Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5ef95152-f21d-43eb-a2a4-e787a4949fa6.roa
File:                     5ef95152-f21d-43eb-a2a4-e787a4949fa6.roa (raw, json)
Hash identifier:          QeAk6ZWUCw+13QtVdULocs6CebiUrBePDWxkLPah9xo=
Subject key identifier:   55:A1:41:A5:E5:4B:78:9E:27:B8:83:D2:F6:B2:F3:D0:24:DA:5B:B6
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       67194AE6C513B9C12A6E3C2E54AF8276DE92812A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5ef95152-f21d-43eb-a2a4-e787a4949fa6.roa
Signing time:             Mon 16 Jan 2023 00:00:00 +0000
ROA not before:           Mon 16 Jan 2023 00:00:00 +0000
ROA not after:            Thu 19 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:19:4a:e6:c5:13:b9:c1:2a:6e:3c:2e:54:af:82:76:de:92:81:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 16 00:00:00 2023 GMT
            Not After : Jan 19 23:59:59 2023 GMT
        Subject: serialNumber=b88c8a506c3e7b3dceec33d692edb960959f2ed249cc6be0cf1ee4c09b3c3ed4, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8f:d2:cc:79:8d:89:dd:7c:d7:c9:34:28:08:
                    b9:99:f7:22:ed:e4:11:0e:79:0e:da:cc:be:36:94:
                    b5:62:0d:13:7e:e1:79:4f:77:7b:0a:1c:42:51:c3:
                    ce:ac:55:96:60:55:55:0a:e2:86:82:ac:73:b0:62:
                    0c:15:da:3c:70:21:33:4e:7a:76:c0:a5:7a:d9:79:
                    cb:76:99:61:35:45:6b:6c:b9:d6:4c:cd:71:f7:76:
                    c2:6b:90:16:b2:13:5a:a6:d7:db:ee:83:63:2f:d2:
                    8a:ab:12:e9:1d:33:58:cb:07:fa:0a:bd:bd:7f:20:
                    79:30:64:a7:e0:90:50:85:2e:a1:8d:2d:58:7e:aa:
                    0b:ad:2b:ac:81:f4:da:0f:b5:fb:3d:85:2f:fd:bc:
                    fb:7b:b4:01:cf:bc:02:37:04:76:fa:ff:07:8e:02:
                    36:a8:3b:1a:8a:bf:e5:6f:fb:dc:b9:20:c5:47:01:
                    a6:ed:a2:03:69:fc:d6:0f:7c:84:c2:3e:7f:6c:c3:
                    e3:8a:4c:55:72:e9:da:e9:bf:b0:cd:c7:2a:2a:51:
                    26:46:b0:09:15:b8:ea:39:b1:04:c2:fc:5f:13:42:
                    c8:14:89:fe:9a:60:0a:ce:99:e6:39:17:2d:e2:1f:
                    83:05:7c:90:8e:59:e8:51:05:03:88:8a:92:09:cb:
                    e7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A1:41:A5:E5:4B:78:9E:27:B8:83:D2:F6:B2:F3:D0:24:DA:5B:B6
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5ef95152-f21d-43eb-a2a4-e787a4949fa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:79:95:f1:1b:e6:c8:21:ed:32:8e:23:28:ae:87:42:ec:c5:
         6b:e8:5c:b7:b5:67:92:d5:8a:05:06:eb:50:5b:77:cb:8a:a4:
         c0:db:20:f5:dc:d9:c7:59:2c:1b:17:80:8f:a9:13:75:75:2e:
         97:b0:a9:f9:e2:57:92:8d:35:e8:6a:12:19:09:1e:28:98:c3:
         46:8f:1c:77:86:a9:0f:41:5c:64:d8:6a:3f:0c:a0:c6:5b:c6:
         5a:88:d8:5e:38:33:13:da:f8:41:be:76:8e:01:c7:17:70:c1:
         48:7e:f5:cf:e1:ef:51:05:70:ef:ea:f5:b1:40:6a:18:6b:7a:
         54:19:30:97:d2:6c:33:2d:df:76:4b:c7:ab:1f:06:b8:e7:99:
         8d:d0:45:19:09:db:1d:5b:60:0a:3f:46:15:df:26:7f:66:30:
         1d:ac:6e:2b:ec:95:17:ec:da:8d:e6:67:fd:d1:67:fb:08:5b:
         30:2b:75:3a:f4:ac:6e:f6:58:f5:7e:f2:33:f0:ca:3d:70:ac:
         62:a7:42:fe:ba:8a:77:70:77:bf:a3:c0:ee:36:ee:39:bc:b9:
         46:e7:02:f3:2b:01:fc:f5:eb:f6:8a:de:b7:51:54:00:6a:12:
         42:15:60:a0:ea:63:ed:b3:3c:a0:f0:0a:7a:ae:19:d8:22:a8:
         15:60:f9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----