Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cf90f95d-47ad-4b5b-94c8-64d7aaab7238.roa
File:                     cf90f95d-47ad-4b5b-94c8-64d7aaab7238.roa (raw, json)
Hash identifier:          FO7LaQnbVTgmjRR274WJ90VC31wBbmA6TtPciZ1ZwZA=
Subject key identifier:   F3:A6:C1:42:A0:12:A5:A2:9A:8B:B4:38:E3:C0:4F:26:C2:38:B3:7A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4476561B54E8841D7467EEBC37A944083E9CA790
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cf90f95d-47ad-4b5b-94c8-64d7aaab7238.roa
Signing time:             Fri 13 Jan 2023 00:00:00 +0000
ROA not before:           Fri 13 Jan 2023 00:00:00 +0000
ROA not after:            Mon 16 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:76:56:1b:54:e8:84:1d:74:67:ee:bc:37:a9:44:08:3e:9c:a7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 13 00:00:00 2023 GMT
            Not After : Jan 16 23:59:59 2023 GMT
        Subject: serialNumber=22ef9c6294e5cf2ce65c116ece2d8a067d9bea47a720c1f4bca7afaf340836ad, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:26:d8:b1:98:d4:94:79:28:4a:ab:3f:80:18:
                    37:91:f2:61:f8:e4:5a:da:52:d4:73:9a:49:f1:fa:
                    91:5c:4a:5e:ee:91:32:34:ec:b7:3f:0f:24:98:3e:
                    d6:b9:3c:8c:22:06:d8:f9:1c:d8:3d:aa:48:ef:b6:
                    8e:3f:a9:d8:d4:6b:9c:e4:22:50:e6:da:64:2f:af:
                    f6:12:ce:10:30:f4:80:7f:be:fd:81:ea:83:43:01:
                    6c:34:2d:3d:5c:4e:f2:82:98:23:c4:4b:e7:79:c8:
                    bd:f0:73:22:6e:a3:df:11:4d:42:1a:d4:7e:a3:94:
                    f7:ea:c7:cf:27:5e:99:34:1c:e1:e5:b6:28:6b:33:
                    98:1c:55:51:6b:ca:d9:f1:88:20:b5:97:ad:ce:9a:
                    33:c8:28:68:dc:5b:11:d0:fa:7f:d2:57:84:57:a1:
                    1c:43:52:7a:ca:e0:8e:e6:fc:23:50:fb:83:bf:45:
                    1f:54:c8:83:5f:a5:5e:d5:07:4c:3a:2c:a5:a3:5d:
                    39:87:11:0f:83:d9:4f:4d:8a:b9:48:46:e4:2d:67:
                    31:4b:9e:f9:04:15:2f:cc:d0:cb:9c:d6:90:21:20:
                    49:ac:0b:90:37:18:67:9d:32:aa:30:74:e1:85:0b:
                    d4:94:9a:fc:7f:5f:35:aa:3a:d1:33:87:22:71:ad:
                    78:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A6:C1:42:A0:12:A5:A2:9A:8B:B4:38:E3:C0:4F:26:C2:38:B3:7A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cf90f95d-47ad-4b5b-94c8-64d7aaab7238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:88:c9:86:17:89:1a:0b:1f:9b:1e:34:27:41:bb:5e:95:6b:
         dc:15:d3:f0:c5:55:9a:86:a9:da:bc:c1:de:d1:ce:9b:47:30:
         7a:be:6d:90:76:5d:a8:33:68:fb:7f:a8:b7:bd:3b:d0:9c:64:
         24:85:9f:85:86:71:08:11:61:ec:26:d6:9a:89:82:29:ab:db:
         92:5c:96:0d:08:f8:29:33:e7:b1:7a:78:8f:c4:7f:46:24:9d:
         98:c8:31:b1:dd:f4:83:93:83:14:17:a0:a9:ba:ba:8b:d4:0e:
         cf:38:e8:65:92:0f:05:58:56:6c:4e:5e:c7:a2:ed:00:82:63:
         99:73:5d:aa:15:66:71:b5:cf:20:ef:e4:a3:f6:01:b7:16:45:
         30:d6:98:c0:b9:20:1d:73:e3:9f:dd:e5:5a:d2:7c:07:a1:2a:
         c6:38:e7:6b:df:0d:5e:c4:0d:5f:ec:74:f0:b4:9a:ea:82:5f:
         67:a9:15:ca:3f:e7:07:bd:38:68:ea:d0:b7:0e:63:65:05:47:
         9e:67:10:ea:bd:ef:f5:86:4d:b0:bb:ff:10:0c:fd:8f:60:bb:
         a1:c0:aa:33:a3:9d:6d:1c:95:30:6d:81:11:b8:f6:64:50:0c:
         7d:cc:d3:e0:ab:85:57:75:63:96:f8:c8:d1:3b:a5:54:d0:64:
         32:43:62:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----