Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ab534337-6d4b-43f2-bd0d-a8b2b91dca97.roa
File:                     ab534337-6d4b-43f2-bd0d-a8b2b91dca97.roa (raw, json)
Hash identifier:          h1RGGbb0EK0feClpLvdpL3e5TQ4fhnMKflwNTFk323s=
Subject key identifier:   7B:82:C7:7F:E5:A4:7F:79:2B:7C:B1:0C:05:60:AF:39:11:54:3C:85
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4D5F0B4F04433E4B4A5E3AB1B8BCB5EC99F440BD
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ab534337-6d4b-43f2-bd0d-a8b2b91dca97.roa
Signing time:             Mon 03 Apr 2023 00:00:00 +0000
ROA not before:           Mon 03 Apr 2023 00:00:00 +0000
ROA not after:            Thu 06 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5f:0b:4f:04:43:3e:4b:4a:5e:3a:b1:b8:bc:b5:ec:99:f4:40:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  3 00:00:00 2023 GMT
            Not After : Apr  6 23:59:59 2023 GMT
        Subject: serialNumber=f05e02e0e6d37b933e1018c76f4dcaebab3e29e5fa9668e4e1825364ffd07256, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0f:d8:01:5e:a8:de:ab:03:f0:b3:89:b8:fb:
                    9c:46:3b:b3:96:66:ca:61:e9:5e:c9:98:1a:75:d7:
                    64:fa:f1:f3:49:39:7c:c0:09:34:d0:19:b7:21:c1:
                    58:d0:ba:c0:ec:92:99:73:06:d3:c5:bd:6a:84:72:
                    a6:88:b5:99:a4:ed:b7:f0:cf:e3:48:8e:f5:fe:6d:
                    0f:25:62:ab:bd:41:86:56:b1:6d:b4:a5:dd:d8:2a:
                    5f:30:91:f4:93:a7:9d:b6:7d:4e:06:d9:bc:b7:61:
                    b4:57:fa:2e:f4:17:47:1e:88:cb:af:d7:d8:0f:99:
                    75:72:02:4a:f3:8e:33:66:96:20:20:9a:06:f4:c0:
                    55:ce:e4:ba:61:ab:11:88:4f:eb:42:20:7c:a6:a9:
                    15:13:87:39:6d:56:89:ea:96:7b:aa:42:59:2c:7d:
                    1b:f7:a5:d5:ca:3b:0b:f3:39:ad:fe:17:a9:89:86:
                    6a:30:ce:2f:7c:30:26:1b:12:76:5e:8d:4a:a1:dd:
                    c8:f8:ad:9b:c5:8f:8d:ea:70:98:aa:c3:5f:70:ef:
                    44:21:bf:da:8b:7f:2b:3f:31:21:a7:43:ba:00:2c:
                    5a:c0:83:81:51:df:11:b3:e0:88:28:74:14:36:5b:
                    9c:11:de:a3:65:ec:18:32:70:1f:ae:09:e9:6f:c7:
                    d7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:82:C7:7F:E5:A4:7F:79:2B:7C:B1:0C:05:60:AF:39:11:54:3C:85
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ab534337-6d4b-43f2-bd0d-a8b2b91dca97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:35:0b:c5:17:e0:bf:05:41:5a:97:c1:3a:cb:82:c2:f5:5c:
         32:7c:ed:c3:19:89:19:21:57:96:72:fa:ef:9c:a4:f6:c4:be:
         a5:3e:14:84:69:59:30:69:f8:e5:4f:2e:2d:74:7d:55:59:35:
         7e:a3:95:86:18:4b:e7:6f:a6:e7:bf:fc:b6:62:db:46:14:e5:
         e8:7a:c2:2c:bb:a3:73:a6:dd:27:47:d5:74:f9:1b:68:e0:bd:
         ab:bc:1d:bc:4c:19:e1:da:fe:25:2c:a4:f5:48:94:4f:9a:d5:
         31:39:b3:27:45:e3:46:ab:84:e9:8b:36:0a:08:84:81:d9:b5:
         02:7d:47:b5:7c:37:ba:71:09:aa:8e:d2:b3:5f:b4:cd:fd:3f:
         71:f5:d0:05:ac:a4:44:80:10:6f:64:10:5b:41:e8:44:f0:db:
         2a:d6:53:93:1c:bb:5b:c4:84:d7:da:a8:2f:d8:75:42:6f:61:
         3e:3b:24:1b:f2:63:ad:f5:5c:5f:97:9b:5c:ba:04:ec:a4:30:
         9d:e5:cb:a1:dc:a0:0a:33:6f:f8:98:ad:a1:78:91:9f:d0:8d:
         24:a9:40:7d:bb:d2:33:ea:a2:f7:b4:32:42:1f:36:1c:bb:2e:
         3b:7d:a0:7b:c0:f6:1d:fe:42:2c:ce:7d:29:7d:1f:69:81:af:
         ca:a2:05:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----