Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/81d7152e-d9b0-4723-ac3e-68ea86c344e2.roa
File:                     81d7152e-d9b0-4723-ac3e-68ea86c344e2.roa (raw, json)
Hash identifier:          ZwNVaOA4QMpV/1AFbTK0oP+5td5I2wAlF+7/gp7syWg=
Subject key identifier:   DF:8E:6A:DA:4B:62:88:3E:58:12:9F:43:D2:DD:13:E1:45:96:20:19
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5A3FC78DF53D973780F1F4825E07D2E3E9D57003
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/81d7152e-d9b0-4723-ac3e-68ea86c344e2.roa
Signing time:             Tue 14 Feb 2023 00:00:00 +0000
ROA not before:           Tue 14 Feb 2023 00:00:00 +0000
ROA not after:            Fri 17 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3f:c7:8d:f5:3d:97:37:80:f1:f4:82:5e:07:d2:e3:e9:d5:70:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 14 00:00:00 2023 GMT
            Not After : Feb 17 23:59:59 2023 GMT
        Subject: serialNumber=5032252faaaddd9fe2c9d45eb926278017e34e9c28ee5f79f4c6a45f0741cf9c, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5e:2b:8d:26:00:8f:4f:ed:82:ad:a9:86:f4:
                    61:1a:58:36:c7:17:b7:76:3c:b3:46:52:ba:c1:c2:
                    2b:ca:81:24:20:07:8e:1e:e9:1e:a9:08:31:c2:dc:
                    77:98:a3:dc:d4:73:c4:5c:1d:33:5f:73:e2:d4:2d:
                    50:44:e9:0b:0e:53:fb:42:52:1d:71:2d:32:3d:9d:
                    c0:67:64:69:8d:e2:b3:f5:4b:35:85:49:8c:ce:c4:
                    33:cc:26:be:cb:ae:e8:d3:5c:f5:66:11:22:cc:74:
                    14:6c:99:1a:d6:78:8e:22:b4:f4:c5:be:f9:a0:4a:
                    f0:bf:63:ae:10:98:b0:fc:eb:f4:e1:8e:f7:11:af:
                    8b:32:7b:c5:4f:45:f5:79:f0:4f:64:9c:a5:f2:19:
                    02:95:fc:a4:5f:c1:ef:d4:33:99:98:66:1f:37:bf:
                    08:2f:d2:47:2e:c5:b6:d9:ea:03:0c:b3:b4:18:04:
                    fb:83:46:37:95:c1:76:eb:b0:c6:47:e1:c9:82:24:
                    f9:a8:fd:ab:b8:24:8f:a5:91:a3:07:80:15:5d:aa:
                    d7:8d:6e:35:35:60:40:7b:61:f7:58:50:b5:5e:77:
                    b8:a5:f7:7e:83:41:ab:e7:54:63:0a:1b:2d:0f:28:
                    4b:a0:84:26:76:42:e9:91:02:d0:cc:7e:d6:94:c5:
                    06:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8E:6A:DA:4B:62:88:3E:58:12:9F:43:D2:DD:13:E1:45:96:20:19
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/81d7152e-d9b0-4723-ac3e-68ea86c344e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:83:2b:93:4e:21:8f:25:6c:9c:19:99:ba:c8:8f:db:f7:25:
         04:72:3f:3e:16:fd:c2:80:6b:4c:a5:07:56:e5:99:b6:91:17:
         30:a7:d9:04:c9:67:d8:32:77:83:d3:d4:07:be:b7:3a:54:93:
         da:82:72:9d:8b:37:c7:8c:f3:9e:f3:be:01:8a:7f:a9:aa:ec:
         73:e2:b9:34:fd:50:d8:59:45:a4:0e:6d:5d:75:1c:16:c2:1b:
         94:89:95:f3:f9:cc:d1:30:bb:94:04:47:2b:80:f8:48:4e:fd:
         ab:25:4c:c6:3a:c9:b9:72:77:16:97:f0:c8:69:d3:89:b3:51:
         13:54:87:c2:10:f7:8c:b5:7c:ab:f2:10:ae:32:cf:2e:1b:c1:
         4a:d2:f7:ca:cb:b7:75:64:05:4f:b5:8f:7e:85:70:f1:e2:ac:
         15:cb:04:39:9c:a5:78:c3:e9:11:80:61:be:ec:dd:bc:a6:c5:
         34:3d:50:42:0d:db:70:d8:2b:f5:19:3a:2d:d3:c4:a1:45:3e:
         2a:07:23:41:17:21:43:da:6b:ca:38:8c:41:42:c1:3b:04:37:
         b1:7e:20:e6:16:e7:bb:0c:e2:bb:87:66:74:b7:ce:c6:19:7b:
         2e:67:75:50:74:ac:e6:b9:18:98:bf:ff:be:74:06:a5:05:eb:
         c7:53:34:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----