Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a26a9dc9-138a-4a1d-95ba-74426d77b170.roa
File:                     a26a9dc9-138a-4a1d-95ba-74426d77b170.roa (raw, json)
Hash identifier:          DFLDLmN3cEwwya8EW/FPQ+P+Yl9x/DHnu86IGjg5+64=
Subject key identifier:   CD:CD:96:55:F4:6E:35:A3:B9:92:49:AF:97:76:9C:6D:0A:99:E8:11
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       28B509AC17DBD532E8C7E2FE00BADD5964BE88CA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a26a9dc9-138a-4a1d-95ba-74426d77b170.roa
Signing time:             Tue 21 Feb 2023 00:00:00 +0000
ROA not before:           Tue 21 Feb 2023 00:00:00 +0000
ROA not after:            Fri 24 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b5:09:ac:17:db:d5:32:e8:c7:e2:fe:00:ba:dd:59:64:be:88:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 21 00:00:00 2023 GMT
            Not After : Feb 24 23:59:59 2023 GMT
        Subject: serialNumber=f5e009ab5cd39d8fa2310bff724e921f0149041aab5b4622470af17753fb1caf, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:87:60:47:5c:97:61:dc:0d:91:18:44:70:98:
                    ef:09:ff:79:f1:10:da:5f:7d:5a:77:58:51:15:ee:
                    7a:05:b9:c3:fb:1e:c8:68:60:93:5b:70:66:f7:8d:
                    d9:48:c8:fc:69:db:bc:f1:8d:fa:e5:63:2e:a7:15:
                    a5:89:ec:c8:02:b5:3c:b3:db:ec:c3:e7:07:39:d6:
                    46:be:15:6b:61:47:26:45:a0:79:11:d8:9d:db:b7:
                    00:ca:76:10:ef:b9:d0:df:a1:6b:62:66:81:14:0b:
                    a7:2f:db:68:85:3c:1a:6c:46:bc:90:ef:a9:62:4a:
                    84:bd:aa:04:07:df:db:8e:82:3b:09:19:ce:5e:8e:
                    6a:df:03:a9:d4:02:10:ec:1d:cb:b8:a9:ae:4e:5f:
                    ca:7f:fe:97:df:a7:ff:9f:1e:67:af:f8:d8:3c:c4:
                    95:77:76:1e:a6:27:49:9b:89:3c:fc:25:d6:83:f0:
                    7c:23:6c:0b:fe:5b:d6:88:47:b2:92:a2:da:5c:ae:
                    4b:aa:e8:87:34:af:8b:b9:66:19:f3:ce:5a:cc:30:
                    32:cc:a1:90:4a:b7:4d:46:08:2b:29:4e:4a:9c:2f:
                    e0:bb:ed:b7:96:a4:d7:f0:28:04:76:d9:c0:06:ef:
                    02:5c:ca:ea:c5:e6:eb:cb:13:48:48:19:b7:ad:1d:
                    86:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CD:96:55:F4:6E:35:A3:B9:92:49:AF:97:76:9C:6D:0A:99:E8:11
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a26a9dc9-138a-4a1d-95ba-74426d77b170.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:37:6f:a4:c0:52:6d:26:ce:e5:ea:eb:ed:dd:01:1c:fe:8c:
         16:a2:6c:79:af:b3:3e:e9:08:66:e5:f7:94:df:73:d5:b0:58:
         19:5c:07:50:07:3e:77:7c:29:16:45:aa:48:dd:7d:4c:04:64:
         cd:32:a2:af:78:92:13:86:15:99:55:85:5a:09:e5:e8:60:29:
         56:0b:8c:eb:f7:ff:b7:12:e3:cb:f7:5e:d4:1a:9a:1f:bd:10:
         59:22:43:1f:15:ca:ff:f3:84:b4:6b:cf:01:b7:97:93:63:d0:
         98:5a:35:37:4a:c6:5a:f1:80:74:d1:8b:92:4c:d5:c4:7f:9c:
         d6:8a:73:2e:92:22:e5:69:c2:11:35:e6:ed:66:28:f5:94:0a:
         91:f9:9a:2e:61:75:c1:2a:35:29:b0:72:e0:37:10:c0:a0:4b:
         56:f2:7c:b9:80:05:92:43:90:5e:df:8b:a9:37:5e:6b:ac:1e:
         21:5e:90:d2:2b:15:60:b5:1c:e6:95:37:6d:97:ee:8f:1d:16:
         70:9b:53:07:1b:9c:e1:12:62:67:e0:32:11:3d:96:23:a6:89:
         ff:a8:49:4a:c6:2b:53:7e:dd:66:f2:9c:74:1d:78:f9:47:b1:
         55:6d:73:a0:48:3b:77:f9:a6:6b:d3:3c:60:44:ec:37:dd:03:
         e9:c2:94:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----