Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ed145b05-ca5e-4511-a2d1-ac14517e08c1.roa
File:                     ed145b05-ca5e-4511-a2d1-ac14517e08c1.roa (raw, json)
Hash identifier:          jksrQrQzQXMO4yqZGYnNobaRPVssacvBPR7yFi/xO5c=
Subject key identifier:   E1:E5:66:A9:EB:90:8D:2B:F9:FA:F4:10:16:F6:A7:13:3F:49:B6:B9
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4EC99CF0D6F15D711045F0BCDCA84187F53BA232
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ed145b05-ca5e-4511-a2d1-ac14517e08c1.roa
Signing time:             Wed 28 Dec 2022 00:00:00 +0000
ROA not before:           Wed 28 Dec 2022 00:00:00 +0000
ROA not after:            Sat 31 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c9:9c:f0:d6:f1:5d:71:10:45:f0:bc:dc:a8:41:87:f5:3b:a2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 28 00:00:00 2022 GMT
            Not After : Dec 31 23:59:59 2022 GMT
        Subject: serialNumber=2a9542e125e836099007b34bd832fc67fcf42a261c6d9b65c21e072c2005e699, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:c4:66:dd:d0:56:c6:af:58:65:0a:a0:fb:
                    67:cd:9d:fa:80:77:e4:9a:eb:f1:63:18:16:c1:f0:
                    47:93:fa:76:bb:bc:a8:f8:01:e0:11:fb:73:f8:07:
                    ef:74:f1:eb:48:e5:9b:94:23:44:5f:93:78:28:35:
                    d4:45:84:b6:5e:62:d1:ee:44:f4:6b:e9:08:9b:d4:
                    dd:77:23:ff:49:93:b6:9a:8a:0e:07:99:5e:fb:f3:
                    19:75:80:ab:fa:c3:3b:7d:02:c1:28:c5:5e:9e:f4:
                    e4:a7:df:61:a5:07:03:65:48:2c:d1:9f:36:d4:6b:
                    63:e0:71:a7:96:73:f3:e3:f6:bf:2f:b1:42:6e:1c:
                    af:b8:7d:f2:9c:12:e4:b2:1e:3f:10:93:3a:3c:20:
                    3e:d2:82:13:eb:9a:a5:1d:3e:e9:36:f5:37:a3:92:
                    60:f7:58:a0:ca:b9:b6:86:2f:dd:ce:73:f5:e2:d2:
                    e5:ce:98:bf:6a:86:99:74:22:d6:b7:a6:f3:e9:2c:
                    80:83:3c:1b:cf:3e:f6:05:e8:6c:7a:24:bd:19:ff:
                    16:3b:86:33:7c:21:60:ee:66:93:35:d9:0a:cd:da:
                    5f:c6:76:52:c1:a2:c2:b6:4a:94:1b:af:a2:29:e4:
                    00:73:00:0d:7f:b7:99:81:0a:a9:d6:14:0c:4d:9f:
                    55:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E5:66:A9:EB:90:8D:2B:F9:FA:F4:10:16:F6:A7:13:3F:49:B6:B9
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ed145b05-ca5e-4511-a2d1-ac14517e08c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:6e:64:12:74:18:20:7c:e9:e1:a5:54:1a:d3:38:f4:e7:b9:
         65:20:d3:df:07:71:6f:37:fa:71:22:39:38:d0:bd:dc:83:c0:
         21:a6:10:28:19:a1:3e:23:ba:82:e3:fe:6a:8d:b2:5e:d2:55:
         8c:13:91:47:e5:cc:86:13:26:e1:c5:8b:08:22:0b:39:8f:73:
         38:87:24:48:be:99:7a:50:d6:e8:4f:ee:c7:44:30:a4:91:c4:
         78:de:d4:cf:1b:9f:59:7f:6f:78:b0:bd:d8:8c:7c:4a:c5:ca:
         7f:54:60:5b:6a:b0:0c:09:66:85:67:16:ee:18:08:0f:28:24:
         78:55:98:46:2a:d2:27:95:3a:64:54:63:e0:ea:6b:c2:2d:85:
         78:ec:9c:0d:12:2f:a1:b2:84:f0:87:d3:71:5d:e8:48:48:11:
         40:b3:1d:84:5a:d4:b9:b4:7c:b2:6a:16:79:cc:14:c2:ef:1c:
         1e:80:9f:c3:c3:7e:17:56:76:67:64:55:2e:46:be:a6:8d:4a:
         13:da:9e:2a:e9:e9:16:04:01:3f:16:1a:af:e3:d9:96:69:82:
         59:61:25:43:d6:d0:53:53:21:ba:e4:3e:5e:5a:7d:06:a4:69:
         cd:41:1f:6d:90:62:c0:cd:93:b5:c3:c6:58:e9:68:63:d0:24:
         9f:96:f6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----