99:60:fe:fa:35:dc:d5:af:5c:f9:
                    b9:ed:7a:4c:96:de:b2:28:21:fd:41:d5:53:3d:c3:
                    f0:7c:80:df:6b:ab:65:db:e9:9a:ad:1a:55:ae:e8:
                    c7:3f:fd:c5:5d:6c:52:33:44:c6:90:37:4d:e6:54:
                    fc:ae:50:ac:c3:9f:6e:ea:31:48:be:b2:89:f7:58:
                    f6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B3:DC:DF:79:9C:D6:FC:F7:DA:BC:D1:54:34:09:E7:FD:0F:C9:25
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/509b56e2-9be0-4bc9-a5de-b4c4d54e8252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:ef:c3:4d:16:ec:e2:ea:ee:97:f1:2d:55:a0:0c:c5:9b:bb:
         d0:d3:17:b3:e7:0f:a2:45:cd:7d:a5:56:02:f6:0c:12:c8:5c:
         e0:47:97:9e:79:a5:57:cf:2b:e2:b1:4b:ce:79:37:d4:d8:2c:
         f4:21:7a:74:2d:c5:b8:cd:0a:ef:86:0c:5e:f1:3b:f6:49:2c:
         4a:e0:57:74:ba:6d:5f:6a:0e:ff:5e:05:c2:51:9d:bc:fe:2e:
         9f:a5:b3:0a:f3:63:9e:af:13:be:b2:97:e6:68:93:04:60:7e:
         e6:52:7a:6a:2d:9e:60:9a:b2:e3:d2:c2:7c:b8:39:01:d7:c5:
         3e:dc:a3:52:b0:54:ac:78:3a:e3:48:49:ea:96:b9:5d:72:d4:
         9d:1c:c9:fc:c3:28:17:87:8e:a5:d5:8b:8b:4c:5b:9e:50:30:
         f6:5a:69:0d:1c:45:e4:15:9d:f7:54:18:2c:7e:8e:9d:40:17:
         75:75:c6:6f:1b:98:9a:ba:45:28:14:d4:0b:ef:0e:78:f8:3a:
         a8:a0:d4:20:e5:5b:18:21:7d:ab:0a:0f:1f:73:2a:66:fd:32:
         78:21:21:80:1b:0c:9e:90:d5:39:e8:80:55:ae:cd:bf:72:a9:
         dc:45:c5:90:04:dc:22:f1:03:4c:23:bc:27:8f:4c:64:17:64:
         c1:c0:67:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----