Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a225f38e-12db-411a-b3d1-17a3d76b7e26.roa
File:                     a225f38e-12db-411a-b3d1-17a3d76b7e26.roa (raw, json)
Hash identifier:          sJ2PFuMNUnXgGiPjq4hbw0AGLihkxqJvL8rkWjLrip0=
Subject key identifier:   6C:35:31:70:06:6D:A1:8B:81:51:8D:6D:EA:62:1A:D8:60:8C:29:DF
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3F22D1B3060A6CEEE5C5E944DE18E4CE151E43BE
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a225f38e-12db-411a-b3d1-17a3d76b7e26.roa
Signing time:             Sun 26 Feb 2023 00:00:00 +0000
ROA not before:           Sun 26 Feb 2023 00:00:00 +0000
ROA not after:            Wed 01 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:22:d1:b3:06:0a:6c:ee:e5:c5:e9:44:de:18:e4:ce:15:1e:43:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 26 00:00:00 2023 GMT
            Not After : Mar  1 23:59:59 2023 GMT
        Subject: serialNumber=1cfd264bf9d6e75b404861cfcb4ecafe839ac6d6abed2ed8cb89f108fc471926, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:28:a9:1a:a9:5f:3c:44:c1:2b:d2:4f:c5:db:
                    82:c8:44:4e:95:c8:63:95:63:a5:68:56:b8:bb:d1:
                    8f:56:5d:eb:5a:40:0d:08:e9:90:93:69:30:d8:3a:
                    8a:b4:ac:b5:d6:41:ff:86:fc:17:e5:11:45:55:f0:
                    a2:85:e5:93:c7:43:5a:15:40:d5:3e:be:ac:b8:bb:
                    6d:e2:9f:12:6d:83:81:0c:36:16:8b:6b:05:8a:35:
                    4b:3e:e3:53:ae:4f:57:9d:69:bd:c3:de:bd:bc:a3:
                    c2:96:a8:16:3c:00:62:98:e3:94:8e:f9:ee:53:b2:
                    d4:bf:89:d9:ce:cd:31:c7:3d:56:4e:ba:56:07:67:
                    69:bd:9b:6a:d5:99:e1:dd:d6:74:3a:bc:fb:b9:35:
                    ab:95:5e:d8:a8:3f:0a:54:2c:25:93:71:35:2e:ea:
                    15:b2:60:b5:95:94:98:c5:9e:bb:7f:7f:71:39:83:
                    61:1a:10:08:0c:92:21:5e:01:0e:df:62:df:b3:4b:
                    ce:eb:f4:f2:b5:ab:49:d6:50:91:a4:27:ce:05:c9:
                    77:73:4d:e9:54:38:5c:02:6b:04:b1:95:df:cd:b5:
                    83:71:7a:07:18:87:2c:f7:06:5e:7c:5c:fc:ed:d2:
                    c0:a3:49:60:dd:15:a8:ec:3a:23:68:b8:12:d6:fe:
                    0d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:35:31:70:06:6D:A1:8B:81:51:8D:6D:EA:62:1A:D8:60:8C:29:DF
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a225f38e-12db-411a-b3d1-17a3d76b7e26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:35:4e:3c:6d:76:1b:f2:94:a8:56:68:23:c2:95:bc:39:af:
         3f:23:00:bc:06:a0:5d:dd:01:72:1c:c7:a5:c0:01:5a:6b:5b:
         75:f7:aa:11:d9:ef:b5:8c:34:52:33:94:14:73:36:8f:d4:07:
         67:d9:1d:f5:57:3d:04:60:15:80:bd:4a:81:f3:2f:10:69:8a:
         00:96:2b:51:f3:4d:a4:6f:52:8e:ed:3e:e2:51:1b:c8:34:f0:
         c5:0f:07:bd:e2:a3:1a:3c:3f:5c:ac:8f:e4:f3:47:08:38:07:
         fd:32:81:62:8b:99:97:13:dd:d7:61:26:12:55:1f:bb:d0:77:
         40:35:fc:1f:42:fc:5f:34:2d:eb:34:8d:da:fc:c4:3a:a5:08:
         0b:7f:16:44:cf:4a:d7:28:5c:e7:49:cd:b7:6f:e7:15:60:e1:
         3f:0c:40:c1:d3:98:82:56:14:66:e7:45:f8:44:29:4b:a0:c8:
         fb:26:83:ce:ac:ef:30:f7:bb:d3:e4:9c:34:df:c4:25:4d:86:
         27:df:27:34:df:c5:4d:a1:aa:6c:7e:3a:0f:8b:83:56:ce:22:
         47:f3:b2:7d:79:c5:25:04:14:02:40:e0:df:9b:a9:7b:86:1c:
         d5:d2:ee:a6:59:49:d0:92:10:a0:41:65:88:74:fa:b5:d5:65:
         6e:8a:d7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----