Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e5f9e045-1ab0-4df0-84ba-4b8c9ac86b52.roa
File:                     e5f9e045-1ab0-4df0-84ba-4b8c9ac86b52.roa (raw, json)
Hash identifier:          LoJQfT+/wMpIqoJm3QmmlrJKJhtIUB5N54hktQ7LYA0=
Subject key identifier:   43:03:11:61:A5:E5:A7:2F:25:10:45:5D:DE:BC:49:28:47:BF:70:A6
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1A902378BE8C75CA8AE69F76EB41551C783D8287
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e5f9e045-1ab0-4df0-84ba-4b8c9ac86b52.roa
Signing time:             Fri 17 Mar 2023 00:00:00 +0000
ROA not before:           Fri 17 Mar 2023 00:00:00 +0000
ROA not after:            Mon 20 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:90:23:78:be:8c:75:ca:8a:e6:9f:76:eb:41:55:1c:78:3d:82:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 17 00:00:00 2023 GMT
            Not After : Mar 20 23:59:59 2023 GMT
        Subject: serialNumber=84452d5a68ed284cfa799b89bcf3cd4ec4bfd880a4c887ec456e89721d0cc6f4, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5b:f1:25:aa:a0:55:cf:40:db:9b:c2:98:88:
                    bb:3c:2d:2e:1a:2a:8c:33:c7:5c:e0:7a:24:c1:01:
                    4f:c6:00:12:77:03:6a:f8:2b:09:f0:8c:38:a3:6f:
                    26:42:6b:05:71:93:7a:88:eb:02:f7:9b:c6:ec:a7:
                    ef:3f:6a:16:d0:4d:1b:b8:cd:12:82:3e:14:22:d3:
                    2f:45:a1:58:1b:03:e4:34:03:d2:9f:39:01:22:2a:
                    02:a2:15:9d:4b:3a:c5:5e:dc:55:57:7f:c4:81:15:
                    db:57:60:fc:c1:87:f7:a7:93:3b:a4:89:f2:9b:41:
                    96:bc:3b:69:db:73:9a:18:0d:4e:8e:14:96:76:97:
                    02:10:60:eb:06:2f:d6:f8:c8:eb:f8:ab:8c:b4:7d:
                    33:f0:4a:dc:eb:99:14:82:f1:32:54:9f:a3:1d:d4:
                    63:b9:94:3f:60:23:2f:f5:c6:00:d1:c4:d4:22:50:
                    fb:78:9f:61:cd:b2:79:5c:6b:fd:45:32:2d:4f:5e:
                    fb:9e:ab:4c:a6:3f:1e:62:7a:2b:e0:fb:eb:a4:f6:
                    5a:fb:26:dc:6a:31:32:2d:7e:86:bf:55:62:1c:7a:
                    9e:4f:0b:75:4d:1e:93:c5:38:5c:8f:0a:13:4a:90:
                    c7:d7:67:8a:fa:3f:43:0c:a4:8e:04:a1:64:1c:5f:
                    02:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:03:11:61:A5:E5:A7:2F:25:10:45:5D:DE:BC:49:28:47:BF:70:A6
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e5f9e045-1ab0-4df0-84ba-4b8c9ac86b52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:a1:1d:7f:f9:c0:09:89:74:30:29:79:3b:03:99:94:a8:4c:
         20:1a:a2:0a:a9:91:f4:32:c9:09:29:43:8e:fc:7b:d1:dc:26:
         50:d0:30:3e:9a:27:0a:45:75:c3:ae:5c:45:ea:1f:23:59:99:
         c9:b5:cc:88:d6:a9:50:57:83:6d:79:ec:23:14:ad:e3:f3:89:
         b9:36:8d:d8:8b:69:b2:c6:00:00:dd:d2:77:30:79:72:01:12:
         30:2e:49:01:b9:2f:ac:b5:5e:81:65:6a:10:7e:73:1f:7d:5b:
         7e:6f:b8:4b:9c:58:5e:eb:a1:1e:de:4b:90:a8:b4:bc:03:2f:
         94:e9:e9:a0:ef:5c:38:7c:4c:e5:ae:35:af:ef:36:21:35:4d:
         f9:eb:05:b1:80:fa:df:e5:0b:18:9f:e2:9b:e8:d1:08:a1:f2:
         e7:93:bf:6e:9b:6a:31:b3:84:72:d4:4d:2c:24:20:58:3c:b2:
         c6:f0:7b:15:36:7a:ea:d0:96:29:74:18:c6:b6:15:4a:19:25:
         d6:77:e4:a8:8b:f7:75:61:e6:1f:db:ca:02:c0:03:fa:3a:19:
         48:a7:13:a8:c4:0a:8c:45:d0:f9:31:b3:7c:f2:35:7b:4c:32:
         8b:b7:da:d5:2c:95:b2:d0:6c:e1:6b:f2:40:32:b2:a5:a6:bf:
         86:f1:7f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----