Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c5a194d7-638d-44fa-92f6-45ab9c60c79f.roa
File:                     c5a194d7-638d-44fa-92f6-45ab9c60c79f.roa (raw, json)
Hash identifier:          V69edJ1xhFqdfdeT2n7FLQbo79Aomci1RxG4qtKCalA=
Subject key identifier:   67:AD:98:E0:6E:FE:49:5D:97:2A:B9:95:E7:14:5C:45:D1:EB:B0:BE
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2828B36FBED9D29576760A736409C000DB4B72E8
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c5a194d7-638d-44fa-92f6-45ab9c60c79f.roa
Signing time:             Wed 15 Feb 2023 00:00:00 +0000
ROA not before:           Wed 15 Feb 2023 00:00:00 +0000
ROA not after:            Sat 18 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:28:b3:6f:be:d9:d2:95:76:76:0a:73:64:09:c0:00:db:4b:72:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 15 00:00:00 2023 GMT
            Not After : Feb 18 23:59:59 2023 GMT
        Subject: serialNumber=b20f974ed5673aed8f780eece355a5e9a057d308ed4b9f61541e78f616c73a38, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7c:12:53:8f:78:74:f3:da:04:19:63:9e:76:
                    cd:c3:99:81:79:9b:16:eb:42:92:88:17:5c:5e:3f:
                    57:a1:41:9e:c8:e8:18:b6:24:58:0c:e9:71:16:4e:
                    60:44:6f:1e:07:9e:b0:20:d7:bb:c6:43:ac:59:98:
                    e9:65:2d:2d:25:8e:23:80:73:c3:38:51:c3:74:5b:
                    48:ef:a5:ba:9c:dc:f8:a9:5c:d3:c7:bd:86:5f:9f:
                    6d:0c:66:24:57:a6:de:60:ee:32:ef:2e:87:7f:2a:
                    d4:46:f8:7f:9a:4f:ea:5b:28:9f:81:d7:18:fc:e9:
                    1e:c4:3d:e6:0a:1c:86:e7:c1:b4:8f:65:27:a5:d2:
                    74:c7:8f:d9:1c:9c:bc:30:cc:bd:90:ca:58:f6:83:
                    9d:05:d5:27:89:a1:cb:cd:1e:4c:27:fd:ea:52:62:
                    c3:48:f2:41:ec:c5:cf:d7:45:17:ed:9e:40:7d:da:
                    75:8b:35:d4:ee:fd:1c:27:ed:e7:ec:3a:be:be:5a:
                    2f:83:1a:a8:75:4e:af:d1:61:08:11:71:5e:a4:f2:
                    17:24:b8:a7:42:cd:2b:dc:7f:60:78:4c:93:42:42:
                    c0:a6:fd:39:89:8c:74:46:96:1a:6a:4d:29:89:3d:
                    6a:af:fd:a0:20:4f:a7:3f:59:b1:c5:6b:e0:cd:99:
                    c0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AD:98:E0:6E:FE:49:5D:97:2A:B9:95:E7:14:5C:45:D1:EB:B0:BE
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c5a194d7-638d-44fa-92f6-45ab9c60c79f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:09:30:5a:fa:81:c2:02:93:55:61:b9:94:e1:4e:31:1d:cc:
         8f:99:45:65:13:e8:a7:9f:98:9f:e9:7f:f8:d1:9c:d5:af:89:
         a3:d8:51:0f:d6:ed:f0:ef:ad:18:7f:f2:c0:c4:e8:84:17:c0:
         f7:1b:1d:ec:49:c6:c8:33:9d:ac:2f:b1:f4:94:39:c4:e0:34:
         cf:bc:fc:9e:c2:5d:b2:30:0e:f8:d3:3a:66:60:a5:ed:a4:a5:
         bf:e8:e9:27:9b:01:84:99:4f:73:87:dc:e8:1c:13:d1:3d:3a:
         13:5a:38:f9:75:1d:03:b2:45:ed:2b:f9:c1:5b:a8:b5:bb:24:
         48:d2:1f:71:e1:60:ea:0c:90:43:e5:fc:bd:9a:d3:3f:4e:12:
         91:41:27:9e:49:66:25:b7:4d:a3:b9:be:bd:bb:b6:31:15:0f:
         c9:b0:24:f3:a4:49:25:92:8a:85:2c:56:cf:16:fb:4d:7d:cf:
         55:8e:78:ff:d1:4f:ea:bd:53:43:30:87:f7:02:06:9c:7a:4d:
         c3:34:a6:00:07:96:35:95:d2:20:fb:6d:1c:70:a0:85:6a:a8:
         fb:c7:31:52:25:7f:04:4a:3e:38:54:27:63:6a:d9:15:97:61:
         9d:79:b2:45:60:c1:09:08:ab:d9:32:68:d9:1c:69:12:dd:ef:
         df:0d:ef:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----