Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/50bbe6d8-bed7-4602-9e7d-d70d9ecf5aaf.roa
File:                     50bbe6d8-bed7-4602-9e7d-d70d9ecf5aaf.roa (raw, json)
Hash identifier:          MPUClw/4opwf6gZQGCVj0qHQJL4IJW/P+w06q6Ld8Jc=
Subject key identifier:   8B:8F:11:5B:57:8D:62:27:4A:8E:4C:25:8A:D5:59:4F:47:AA:B2:93
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       30A378CF15FDBF42D5021127247B557D68E5FD14
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/50bbe6d8-bed7-4602-9e7d-d70d9ecf5aaf.roa
Signing time:             Fri 11 Nov 2022 00:00:00 +0000
ROA not before:           Fri 11 Nov 2022 00:00:00 +0000
ROA not after:            Mon 14 Nov 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a3:78:cf:15:fd:bf:42:d5:02:11:27:24:7b:55:7d:68:e5:fd:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Nov 11 00:00:00 2022 GMT
            Not After : Nov 14 23:59:59 2022 GMT
        Subject: serialNumber=001d88ca1a75b26115b5bce278840cbda1545246888cb0e99a6f8a91590ebbef, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e3:92:d3:0c:8b:c8:b4:76:6a:46:71:4c:a9:
                    84:db:d3:b7:c6:b8:c5:13:f1:bd:bd:4b:e8:80:52:
                    68:2c:e2:cd:61:18:40:79:a9:54:a0:3c:61:a8:d1:
                    5b:6e:a9:ff:d7:4f:47:25:6d:bc:a7:6e:46:c5:3f:
                    93:33:a1:13:b7:b4:88:7b:b8:98:48:c4:ba:5f:9b:
                    8c:b5:f7:e6:47:0c:8f:d2:fe:09:88:84:af:8a:c9:
                    e2:10:39:c1:94:0f:8b:e9:7e:64:b6:b6:3a:c5:d0:
                    61:d3:fd:a2:d8:d1:0c:f1:47:7c:85:24:87:b9:d3:
                    cd:34:14:5d:8a:f5:c0:f4:5f:80:29:8f:c0:a5:02:
                    db:91:92:a1:50:84:9a:14:d7:10:85:85:59:e8:8a:
                    e6:ab:7f:04:47:f8:68:3c:9e:d4:95:61:d0:48:f1:
                    fe:9e:f7:ed:e3:40:7c:3c:22:23:46:38:7b:78:ed:
                    fd:49:e9:83:dc:30:e7:6b:31:e6:38:ca:86:f6:df:
                    2f:26:0b:df:a6:13:82:c7:1a:ff:06:d8:6a:c6:24:
                    86:a9:df:27:1c:24:ae:6f:b2:ad:6a:8b:87:22:79:
                    e8:dc:a9:de:d2:cc:c2:72:a8:37:05:17:90:6a:fb:
                    25:8b:84:57:4c:79:b3:33:b4:db:e6:73:39:8a:5f:
                    fd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8F:11:5B:57:8D:62:27:4A:8E:4C:25:8A:D5:59:4F:47:AA:B2:93
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/50bbe6d8-bed7-4602-9e7d-d70d9ecf5aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:d5:13:9a:f9:22:e2:02:43:92:24:bf:c4:8c:f3:0a:91:29:
         2e:12:6f:bc:2f:e9:31:3c:d4:20:5e:aa:98:12:2a:48:02:7d:
         af:ae:5e:b9:d1:32:b0:66:71:03:a1:87:91:2d:83:17:6c:ef:
         7b:04:b4:5a:38:1e:b9:71:5b:eb:55:79:ff:08:43:69:2e:14:
         cd:c3:a1:60:b0:d0:15:50:59:8a:4d:e4:c7:fb:86:c6:c1:fe:
         f0:82:6f:1f:ff:0b:8b:8c:d8:be:57:b6:53:f1:dc:29:6b:63:
         58:db:22:9c:86:9d:cf:10:2e:1a:a5:d2:69:8e:ae:ef:36:56:
         f4:4d:57:83:4c:0d:16:e9:0d:b4:2d:4f:3b:cd:c2:9a:6e:d5:
         66:90:29:4a:55:ea:c5:98:cc:ed:e8:d5:fd:39:8b:a7:06:21:
         7d:ff:ba:1b:4b:ef:5f:f7:ba:e4:be:44:9f:07:71:7b:a9:c6:
         e7:f3:4b:16:8a:aa:93:5b:91:cd:a3:74:60:b8:f6:33:45:80:
         dd:cb:7e:cb:76:2e:4c:bf:f2:17:2e:c2:79:06:03:48:fd:0e:
         62:a4:c0:73:3c:37:d3:4f:fb:42:c6:a8:ab:43:8b:a9:65:13:
         31:21:b7:22:1a:df:04:5f:aa:7a:53:b9:41:9e:b0:3f:47:40:
         72:38:59:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----