Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/50f0710f-9b8b-4464-b867-2c240d4b2a0b.roa
File:                     50f0710f-9b8b-4464-b867-2c240d4b2a0b.roa (raw, json)
Hash identifier:          vwLGMFhWrEByqv8aOhZAL1nhDnS4njG5PIb2HxeQsxs=
Subject key identifier:   A0:FA:09:C5:1B:24:66:63:3F:01:D9:23:85:32:40:D8:F0:8E:F1:F4
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       24CC77E927D1BA83C86AB0826CEAAB3CF78B8910
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/50f0710f-9b8b-4464-b867-2c240d4b2a0b.roa
Signing time:             Mon 20 Mar 2023 00:00:00 +0000
ROA not before:           Mon 20 Mar 2023 00:00:00 +0000
ROA not after:            Thu 23 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cc:77:e9:27:d1:ba:83:c8:6a:b0:82:6c:ea:ab:3c:f7:8b:89:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 20 00:00:00 2023 GMT
            Not After : Mar 23 23:59:59 2023 GMT
        Subject: serialNumber=6ab3cb28ac0ad3a517ba8866dc3edd603473d3779cfdb127ff1886246ec8196e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2a:d3:69:97:c9:8e:c1:13:40:bf:51:67:d2:
                    e7:04:c5:80:85:9c:56:2e:1f:f2:7c:ec:04:e6:67:
                    fc:c0:38:df:e9:12:23:d2:20:31:87:3a:7d:e1:3d:
                    e7:b9:5a:85:9d:b9:09:13:6f:96:09:53:d9:4f:5c:
                    73:be:9a:a9:31:4d:72:78:70:9b:83:35:6f:77:38:
                    11:4b:e5:51:0e:0e:ee:6a:43:ca:65:d8:4f:a8:17:
                    3d:ac:e2:82:17:60:e4:4a:b7:86:97:fe:01:c3:cf:
                    0e:53:7f:31:af:48:ab:a4:41:7c:ee:42:49:c3:44:
                    f2:e3:ca:63:79:97:9f:65:5f:c1:cb:38:7d:b7:89:
                    20:54:3a:86:02:ed:d7:27:f8:54:ac:6c:9a:d0:25:
                    01:dd:e7:12:bb:00:81:50:52:f8:32:ba:b7:86:bc:
                    7d:83:3c:fa:65:e1:ff:7a:43:f5:90:82:c3:9a:47:
                    04:cc:e5:11:83:0a:90:96:c1:1c:41:5a:7c:da:2c:
                    a9:49:42:93:31:9a:8c:c3:b8:2d:7c:fc:d6:ac:87:
                    68:78:15:85:97:f7:42:ab:e8:8c:f7:cd:6d:5e:06:
                    80:04:5a:18:de:41:ae:94:2a:5e:25:32:e4:22:b3:
                    a1:ca:1b:6b:fb:36:2b:6d:fb:3a:40:f8:22:46:31:
                    45:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FA:09:C5:1B:24:66:63:3F:01:D9:23:85:32:40:D8:F0:8E:F1:F4
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/50f0710f-9b8b-4464-b867-2c240d4b2a0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:58:86:9d:40:25:c9:3a:5e:f6:d9:bb:3d:7f:6d:d9:5d:6e:
         6a:9f:3d:9d:ef:e4:e9:d3:c2:a9:04:c2:35:5b:e4:5e:ec:79:
         2e:b9:85:3c:66:e3:a4:35:f9:a9:fc:7c:7f:47:c4:59:11:09:
         a0:cf:b0:b7:e2:ce:ba:4b:dc:32:4c:25:65:57:fc:ff:1a:3b:
         41:0e:f0:cf:4a:91:07:8b:63:0f:d3:75:4a:82:c6:e7:2f:f1:
         49:5f:a4:16:ef:a6:d8:9d:f3:53:cd:bf:9a:aa:09:8b:76:ea:
         26:59:29:1e:c3:d7:5a:24:bb:1a:ae:77:e6:56:d7:4f:a5:f5:
         08:80:da:ba:a5:ae:15:e1:34:de:ad:9a:71:53:1b:56:10:c2:
         96:b7:a3:1e:82:1b:66:37:db:48:49:b0:bc:f5:f3:9c:dd:b5:
         ae:13:92:91:a6:d4:6c:b1:14:a1:2b:a0:d1:8f:04:ba:d5:fd:
         8a:7a:e2:f3:87:89:96:de:12:67:79:fc:f7:d1:36:a6:ff:de:
         45:b0:30:8c:e5:4f:79:0f:6a:85:88:e1:e8:db:65:e6:f6:93:
         7e:ad:02:0a:6f:c9:2e:ca:48:13:5f:9b:88:e0:80:8a:7f:3b:
         c7:92:5a:f7:66:8c:7c:a2:b1:20:25:90:1d:5d:5e:e1:0f:f1:
         0e:64:59:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----