Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e572ff6d-4dba-4c8f-98fd-81076b1a5422.roa
File:                     e572ff6d-4dba-4c8f-98fd-81076b1a5422.roa (raw, json)
Hash identifier:          m+/qdA/2xto/zUuywMIruewg5Kig1pwY8RmqjhP0j+0=
Subject key identifier:   6F:BC:05:E7:EB:2E:A5:F9:82:52:FC:BD:1B:99:B3:D1:EE:78:43:2F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7FFD3FC1FF9BAF476E9A023E2CDEB703029EB272
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e572ff6d-4dba-4c8f-98fd-81076b1a5422.roa
Signing time:             Thu 20 Apr 2023 00:00:00 +0000
ROA not before:           Thu 20 Apr 2023 00:00:00 +0000
ROA not after:            Sun 23 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:fd:3f:c1:ff:9b:af:47:6e:9a:02:3e:2c:de:b7:03:02:9e:b2:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 20 00:00:00 2023 GMT
            Not After : Apr 23 23:59:59 2023 GMT
        Subject: serialNumber=5c51b42cbe4b66ef4ef080048781bba3fb2571d18a8c7c5ae587901dbd6625d8, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:27:c6:aa:0f:ff:d7:0b:db:56:96:72:cb:
                    14:13:16:18:a6:b9:9f:85:f4:64:41:b9:89:32:ac:
                    1e:e1:a9:bf:7d:09:b3:9d:a7:91:ff:70:a3:6e:2e:
                    79:3b:b8:22:70:e7:b9:8b:3e:ec:49:8c:bd:02:22:
                    42:34:25:6e:ec:a6:0a:15:8f:5b:9c:78:b2:df:75:
                    a6:da:b1:10:e9:78:08:bf:62:e6:0e:12:62:ca:f6:
                    5f:4d:63:4e:c2:c8:29:02:9d:51:cb:a2:64:fa:df:
                    80:85:f5:71:b0:41:3b:a7:a4:5b:7a:03:14:41:ab:
                    32:84:49:e8:78:b9:f7:fa:40:4f:85:3c:ca:36:4a:
                    28:1e:bb:58:92:42:60:fc:7a:32:94:c6:e1:4b:68:
                    09:67:f3:f4:fc:a6:0a:0c:09:fa:15:92:04:cf:67:
                    9f:16:9b:f0:d0:d1:04:0b:9b:c5:9c:4c:b7:72:20:
                    4d:c5:16:6f:21:91:0e:eb:cd:07:77:2c:bd:8d:35:
                    03:dd:0c:94:6d:d2:23:33:f6:98:a6:f5:21:67:e3:
                    b4:56:f6:1c:a6:21:63:10:53:27:26:cc:fe:0d:cf:
                    c3:a7:11:e8:e6:3d:85:d6:bb:13:82:f1:a2:00:2b:
                    b6:90:fa:f5:6f:19:34:c6:71:6b:4a:d3:8a:42:48:
                    46:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BC:05:E7:EB:2E:A5:F9:82:52:FC:BD:1B:99:B3:D1:EE:78:43:2F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e572ff6d-4dba-4c8f-98fd-81076b1a5422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:34:08:f5:82:8c:69:e2:f8:a0:81:d0:95:11:46:55:56:c0:
         11:3e:ff:50:b1:a3:f8:6b:72:68:45:ed:db:c3:37:6a:e8:b2:
         6d:31:c9:c8:ef:79:64:4c:c7:b0:7e:bc:50:b5:aa:4a:3e:39:
         0a:44:f8:38:ad:4c:b3:bc:7c:ce:eb:55:c5:73:c7:44:75:00:
         b2:b2:9c:44:af:1c:da:2d:18:6b:87:a1:58:c1:f3:6c:bc:21:
         6c:d3:38:82:e2:2c:3e:39:1c:f7:72:c7:44:07:4e:9a:4e:47:
         01:5c:86:b7:10:33:d9:ad:6b:0f:4b:40:d1:b6:61:2c:b9:25:
         0b:67:bc:4d:91:f6:9a:65:4e:ac:54:31:35:5f:87:7b:78:1e:
         a0:41:db:b0:01:b2:80:9b:58:86:f9:d2:64:a4:d1:e1:dd:a7:
         8d:bd:d1:95:30:7d:e5:b8:56:16:f3:61:9d:c3:ed:cb:da:ed:
         a8:72:bc:4d:8d:ef:13:d2:23:1a:fe:83:43:26:28:d6:de:eb:
         b3:1c:19:f8:9f:9b:09:f8:dc:e0:51:fe:84:4b:59:4f:5f:1e:
         71:e8:03:99:3a:f5:37:52:3a:65:b5:da:13:74:2f:73:91:c7:
         33:5c:11:78:92:45:6d:f6:de:20:89:c4:19:7c:ac:97:b2:f3:
         b6:cf:9e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----