Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ddc15fc0-b6b9-4ef4-832a-9191a42d7785.roa
File:                     ddc15fc0-b6b9-4ef4-832a-9191a42d7785.roa (raw, json)
Hash identifier:          Pdf5EGRJJHL/1wtwSJ9N8AIJOYSUcw2pSg986W6Hh7Y=
Subject key identifier:   F1:D2:34:DB:50:D4:A5:B5:E8:7A:07:1D:52:91:B0:A7:D5:4A:B9:30
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5F52E54DCD8A9909DDA85B7D3DA30FBACEDCFE5C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ddc15fc0-b6b9-4ef4-832a-9191a42d7785.roa
Signing time:             Fri 10 Feb 2023 00:00:00 +0000
ROA not before:           Fri 10 Feb 2023 00:00:00 +0000
ROA not after:            Mon 13 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:52:e5:4d:cd:8a:99:09:dd:a8:5b:7d:3d:a3:0f:ba:ce:dc:fe:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 10 00:00:00 2023 GMT
            Not After : Feb 13 23:59:59 2023 GMT
        Subject: serialNumber=41e2a857cd994710f7991e69ae9d9a9b428b17e4cd888116f3a46d25da364bb5, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:27:f7:65:75:8d:a3:3d:3e:ba:da:34:ef:
                    67:fc:bf:53:39:81:45:13:91:b5:a1:e6:df:4f:2b:
                    71:49:8e:c1:35:02:87:71:c3:c1:e1:0a:02:bf:b0:
                    db:19:19:85:65:43:9e:af:54:a4:36:cd:89:27:a0:
                    67:48:71:67:50:90:ef:f4:cc:70:5c:4f:dc:61:91:
                    05:24:a1:82:df:0d:01:77:1d:59:da:50:7c:e9:95:
                    f7:f4:54:ef:0d:38:01:f2:a4:36:13:78:ea:f9:4b:
                    3d:31:fe:f5:28:66:c2:27:4f:a0:d8:9c:95:b0:26:
                    36:40:53:b8:31:54:f3:54:70:bd:5f:86:d3:4d:3b:
                    1f:73:3d:3d:d9:b6:21:e4:ef:63:59:cb:58:80:29:
                    9f:5e:35:aa:79:42:4d:5c:31:25:b5:62:38:25:80:
                    2b:74:fa:ca:f4:be:b4:c6:29:5c:37:c7:d2:28:8a:
                    25:33:64:43:cc:45:d1:92:a3:cf:8d:92:f8:c2:1f:
                    b9:aa:25:c3:6a:7a:5c:24:a3:8b:e5:0c:7c:a6:25:
                    f4:54:a2:be:e7:5c:22:c1:34:45:8f:ad:94:66:71:
                    02:c4:70:e0:1e:2e:dd:2e:1b:55:b5:e2:27:06:d2:
                    80:8a:7e:9b:83:23:aa:dc:30:5a:bb:ce:44:d6:d0:
                    4b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D2:34:DB:50:D4:A5:B5:E8:7A:07:1D:52:91:B0:A7:D5:4A:B9:30
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ddc15fc0-b6b9-4ef4-832a-9191a42d7785.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:56:74:62:8b:19:8d:62:7c:0d:47:cc:bb:6d:03:89:cc:2f:
         92:f7:e9:6a:d6:e8:4a:b6:aa:53:bc:66:0b:e7:90:bb:a8:70:
         3e:4e:92:39:4d:7d:0c:70:4c:a4:31:1e:d6:14:54:93:73:07:
         9f:a4:fd:70:2c:2b:e9:41:49:7c:ce:3b:1c:24:56:f1:52:40:
         04:5d:9b:38:41:fe:04:a8:a6:b4:62:1f:43:28:a8:32:c3:4e:
         f9:7a:c5:9b:66:2b:c0:b9:6e:e1:ad:7d:c0:98:2c:31:cc:6f:
         9a:6a:89:2b:c0:97:0c:da:83:50:fb:cb:b5:d9:0d:68:d2:80:
         42:d5:b9:e9:c7:2c:0b:ff:8f:1b:6b:54:9b:51:a8:ae:f7:a8:
         fa:da:e7:8f:7c:fc:1c:58:8b:cb:65:11:8f:01:8c:bf:17:f8:
         5d:e1:52:44:54:47:e9:24:7c:15:3e:b6:49:a9:99:26:c7:c2:
         4e:79:d6:aa:a6:f1:87:c7:c7:0c:20:6c:e2:df:bd:cb:64:e1:
         b8:c2:62:7b:1b:ae:a6:74:73:d1:15:d2:a6:b2:17:c9:af:3a:
         b0:49:01:d2:70:99:c9:67:ad:e7:b7:95:23:88:1a:d2:12:3a:
         e9:37:09:7e:9b:93:c9:09:db:6e:0c:0f:64:d3:4b:3e:75:0a:
         21:0f:71:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----