Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d87d94e4-0398-42c9-bef3-3f711f963a7e.roa
File:                     d87d94e4-0398-42c9-bef3-3f711f963a7e.roa (raw, json)
Hash identifier:          mspBye4AIHqxtcKDY2ofZ3ua7+ypIfYm99dUEVjuOxw=
Subject key identifier:   BB:94:B8:CC:0F:99:D0:B9:8A:D6:26:E3:49:90:0F:B9:6A:13:B4:AB
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1050FCB4A8996420078631A5DD24FA4C89C8588E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d87d94e4-0398-42c9-bef3-3f711f963a7e.roa
Signing time:             Sun 26 Feb 2023 00:00:00 +0000
ROA not before:           Sun 26 Feb 2023 00:00:00 +0000
ROA not after:            Wed 01 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:50:fc:b4:a8:99:64:20:07:86:31:a5:dd:24:fa:4c:89:c8:58:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 26 00:00:00 2023 GMT
            Not After : Mar  1 23:59:59 2023 GMT
        Subject: serialNumber=ab7f816c7e1c31b59871f626b13f2df99349f7c0395a8173b590643266153164, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:33:db:53:d7:a6:6a:02:24:3f:69:c1:fa:9c:
                    06:03:7a:f0:f0:11:21:d0:10:3f:cc:87:7c:90:a1:
                    e8:ae:36:8d:c8:f2:aa:0c:82:2d:aa:0e:c7:42:fd:
                    4f:58:f1:bb:92:5b:32:e1:16:6c:02:0f:2c:92:a1:
                    96:ef:e5:63:31:58:70:06:57:d4:7e:1d:1b:16:34:
                    65:a1:3c:40:9e:cd:e0:cf:f9:c3:d0:72:41:99:16:
                    e6:d5:38:74:f1:a0:2d:46:27:80:51:24:55:f0:1b:
                    9f:d1:13:47:ca:32:dc:a0:44:27:c9:ea:ef:b9:6b:
                    ee:ea:44:83:26:de:af:38:c3:ef:04:1f:91:67:57:
                    99:68:b3:79:9a:e7:c8:3e:bd:87:f5:f5:f9:48:ed:
                    ad:1c:6a:4f:5d:fb:2c:19:31:6b:34:9a:ea:56:fa:
                    33:46:0b:81:f7:5a:10:d4:3f:b3:f0:4e:ef:fb:a5:
                    ef:8d:cc:21:c9:71:40:50:d7:88:08:4c:21:ef:4d:
                    54:99:cd:2e:67:5d:69:4a:11:0a:79:82:ed:29:52:
                    d1:6f:a6:8c:5a:bd:4f:bf:dc:d9:2d:b5:0d:00:c9:
                    b9:85:ed:48:8c:89:fa:28:95:7e:42:f4:cd:6b:ac:
                    4a:e5:a9:f5:25:e3:b2:0c:dc:01:fc:ef:2e:40:39:
                    1f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:94:B8:CC:0F:99:D0:B9:8A:D6:26:E3:49:90:0F:B9:6A:13:B4:AB
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d87d94e4-0398-42c9-bef3-3f711f963a7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:c5:e3:5c:0e:fb:60:30:11:7f:49:a6:69:f6:e1:3f:9a:ac:
         88:3e:ac:85:2f:2a:ca:32:69:99:02:72:f6:44:e2:db:37:03:
         fd:fb:fd:f3:fc:37:ec:1c:d2:b0:f4:7e:6b:8b:81:67:b0:52:
         f1:54:36:b7:f9:99:58:2b:38:d4:e5:91:1f:a1:38:02:8a:80:
         3f:6e:02:8a:ea:62:3b:e3:ed:1a:39:e3:db:38:08:14:f1:38:
         15:1c:f6:66:cb:97:23:bc:e0:d0:cc:d7:0d:0e:22:89:6a:3f:
         5e:aa:56:d0:91:d2:bb:ba:e5:34:2f:52:d3:36:4d:f2:18:54:
         f5:24:39:d2:a9:93:20:97:3b:e3:eb:b7:25:6f:e3:11:ad:84:
         2c:5a:f3:89:31:10:c9:30:79:c9:86:6f:a7:cd:17:b7:d5:1a:
         e1:d9:f6:ef:3e:1e:5d:43:2e:d2:70:78:d7:e4:2c:c4:67:61:
         e7:f6:8a:92:56:ea:51:66:3f:ff:78:6d:72:aa:9c:31:8e:f6:
         d7:58:b4:c8:3f:16:45:00:24:dd:b9:06:d4:26:7b:08:a7:24:
         07:5e:27:44:e0:57:29:cd:b4:a6:a5:7b:d8:8f:91:fa:12:00:
         ea:9a:18:b6:7e:0c:92:25:23:b3:5e:2f:fa:45:21:84:59:80:
         1a:9c:f8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----