Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e30fae82-076e-4daf-a80e-ab8f8000dc15.roa
File:                     e30fae82-076e-4daf-a80e-ab8f8000dc15.roa (raw, json)
Hash identifier:          i/mOsToqKLXIRt/+pt0k266gO71geL9NkiaNW0fhmhQ=
Subject key identifier:   E0:77:C9:F8:F7:EB:52:5F:B4:C6:36:AB:0F:24:A6:52:98:F9:3B:3D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       48A7A222C3FE6AC704BBBDEE7DD2C829A85949BB
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e30fae82-076e-4daf-a80e-ab8f8000dc15.roa
Signing time:             Thu 23 Feb 2023 00:00:00 +0000
ROA not before:           Thu 23 Feb 2023 00:00:00 +0000
ROA not after:            Sun 26 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a7:a2:22:c3:fe:6a:c7:04:bb:bd:ee:7d:d2:c8:29:a8:59:49:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 23 00:00:00 2023 GMT
            Not After : Feb 26 23:59:59 2023 GMT
        Subject: serialNumber=062354244ce2a9643c9b2708c3442dd6144598e1ec0faa8409cd33d08f611f1a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ff:e7:eb:54:4a:a9:62:a4:46:2a:2f:7b:c9:
                    d6:a4:6a:95:b7:7b:8c:7a:3e:16:f7:49:ba:42:b4:
                    76:05:01:63:fd:e1:98:00:cc:2e:ff:eb:00:1f:b5:
                    ef:91:9a:fa:1f:6f:af:04:43:02:2f:10:86:9e:43:
                    72:e7:ea:7d:13:12:28:45:9f:9a:5d:e6:9e:1d:5a:
                    e8:e8:18:b4:66:df:3e:50:9e:23:1d:12:a9:ad:b0:
                    04:f0:e9:56:d1:3a:c8:c3:1e:b3:7b:39:1e:bb:69:
                    c9:35:d0:3a:d0:eb:cb:94:42:d2:4d:0c:1b:bf:7f:
                    1b:08:46:6e:34:e0:8f:4a:af:a7:f1:dc:90:20:13:
                    72:02:35:60:ed:82:89:5c:7c:c6:3d:80:d0:53:a0:
                    d5:15:a2:0d:85:a5:cb:f3:49:71:96:e2:42:52:6c:
                    99:cb:32:16:82:05:f1:61:b0:b0:5d:2d:51:83:21:
                    86:6e:96:e0:f2:64:e1:c7:65:62:41:3e:99:82:d8:
                    42:3b:b7:9c:64:eb:77:47:89:1d:24:4a:68:43:fa:
                    39:16:38:d8:97:41:d8:d9:2d:3c:ef:76:1c:7f:50:
                    f7:90:1c:ce:e9:85:e7:ec:0a:2b:da:74:98:43:53:
                    eb:79:51:34:bb:a8:53:51:f8:ad:8e:74:a7:c8:ac:
                    4e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:77:C9:F8:F7:EB:52:5F:B4:C6:36:AB:0F:24:A6:52:98:F9:3B:3D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e30fae82-076e-4daf-a80e-ab8f8000dc15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:e8:79:9f:60:b8:63:4d:96:cb:ad:0d:19:53:ec:57:7d:c9:
         ee:4d:d5:10:f2:9b:ae:13:6e:5e:e3:5a:75:5a:f9:88:f2:9a:
         59:10:12:9e:77:e5:11:51:dc:45:62:1c:d3:7b:d6:76:d1:ad:
         1c:28:7a:76:af:2a:af:a5:1a:3c:b8:19:dc:12:2b:8d:d7:8e:
         3e:fa:c5:21:75:08:5d:e8:7a:49:07:44:e6:93:9b:e4:cb:b6:
         d2:47:d1:2b:a2:98:82:20:5b:8d:03:68:90:47:c0:8f:38:d5:
         31:f5:3a:55:60:36:6f:a2:17:1d:3c:c8:90:15:2c:71:fc:ed:
         47:b3:c8:5e:3a:5f:da:aa:03:18:c7:e9:ce:9b:ef:58:c6:1e:
         ff:3b:f8:5f:1b:9a:fa:87:1d:7a:e0:8c:a0:1f:74:35:f9:ab:
         4c:69:81:5f:5b:5b:0b:aa:5c:b9:cc:2a:5a:5e:a5:6d:3e:bb:
         d0:4f:94:57:50:c1:25:9a:55:63:86:8e:83:33:f2:16:ec:f6:
         7c:a8:7c:31:6c:5d:0d:43:8e:9c:a5:33:6f:75:53:12:39:46:
         83:8e:91:ce:8a:69:95:78:09:d1:f1:ad:cd:40:20:34:64:8f:
         ea:db:d1:b7:45:0a:c6:ff:56:af:e5:2d:57:58:e2:cf:13:b5:
         e0:83:f9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----