Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d6d828d1-e59f-4946-87fd-ae2a2bc05b8e.roa
File:                     d6d828d1-e59f-4946-87fd-ae2a2bc05b8e.roa (raw, json)
Hash identifier:          GHzHeEu0wfie7rYo20ezDoDHZM7inHVmrhgnRPkB+Wc=
Subject key identifier:   57:A6:CF:7F:FA:DE:0D:19:72:27:54:B2:A7:9D:98:1A:0B:D0:B2:6E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       44B49F20BEC157E6351CC9AF47323B16839C553C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d6d828d1-e59f-4946-87fd-ae2a2bc05b8e.roa
Signing time:             Mon 20 Feb 2023 00:00:00 +0000
ROA not before:           Mon 20 Feb 2023 00:00:00 +0000
ROA not after:            Thu 23 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b4:9f:20:be:c1:57:e6:35:1c:c9:af:47:32:3b:16:83:9c:55:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 20 00:00:00 2023 GMT
            Not After : Feb 23 23:59:59 2023 GMT
        Subject: serialNumber=fc1581a2db69142fd4bc4aa1f29e208caf97d5d911c2e1ee61ccf23f7732fa36, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a3:31:e5:23:3a:dd:1c:d9:77:b1:b1:91:74:
                    b0:82:be:c5:41:d0:f8:4e:54:12:22:e8:b6:2a:88:
                    c1:a1:a5:86:ce:f3:93:d3:4e:15:f0:5e:38:5b:e8:
                    02:60:76:dd:e8:00:a5:9e:b9:89:33:b1:76:d8:5b:
                    3e:d2:10:eb:76:cd:ae:e9:3a:4d:70:03:8e:22:69:
                    1c:1e:d3:7e:06:56:7e:4e:0d:b5:93:7d:49:45:35:
                    5a:80:53:0a:d8:79:8b:a2:34:06:7c:f8:7e:7f:61:
                    c6:fa:09:cd:48:7f:53:d7:94:41:17:f1:b0:4d:6f:
                    54:0b:ec:1d:47:49:6f:db:76:b7:40:f8:9c:ab:ee:
                    e8:73:cd:d5:1f:09:4c:7c:87:cf:fe:d4:41:a5:b7:
                    b9:e3:73:4d:7c:a1:bb:4c:c8:0a:e0:15:e0:e4:f1:
                    4e:04:47:e2:22:46:a8:f5:f4:a9:e4:b7:52:d0:17:
                    7e:81:88:ab:7f:03:d0:f2:8f:b7:f6:8d:1d:75:ad:
                    ed:20:6a:8d:29:2a:6f:52:07:ce:9a:2c:b6:28:f8:
                    cb:73:4c:21:a1:6f:09:b6:2c:c3:c3:b1:92:68:8a:
                    88:88:da:12:6b:36:8d:c1:9d:fd:d0:b2:18:63:64:
                    b9:c3:cf:85:a4:34:b6:14:dc:41:ba:2e:5c:97:2e:
                    72:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A6:CF:7F:FA:DE:0D:19:72:27:54:B2:A7:9D:98:1A:0B:D0:B2:6E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d6d828d1-e59f-4946-87fd-ae2a2bc05b8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:53:35:a8:7e:d7:54:82:5c:92:d6:d8:f8:4d:21:c6:60:db:
         6d:dc:8e:97:c9:9b:19:6c:86:3f:99:48:c1:a4:3f:81:f2:c0:
         9f:57:85:50:75:96:9b:21:18:ae:6b:9e:1c:5a:32:b4:2b:5f:
         2e:a5:7b:7a:42:31:2a:de:17:21:99:31:4b:c9:0a:0a:93:91:
         25:da:69:4e:88:01:aa:f4:c8:e2:36:e3:a3:e3:c5:77:da:90:
         2a:9b:88:da:a0:9f:a5:80:2f:d0:ed:fc:b9:90:2b:54:18:41:
         4d:df:0f:c8:2a:16:6c:67:96:f2:2d:2e:53:21:04:7c:4b:b1:
         f7:a0:3e:a8:9c:ac:14:de:c6:90:ba:1f:3e:1c:0f:20:10:22:
         b3:70:44:f0:fb:87:bd:96:12:f2:26:68:c3:36:a9:37:64:7f:
         0c:18:e8:58:94:ad:ac:79:3a:e0:72:e8:49:2e:9b:ff:e5:05:
         93:94:36:ef:f9:fe:1f:19:ff:a2:86:d3:06:d2:96:5e:eb:b2:
         ea:6c:56:e5:e9:d1:f4:57:76:e1:19:44:31:17:53:78:63:f3:
         38:d1:4f:21:ea:1e:33:fa:3e:6b:65:ff:fa:c7:85:00:78:4f:
         fc:5c:d4:26:fb:4f:68:07:0c:d2:33:10:79:fc:5e:73:7b:5c:
         2e:d3:79:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----