Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/99a01f25-c97a-472b-8fc0-9702ad6b47b9.roa
File:                     99a01f25-c97a-472b-8fc0-9702ad6b47b9.roa (raw, json)
Hash identifier:          ggBpu9zougrYuUvUMqVRiC54fMJ57gC0oxvsdCk3uK8=
Subject key identifier:   4B:9D:77:8F:36:7D:AB:66:E5:BA:0B:3A:52:C8:C8:15:DE:E8:F1:6E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1A7D182C3FD63515ED895B3AE81A42D28FB744A7
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/99a01f25-c97a-472b-8fc0-9702ad6b47b9.roa
Signing time:             Wed 08 Mar 2023 00:00:00 +0000
ROA not before:           Wed 08 Mar 2023 00:00:00 +0000
ROA not after:            Sat 11 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7d:18:2c:3f:d6:35:15:ed:89:5b:3a:e8:1a:42:d2:8f:b7:44:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  8 00:00:00 2023 GMT
            Not After : Mar 11 23:59:59 2023 GMT
        Subject: serialNumber=f3cac0ba8a5295dd418d19e59a68458e2ec8ce0a11b35406522747f257d5d869, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3d:50:a8:2c:ea:e4:55:84:dd:e3:2f:b2:7e:
                    be:77:36:da:90:08:eb:2a:02:2a:3e:ce:33:35:fc:
                    ba:93:b1:9a:5c:e7:23:69:03:51:ee:ca:bf:aa:94:
                    30:39:9b:72:83:43:c4:4c:5c:ad:c6:39:df:ba:bd:
                    a2:fd:03:f5:2d:36:9f:8f:b6:52:15:4e:4d:23:2a:
                    ba:46:5c:dd:fe:64:93:4a:c2:ea:fc:ac:28:42:51:
                    b9:28:e1:40:6f:9d:d7:67:55:79:a7:92:69:4d:48:
                    59:9f:19:ee:f6:11:96:6e:4e:67:76:55:c6:74:e4:
                    0d:48:ff:16:84:b5:55:a1:ac:1a:2c:14:8b:f8:f2:
                    8b:ae:c4:a9:43:9a:b5:64:04:48:52:b4:00:d6:f1:
                    cf:5b:77:c0:ef:8c:d5:f8:3c:f9:3d:84:1b:58:25:
                    50:f5:07:a3:54:00:e3:7d:08:39:37:af:c4:e3:81:
                    28:37:3e:63:a4:27:f8:bf:56:76:3b:bd:78:64:96:
                    39:dd:9e:6e:a9:43:27:52:19:c7:df:64:02:d7:c2:
                    59:96:24:f3:7a:75:f9:1d:29:ed:6f:b8:5a:fd:01:
                    7b:f8:e5:f3:4d:fd:0a:21:79:c9:be:c5:31:d1:0b:
                    eb:63:fb:e7:78:db:33:b1:62:b7:a3:c5:45:b9:a1:
                    c2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9D:77:8F:36:7D:AB:66:E5:BA:0B:3A:52:C8:C8:15:DE:E8:F1:6E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/99a01f25-c97a-472b-8fc0-9702ad6b47b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:ea:aa:79:2e:0c:1c:c7:a1:2c:12:4b:7f:cd:6d:a9:ef:cd:
         07:0a:68:fa:7c:8e:5f:16:a5:e8:cb:cf:5b:01:0f:f7:fd:a5:
         d4:47:b6:1e:44:4d:38:ee:f2:da:1c:44:d7:d9:23:87:10:17:
         bb:88:1a:88:7a:31:83:96:9a:32:14:95:30:82:e5:78:a2:b9:
         1d:fc:42:4f:c8:72:29:d8:01:de:02:1c:30:23:ee:42:d4:bb:
         88:9f:59:4f:51:2c:11:42:12:c9:9a:2f:51:0d:ef:71:36:33:
         72:05:56:ee:b4:25:4c:8a:b1:b2:7a:74:7e:19:59:e6:f7:f4:
         ef:5e:41:95:0d:ab:54:70:d1:a2:c3:fa:4f:79:55:77:f0:eb:
         8c:5a:a9:56:b4:c4:8f:41:df:79:1e:d1:ea:da:51:35:8d:42:
         cb:31:26:0e:67:31:14:81:60:8b:73:39:0e:a8:1f:13:f7:68:
         86:3a:d8:93:5d:3f:a7:e1:2f:d0:41:c5:f9:08:1b:54:1c:0e:
         04:d4:c1:97:79:55:40:72:27:75:80:4c:57:cc:3d:70:5c:ef:
         9d:c1:45:87:05:1a:f7:35:ea:b2:74:84:cb:d0:d5:f4:ef:d1:
         17:48:41:56:a4:07:4d:94:ba:69:17:16:84:0f:d8:57:a8:9b:
         58:86:ac:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----