Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/909bb144-e442-4ee5-84bf-2e88dac5f4d9.roa
File:                     909bb144-e442-4ee5-84bf-2e88dac5f4d9.roa (raw, json)
Hash identifier:          UekaqeloUaICpe4Xdn/bMa1sqHQ4TU0AIz0ATHyI6ik=
Subject key identifier:   0A:B2:7A:0B:E2:0D:05:6A:E5:B5:A6:A7:C3:17:9C:4F:E6:5D:4A:49
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       09F1FD99970977603726FA00BC8E5BA3364E7C72
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/909bb144-e442-4ee5-84bf-2e88dac5f4d9.roa
Signing time:             Sun 26 Mar 2023 00:00:00 +0000
ROA not before:           Sun 26 Mar 2023 00:00:00 +0000
ROA not after:            Wed 29 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f1:fd:99:97:09:77:60:37:26:fa:00:bc:8e:5b:a3:36:4e:7c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 26 00:00:00 2023 GMT
            Not After : Mar 29 23:59:59 2023 GMT
        Subject: serialNumber=9842362d16ecb60385f09977ec04c1e02c5618402a8c454f07dd4069fe18f4ff, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b6:2c:56:78:bb:8b:6f:7f:25:ad:f4:b6:c7:
                    7d:31:1f:d5:a3:f6:33:c4:ac:50:71:c2:8a:92:66:
                    a9:03:c1:97:d9:8d:b6:51:95:04:79:48:86:7d:e6:
                    5b:4a:25:80:fa:e6:1b:90:a6:81:5d:de:7c:66:05:
                    63:37:24:40:7e:7e:fc:c7:74:ca:38:dc:1e:d6:cd:
                    5e:3c:96:94:33:07:fc:a0:f6:8a:86:fc:9d:e3:98:
                    8a:e6:43:b2:ba:47:5c:28:95:79:64:8c:b6:7c:4a:
                    f9:0c:e3:c7:b8:18:97:ce:4c:0d:34:0e:81:a3:95:
                    61:b9:12:21:03:74:17:92:25:86:be:d7:e7:d0:9c:
                    ec:e7:d9:0b:c8:29:03:a3:92:2b:99:19:8d:f9:c3:
                    35:90:1d:be:dc:35:05:e2:16:bd:64:62:c1:39:de:
                    a6:59:9d:c3:76:18:28:64:3f:38:fb:ad:d5:b9:4f:
                    67:b3:28:b3:4f:89:4c:ca:8a:54:3a:99:11:3d:5d:
                    46:ae:01:72:7c:55:ff:fe:66:e0:22:1e:cd:1d:9c:
                    7c:53:e9:66:13:2b:97:8e:a8:db:7d:f2:84:65:6b:
                    d3:c6:22:ba:ce:37:35:6c:93:fd:58:0d:29:59:22:
                    d6:2c:89:24:df:e7:30:10:fc:34:ba:2a:3f:07:23:
                    fc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B2:7A:0B:E2:0D:05:6A:E5:B5:A6:A7:C3:17:9C:4F:E6:5D:4A:49
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/909bb144-e442-4ee5-84bf-2e88dac5f4d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:21:97:23:16:84:b2:4b:af:c2:e4:69:1a:0a:da:9f:87:de:
         a6:75:f6:de:7d:cf:46:b2:c6:13:45:ac:1e:55:f2:75:9a:11:
         c0:60:c7:01:50:dd:fe:c1:1c:6e:02:02:2f:62:52:3d:a1:af:
         a3:14:d9:ad:8a:44:f2:2c:be:80:39:6b:5d:78:33:94:4f:5a:
         29:62:fb:ce:4d:45:9a:c8:20:cd:08:5a:33:bf:ba:e7:66:ff:
         d0:96:77:50:e0:11:e8:e8:62:64:e9:0c:d6:64:e0:e9:4b:a2:
         76:d3:cf:3d:fc:89:c2:f4:45:8d:b9:62:60:31:a5:3c:78:11:
         44:76:8e:c1:2b:3b:82:c9:b6:55:d3:2e:67:9c:7d:fd:47:55:
         ff:eb:78:9b:03:8d:7a:9d:b7:bd:50:be:18:38:f7:a9:87:e9:
         a6:39:87:bb:bf:0d:1c:ae:c7:d5:12:56:4d:14:62:3c:60:c5:
         97:4a:9d:47:d5:5e:d6:8b:bb:5e:ce:63:70:db:67:d8:4f:9d:
         3b:ba:62:0f:74:3f:77:f6:92:53:b7:b9:fc:03:bb:84:20:dd:
         cd:4e:ef:df:2b:04:9c:23:ec:30:30:2d:3a:f6:a0:82:ec:29:
         43:a2:ce:a8:f7:24:d9:4f:a7:f9:24:cc:2f:57:db:d6:aa:d4:
         62:1b:a1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----