Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ba49d5de-4e1a-4e63-a58a-a05053bf3cd0.roa
File:                     ba49d5de-4e1a-4e63-a58a-a05053bf3cd0.roa (raw, json)
Hash identifier:          qRPkZ2blRDx6HgBq1lMkRptcHaCNrymCBbogHl5h8OY=
Subject key identifier:   63:11:69:4B:57:08:4F:4A:D5:0B:9C:56:4A:C4:5F:76:5D:6C:F6:D2
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1949858A2600ABF876A858EC21B3BAAB638FBB96
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ba49d5de-4e1a-4e63-a58a-a05053bf3cd0.roa
Signing time:             Tue 27 Dec 2022 00:00:00 +0000
ROA not before:           Tue 27 Dec 2022 00:00:00 +0000
ROA not after:            Fri 30 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:49:85:8a:26:00:ab:f8:76:a8:58:ec:21:b3:ba:ab:63:8f:bb:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 27 00:00:00 2022 GMT
            Not After : Dec 30 23:59:59 2022 GMT
        Subject: serialNumber=d4e1a209deda369db73e5d0a397768333af83a6334399dfc2f41d24d058bf52b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3a:ea:9e:96:56:9b:1b:c7:63:5d:c7:80:cb:
                    c9:f0:6e:6e:e2:71:31:0e:71:fc:35:55:39:68:df:
                    4f:c0:03:ef:d8:03:65:22:fb:8c:3e:0c:fb:4c:d4:
                    13:25:95:06:71:a6:70:70:08:ad:43:ba:84:06:d6:
                    51:43:4d:21:29:d6:03:8e:8c:99:40:ee:31:56:ad:
                    d6:ae:30:dc:ca:26:56:49:ae:8d:2c:d9:31:7e:e8:
                    0f:b7:1e:a1:71:db:dd:96:76:c4:6e:39:a8:1d:71:
                    71:36:0b:41:49:a6:5c:05:b1:55:81:a9:3f:37:79:
                    83:d2:dc:b8:97:77:72:54:5f:49:e8:26:28:d9:39:
                    2f:f4:aa:ce:18:80:57:fb:fa:1c:ea:d9:53:bd:77:
                    cf:b5:79:24:d1:ae:7f:64:c4:fc:5c:ff:62:09:d8:
                    e2:5e:82:09:63:98:21:5d:de:de:65:09:f1:c2:fe:
                    f1:9b:16:60:e5:52:5b:ee:2b:19:07:de:04:7d:16:
                    cd:22:6e:dd:4d:e1:1e:54:4e:e6:ac:35:37:8e:a3:
                    19:d9:c0:ba:22:50:7d:b9:3f:32:04:7d:e9:70:7e:
                    26:d7:9b:37:2b:1b:fa:74:f2:9b:66:7c:1c:4b:76:
                    25:18:3a:3b:d1:53:ef:ec:b4:18:75:2c:ea:d8:6f:
                    7c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:11:69:4B:57:08:4F:4A:D5:0B:9C:56:4A:C4:5F:76:5D:6C:F6:D2
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ba49d5de-4e1a-4e63-a58a-a05053bf3cd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:5b:2c:63:f1:36:c1:d6:85:6e:24:8a:7c:05:71:1d:97:54:
         fd:fb:ad:e7:3d:44:ac:a6:cd:a4:2b:d4:6a:1e:10:60:34:32:
         a6:54:9e:2f:af:b8:3b:3e:25:37:bd:b4:75:ae:ad:b2:3c:0d:
         73:e8:ba:2a:16:13:17:aa:e6:65:b2:6b:bd:f9:a8:f8:a1:a3:
         ff:0c:34:29:34:3b:a8:3e:92:2a:6d:2d:0b:f7:f8:01:80:d1:
         d6:d0:46:f9:ab:91:b5:07:51:3c:8a:e6:33:70:36:4b:29:7d:
         21:3e:7a:7d:a5:0b:29:b3:53:50:1e:9f:78:57:ae:5d:06:7a:
         92:b3:dc:9e:5e:73:af:d1:5d:ae:7e:e2:16:93:96:2c:22:eb:
         55:75:0b:68:f9:11:9c:59:20:9f:bb:4e:a8:d4:48:27:57:bb:
         ec:be:ce:3a:15:aa:f7:f8:68:f4:6e:5a:ea:ef:25:9c:48:db:
         d7:b1:ce:04:07:3f:a4:05:e8:c1:a3:9f:e6:22:a4:a9:3e:a7:
         45:45:44:08:7e:07:ac:54:6b:e0:8b:98:77:6b:02:72:68:b8:
         09:53:76:4a:71:5c:de:70:4e:ef:04:e0:4c:4c:9e:56:2a:cd:
         9b:7f:4c:74:ce:70:df:e9:02:f0:0b:11:39:30:8c:5b:cb:7b:
         0a:17:63:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----