Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c3472d4f-5d2c-4aca-b01e-e11fa121b518.roa
File:                     c3472d4f-5d2c-4aca-b01e-e11fa121b518.roa (raw, json)
Hash identifier:          fuLKm7q+mrCcAtPt7piow2g8D2ARRBcmYfBvm/0FKwc=
Subject key identifier:   B7:E8:39:D1:32:75:B4:F7:E3:D2:39:75:5F:5F:C7:C4:47:62:33:AE
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5B4FBEE5B9456A04B6DD0692AC6A430F0D4BE93D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c3472d4f-5d2c-4aca-b01e-e11fa121b518.roa
Signing time:             Tue 28 Mar 2023 00:00:00 +0000
ROA not before:           Tue 28 Mar 2023 00:00:00 +0000
ROA not after:            Fri 31 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4f:be:e5:b9:45:6a:04:b6:dd:06:92:ac:6a:43:0f:0d:4b:e9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 28 00:00:00 2023 GMT
            Not After : Mar 31 23:59:59 2023 GMT
        Subject: serialNumber=e535d72bd5b9e6a1c2a25b647b2a4df5b31435e5820439bf8c4c7bc846099af5, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:52:c0:6d:b3:ba:59:6f:3d:9e:e8:c8:1d:
                    e9:05:5c:78:50:72:4b:b3:b9:e4:c7:2a:6b:ff:f4:
                    26:ad:ed:19:65:59:24:2d:21:75:88:40:4e:f8:bf:
                    8d:c0:37:c2:ab:56:ad:2f:ef:a8:48:41:51:c0:2c:
                    cd:ef:b4:70:c5:78:9b:16:de:e3:4b:ab:1a:a1:da:
                    50:71:eb:00:04:03:4b:48:8b:bd:fd:0b:f3:e3:93:
                    a7:ca:ed:08:8f:77:6e:7f:ae:73:11:40:02:16:a6:
                    49:e5:80:cc:1f:de:fd:d8:46:0a:f4:71:1c:d7:fc:
                    5d:11:be:fe:6d:74:4e:aa:4a:e7:ba:e4:d2:96:09:
                    e8:67:59:81:7e:98:2f:f1:d7:b9:f8:96:51:3e:f5:
                    eb:1b:43:91:13:fe:97:b8:9f:73:6b:3d:4b:26:c4:
                    e5:9a:0f:fa:40:48:15:d5:bb:44:81:65:42:84:fe:
                    92:a0:9f:49:ff:a6:e3:f3:22:de:a3:43:ba:43:78:
                    4c:e6:1c:77:9f:14:26:d3:5d:9f:09:8c:85:b1:82:
                    71:b1:94:be:8c:68:6d:a8:a3:bf:f0:4c:16:da:2f:
                    cd:aa:97:39:46:69:f2:3f:b2:65:2e:04:60:4f:6d:
                    ab:f9:5a:05:4e:94:c9:6c:62:3a:5a:d1:b2:e2:3e:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E8:39:D1:32:75:B4:F7:E3:D2:39:75:5F:5F:C7:C4:47:62:33:AE
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c3472d4f-5d2c-4aca-b01e-e11fa121b518.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:70:0e:0b:6c:c3:cc:30:ab:7e:d8:f3:6c:67:eb:a5:42:61:
         4f:6a:34:a1:1e:10:44:fd:6b:bf:74:38:a8:14:d5:56:3b:4d:
         bb:a4:5b:ef:c7:ab:07:20:7f:20:bb:39:4b:b5:a1:a8:b1:22:
         c1:45:b0:5c:a0:9d:ad:c3:a5:3a:dc:c1:79:13:ca:15:53:6e:
         b7:d8:b5:56:04:bf:65:49:f1:4b:c8:41:36:48:5e:6e:f3:2f:
         a3:65:0c:2e:49:47:c9:b4:4d:69:db:d7:3e:8e:19:01:86:46:
         6c:2d:91:78:d8:b4:09:18:f8:f6:71:5e:32:b5:a9:1a:25:11:
         d5:f6:dc:bd:31:7d:4f:8e:5a:12:4d:df:2f:d5:de:98:75:88:
         94:b5:d2:7c:52:9c:49:85:fc:cc:9a:b7:29:2e:f4:f1:6c:5f:
         28:db:07:46:02:a9:ca:9d:86:9f:63:d6:1a:ff:84:08:ad:38:
         e4:ac:82:a0:b3:bd:e9:f3:dd:df:0c:f7:95:05:b2:cd:fc:5d:
         e7:9c:de:96:9a:40:9c:73:13:f5:32:0e:7a:90:c7:36:54:71:
         02:0f:0c:d1:c7:db:1a:33:d2:0b:5e:60:ec:09:3e:b3:1e:95:
         cf:df:cb:1d:50:f6:2c:8e:f5:5a:43:ed:96:d6:7d:13:6a:62:
         d1:1f:e6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----