Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8bc9c3f3-af4c-46f7-8a95-8ee28d6bf832.roa
File:                     8bc9c3f3-af4c-46f7-8a95-8ee28d6bf832.roa (raw, json)
Hash identifier:          YPdr4Ypozk/qCys4Q3rNFpACMdujteIDbyw5HaAXlyE=
Subject key identifier:   17:4D:A6:09:A2:55:C0:4F:93:A2:9E:9E:67:73:3A:71:1E:79:19:45
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5152A8FA3715D3C69B1DD4F6496A94C0D27DBF16
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8bc9c3f3-af4c-46f7-8a95-8ee28d6bf832.roa
Signing time:             Mon 20 Mar 2023 00:00:00 +0000
ROA not before:           Mon 20 Mar 2023 00:00:00 +0000
ROA not after:            Thu 23 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:52:a8:fa:37:15:d3:c6:9b:1d:d4:f6:49:6a:94:c0:d2:7d:bf:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 20 00:00:00 2023 GMT
            Not After : Mar 23 23:59:59 2023 GMT
        Subject: serialNumber=4bd6ce459ee16071a3d5b67f5c4ec7ff59a5906acf4641595f0a148f2d566334, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:68:4a:c5:58:54:e3:e3:dc:c7:53:98:6d:ce:
                    74:f8:a6:a1:e1:b6:90:ae:81:b9:e4:8b:b6:58:12:
                    49:dc:cc:7c:73:43:68:ed:78:11:45:54:f9:a4:c8:
                    7f:bb:76:df:02:08:01:68:df:a6:8d:a0:0a:87:35:
                    44:70:79:b8:91:f0:73:28:5a:ea:d1:e3:3c:55:ae:
                    03:f8:c4:0b:c0:c0:cc:0d:55:d2:5b:6c:1a:f3:0e:
                    39:7d:ec:0e:24:2c:c2:43:71:5e:27:23:9c:9d:75:
                    c6:c7:21:a7:e2:65:b5:25:09:fb:94:52:5b:1d:2c:
                    fa:7d:d1:c8:87:69:24:46:8e:1e:a0:f6:fe:43:86:
                    b9:96:21:70:6f:7f:da:8d:4a:2c:df:1a:b2:ed:89:
                    1f:ac:1e:d0:75:9c:11:97:24:dd:13:9f:53:92:d1:
                    9f:c6:cf:e5:60:0c:95:f2:3f:73:c8:ae:ca:e5:22:
                    dc:5f:4a:a0:22:2e:ca:5b:09:a0:40:80:48:9a:df:
                    d6:00:4c:37:9b:fa:f0:fa:b0:a5:13:78:5b:0d:14:
                    74:55:f3:b9:db:97:fa:3c:06:df:e3:3c:db:fa:31:
                    f0:ac:24:0d:45:93:b6:05:41:db:cb:37:f1:96:ad:
                    df:9e:12:5a:ec:a0:5e:9f:31:f7:84:1d:42:90:82:
                    1d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4D:A6:09:A2:55:C0:4F:93:A2:9E:9E:67:73:3A:71:1E:79:19:45
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8bc9c3f3-af4c-46f7-8a95-8ee28d6bf832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:48:80:53:79:df:68:95:23:14:cf:6f:41:a8:d6:30:c0:05:
         60:a0:d5:21:3d:23:32:7f:c7:7f:d3:ae:b4:12:0b:ef:0c:4d:
         3f:5f:10:c2:9b:e7:4d:26:a0:b6:6e:eb:87:85:05:42:9c:86:
         4e:e5:35:fb:33:a2:2e:7b:b0:5c:d6:f8:c5:d3:72:31:64:b9:
         e6:11:d1:92:36:37:6c:b3:e5:44:9f:1f:a9:94:c4:42:96:d4:
         d1:3c:e3:46:28:83:75:65:eb:8d:18:b7:3b:03:c5:a7:f1:11:
         9f:f5:ba:17:b1:b2:12:7d:3e:87:8a:b9:59:13:58:d5:10:23:
         bf:fd:dd:f5:56:1d:46:c3:1f:91:93:58:9a:79:53:cd:d6:ad:
         ad:9a:45:83:44:cb:73:78:54:2c:cc:b6:41:50:6d:d9:18:12:
         92:b6:22:9d:79:3c:23:88:0e:b3:64:19:27:ab:f2:74:0e:f7:
         c4:70:03:69:18:69:e4:f7:70:bf:79:7a:48:e1:4d:a4:a0:94:
         74:1a:52:c1:1c:74:9a:41:85:6a:c4:5a:b0:ad:f9:2a:ed:b4:
         e3:bd:00:e8:8a:d9:4c:35:0b:75:e2:98:00:5f:db:e9:31:53:
         e8:95:d7:d6:4c:92:1e:db:f0:39:aa:3b:42:57:eb:f7:82:7e:
         ec:b0:8f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----