Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5fb9fec0-2b72-48c7-993e-5def1c543e8f.roa
File:                     5fb9fec0-2b72-48c7-993e-5def1c543e8f.roa (raw, json)
Hash identifier:          Nw2lDNXQoyWIOCuwFcbrOK5V62HEF/JwIJrsNzKDfZo=
Subject key identifier:   81:06:82:BF:A4:84:AE:A6:7D:00:BD:93:B3:F9:2B:B1:B3:77:C0:4F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4ED9A0B88DCED41C216229DC1FDAB311F5B7E8A5
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5fb9fec0-2b72-48c7-993e-5def1c543e8f.roa
Signing time:             Wed 05 Apr 2023 00:00:00 +0000
ROA not before:           Wed 05 Apr 2023 00:00:00 +0000
ROA not after:            Sat 08 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d9:a0:b8:8d:ce:d4:1c:21:62:29:dc:1f:da:b3:11:f5:b7:e8:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  5 00:00:00 2023 GMT
            Not After : Apr  8 23:59:59 2023 GMT
        Subject: serialNumber=8dac585760995bd4ef5769cf12ec803ea94a29ebe04c975402232c8f952a96e4, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0a:16:fb:dd:81:52:08:66:04:a3:9f:62:26:
                    c2:09:44:22:ef:c0:7c:e4:e1:c4:ae:23:2a:21:0f:
                    48:93:bc:a2:fc:84:fc:f0:45:87:bc:4e:a4:3e:87:
                    52:c6:3b:7a:5e:d1:41:45:de:38:dd:f3:68:95:41:
                    24:7f:2c:f8:e3:1f:2d:e0:4a:66:26:b2:91:eb:97:
                    46:50:e6:16:d6:b7:1d:52:06:25:8d:02:12:2e:9d:
                    08:56:62:96:1f:88:45:51:fc:51:ed:f4:8e:48:81:
                    73:24:ea:30:65:ef:ff:8b:db:d9:0a:07:01:2e:e5:
                    3d:67:30:49:92:e2:53:7d:55:6d:1f:06:03:f1:7d:
                    f6:61:1a:19:a2:75:c7:16:e4:c9:53:e0:32:98:19:
                    04:51:23:59:90:5c:77:a0:78:fc:4f:73:38:20:32:
                    9e:4d:c6:05:07:83:de:b1:3e:e0:3a:57:e4:7a:89:
                    a5:85:2f:7a:61:d7:4f:f8:ad:9f:99:7a:33:44:a0:
                    f4:15:fb:1a:ac:88:4a:a2:85:3d:63:23:8f:bd:49:
                    f2:c2:af:cf:c7:18:f6:7d:5d:71:23:99:b3:ed:59:
                    d5:7f:e1:a2:2e:cb:a2:aa:65:cd:2c:35:aa:03:4f:
                    dd:d8:4a:64:25:d9:07:d2:8e:9d:e2:fa:9e:1a:53:
                    65:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:06:82:BF:A4:84:AE:A6:7D:00:BD:93:B3:F9:2B:B1:B3:77:C0:4F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5fb9fec0-2b72-48c7-993e-5def1c543e8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:ab:ae:e2:9b:a1:da:39:15:46:1a:ab:94:95:ab:16:71:10:
         d6:2e:7c:26:e5:54:b5:38:87:87:e5:3f:11:ae:a0:c3:61:a9:
         3d:d6:59:1a:85:b6:ec:f3:d8:b8:bc:bf:3b:81:ff:f5:2f:bf:
         f1:61:63:27:77:db:6e:50:32:11:71:ec:11:df:fe:cd:f0:7f:
         af:7f:d9:74:ff:7a:7a:37:6b:63:69:0e:0f:54:70:dd:c4:5a:
         98:f2:f9:21:84:a8:e0:00:7b:d9:c6:7a:65:ce:27:c6:b8:f8:
         0f:fc:39:ce:4a:0d:3a:ba:2a:bf:0e:32:8d:80:7f:27:a5:d1:
         d4:71:61:f3:80:a7:7c:86:4e:8b:09:f4:6e:48:9e:52:57:2f:
         db:2c:0b:14:11:e2:d8:50:1e:a0:61:8f:d7:2d:19:1f:25:e3:
         a9:49:b7:ee:25:53:8a:8c:ad:0b:fb:2e:e1:0e:d2:c1:10:a2:
         bc:93:dc:c4:c6:6b:d8:6a:d9:12:31:55:64:e8:72:09:0c:89:
         22:f1:a4:36:34:39:6d:38:a7:2a:a1:d6:64:ef:97:62:3c:0f:
         ee:bf:ce:66:d7:cd:a4:ca:c6:42:32:7f:36:7a:e2:b2:17:12:
         88:ce:61:e0:c2:a6:88:76:24:ff:a3:2c:a1:8e:92:75:0e:0f:
         14:76:7a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----