Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8ade2dd4-ad87-46a4-8931-b9c59cd216fa.roa
File:                     8ade2dd4-ad87-46a4-8931-b9c59cd216fa.roa (raw, json)
Hash identifier:          mH363NCi9Rf0bpw11Rd8Cy4sUZ3CRqGpX3ZRPzEMKCQ=
Subject key identifier:   8F:83:A6:D6:00:17:50:C9:E4:B3:24:6B:EF:EA:67:3E:25:6E:DE:37
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4D026BF06FE0343C95756333C6DC10429279A62B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8ade2dd4-ad87-46a4-8931-b9c59cd216fa.roa
Signing time:             Tue 07 Mar 2023 00:00:00 +0000
ROA not before:           Tue 07 Mar 2023 00:00:00 +0000
ROA not after:            Fri 10 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:02:6b:f0:6f:e0:34:3c:95:75:63:33:c6:dc:10:42:92:79:a6:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  7 00:00:00 2023 GMT
            Not After : Mar 10 23:59:59 2023 GMT
        Subject: serialNumber=0b38c174d4ff46b9d7029815470c7f88d43f49e1188f9e95d998b25f6eccb60c, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6a:a8:c5:f8:30:c7:59:7c:d6:62:1e:c2:50:
                    e7:da:e2:be:1d:c0:fc:e2:0d:b6:30:10:aa:58:c3:
                    2b:96:80:3e:1f:0b:53:90:d5:55:e8:0c:df:d7:a6:
                    12:ee:46:32:c4:03:cb:8d:30:45:e2:c3:d1:4a:27:
                    9c:b9:ed:44:94:e5:04:af:d4:e9:b4:83:d8:ca:ca:
                    4b:96:fe:7a:39:38:9e:6b:07:87:c2:58:70:7d:28:
                    db:35:90:d6:96:55:72:f3:f2:de:5c:97:20:85:8d:
                    75:6b:79:d8:82:e1:27:31:28:80:c3:45:57:a7:42:
                    8a:64:30:24:36:8a:b9:68:41:56:aa:59:4b:e1:23:
                    ad:b6:c7:ea:b4:81:51:dc:f8:56:6f:ed:37:58:8f:
                    77:5a:73:5b:7e:aa:11:7a:5d:6a:86:d4:c3:cf:a5:
                    20:dd:fe:62:5a:f3:24:5f:d2:71:5d:d4:87:45:a2:
                    7e:90:a4:e2:87:0b:fe:8f:07:d4:96:f4:d2:8f:2d:
                    e5:f1:c1:b0:9e:f4:85:d0:05:47:70:01:9d:f9:e4:
                    bc:2a:43:44:c7:35:57:c6:7d:55:45:87:5b:cc:68:
                    3f:ee:44:90:00:5f:3c:dd:57:a0:bc:a1:2c:81:03:
                    4d:df:c0:7a:a3:34:4b:d1:5b:c7:eb:75:5a:38:a0:
                    bb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:83:A6:D6:00:17:50:C9:E4:B3:24:6B:EF:EA:67:3E:25:6E:DE:37
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8ade2dd4-ad87-46a4-8931-b9c59cd216fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:cd:73:59:02:fe:ef:3e:4f:5e:93:60:25:64:b1:45:a2:92:
         ea:62:6f:68:99:cc:74:cf:1e:23:06:b1:e9:a2:f8:33:3c:e4:
         0c:a4:61:c4:a8:39:72:e9:e7:28:5d:de:6a:a1:8a:b9:e7:4c:
         1c:ff:52:43:84:07:5f:03:77:18:63:71:3b:e1:b6:b6:c7:78:
         86:d1:7b:86:6e:04:6e:01:17:c2:89:bd:90:88:f7:f9:a1:bb:
         28:5c:4b:94:12:72:e5:0a:e8:bd:12:01:fc:6c:ba:10:d8:56:
         dc:92:f9:0e:06:fc:f0:b0:a1:42:ac:9c:0b:68:07:24:19:ad:
         d2:46:25:e8:c9:47:ff:67:69:1e:68:0e:6d:b3:c0:c0:52:e6:
         25:a8:3a:bf:be:c7:b0:7d:18:f9:8d:51:3a:bc:29:2e:bc:40:
         39:b6:53:b7:4f:e1:70:cd:42:79:2d:8f:5d:3b:81:1d:f3:53:
         5e:40:70:b4:f7:4a:f1:b2:d9:f7:b0:f5:c1:01:6e:b3:0a:99:
         27:b3:c7:44:67:ac:2b:d6:13:91:d2:78:48:1d:62:85:74:52:
         0d:e4:79:74:c7:ba:58:2e:3d:a9:2d:05:ef:d6:b4:a8:db:c7:
         f5:49:e4:30:f4:35:78:15:7f:1f:79:45:ae:8e:bf:7a:43:c5:
         88:f5:2e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----