Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/650950b9-f2e2-4392-8fce-f9a10a4a73c9.roa
File:                     650950b9-f2e2-4392-8fce-f9a10a4a73c9.roa (raw, json)
Hash identifier:          eLTTLYFSXHJOIl/Ctyr0Rkbo6ARqZLxwZRrmCxOnbE0=
Subject key identifier:   C7:F0:A5:FE:06:E2:15:17:8B:6A:7B:50:5C:E5:26:E2:3D:CC:DE:37
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       16E65F4A6554AA5E806786128474ACCF36FC6F7C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/650950b9-f2e2-4392-8fce-f9a10a4a73c9.roa
Signing time:             Wed 12 Apr 2023 00:00:00 +0000
ROA not before:           Wed 12 Apr 2023 00:00:00 +0000
ROA not after:            Sat 15 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e6:5f:4a:65:54:aa:5e:80:67:86:12:84:74:ac:cf:36:fc:6f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 12 00:00:00 2023 GMT
            Not After : Apr 15 23:59:59 2023 GMT
        Subject: serialNumber=cd559b49e8ea2c1ad2bc4bb330add8290c70b7a855c636f936cdb6731b66bd10, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6a:e0:00:c4:5a:72:fd:43:85:b1:64:f0:d8:
                    ec:21:1f:7e:2c:92:7f:15:6e:d7:02:53:27:8e:b7:
                    58:50:52:19:5b:b2:0f:e6:a0:60:fc:3b:ea:60:6b:
                    07:d7:ff:4f:58:be:74:4a:d8:55:99:33:da:58:e0:
                    9e:e9:3a:ff:61:60:07:01:b5:fb:d3:3c:d3:e4:80:
                    c2:a9:d4:f9:1c:c5:0b:14:6b:7b:61:e4:69:c3:d5:
                    b8:b8:33:96:c8:16:48:3f:89:39:18:ca:fd:f7:b0:
                    34:0b:9f:4c:5a:a5:1a:14:42:5d:84:35:b9:07:56:
                    86:75:da:f4:1b:c7:28:2c:ee:d5:c9:7a:2b:55:9e:
                    15:f2:d2:65:8e:10:17:11:56:4a:c0:63:17:ed:52:
                    20:02:49:c2:b1:7a:54:62:68:8b:2b:89:cd:4a:7e:
                    90:05:66:6b:91:2c:fb:f4:2d:c7:2c:15:4b:c9:cb:
                    a4:43:e3:a9:f3:f0:8a:be:63:a2:e8:b5:40:82:c5:
                    0f:07:25:3a:64:ff:f8:4d:19:7c:f3:6c:95:16:ea:
                    7d:fa:d4:a8:80:03:03:c4:11:ba:6e:24:2a:ee:b6:
                    1d:8c:33:0d:16:1c:94:2b:b1:30:5b:d6:24:3e:4b:
                    b9:38:27:c0:69:e7:77:6e:bb:77:3b:24:21:38:e2:
                    3a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F0:A5:FE:06:E2:15:17:8B:6A:7B:50:5C:E5:26:E2:3D:CC:DE:37
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/650950b9-f2e2-4392-8fce-f9a10a4a73c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:4f:03:aa:f0:e8:e5:71:0b:83:2b:3a:93:cb:4d:fd:86:7f:
         bc:ff:fe:26:b3:91:28:99:00:f4:0b:cf:a7:47:b1:2d:6c:26:
         ad:8b:3f:35:c9:2f:fa:65:5b:8e:53:9e:fa:16:fb:63:a5:3a:
         1b:69:8a:91:36:d4:94:d4:53:ee:20:6e:7e:09:63:84:4a:a8:
         30:69:4f:90:78:59:b4:ec:55:dd:a5:28:0e:54:32:27:6a:e5:
         f5:51:70:62:91:df:c7:8a:f7:3d:03:06:42:11:0b:c4:01:3d:
         f1:2c:3d:ec:65:15:37:06:9e:5a:8c:84:23:0e:0c:a5:83:95:
         e2:fe:48:9e:76:10:95:c0:5b:17:67:53:27:2b:b4:7c:c1:a3:
         3c:e7:2d:e7:1d:bf:86:68:22:4e:95:5b:9c:b9:78:e2:d0:68:
         60:b1:85:24:c8:c4:c3:71:66:41:6a:59:4c:7f:1d:7d:07:bf:
         04:b6:5d:f3:43:6f:96:40:58:42:83:e5:20:12:80:e6:15:00:
         c0:b4:ee:d7:18:7c:85:a2:f6:e8:71:6b:9a:dd:7e:9f:d4:03:
         fa:74:96:de:7d:cf:c7:38:cd:4a:bb:e6:a6:75:57:43:65:44:
         69:2b:3b:e1:cf:89:62:eb:24:a0:f1:3a:31:8a:36:37:c1:91:
         82:5c:81:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----