Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f2a6e948-2bbe-4cee-93aa-a1dea0357d70.roa
File:                     f2a6e948-2bbe-4cee-93aa-a1dea0357d70.roa (raw, json)
Hash identifier:          eg+HbG1EzpBahV/qmH5XZ+T+2/qHyYiGPPA017up9js=
Subject key identifier:   75:30:5B:95:1C:33:CC:35:A8:F1:5D:B8:C9:D1:7D:73:F1:0C:B5:AA
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       22987FB556243EFCE5B501BAC4833FCB32317954
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f2a6e948-2bbe-4cee-93aa-a1dea0357d70.roa
Signing time:             Mon 13 Mar 2023 00:00:00 +0000
ROA not before:           Mon 13 Mar 2023 00:00:00 +0000
ROA not after:            Thu 16 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:98:7f:b5:56:24:3e:fc:e5:b5:01:ba:c4:83:3f:cb:32:31:79:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 13 00:00:00 2023 GMT
            Not After : Mar 16 23:59:59 2023 GMT
        Subject: serialNumber=4bd265193dd240a19dfc8c9482f0b71fd9bf541d5b9996e805c1fba7f13952c1, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:d7:11:2c:ec:c9:53:49:07:34:52:59:4e:
                    52:f1:a6:a5:a2:a3:7c:ae:6b:78:3c:63:87:0d:12:
                    6c:f6:c3:41:c0:75:29:be:d6:39:5d:c3:ee:1c:00:
                    6f:b7:3f:1a:3a:86:68:40:41:59:e0:bf:71:b3:3c:
                    1a:30:cd:ce:72:af:45:41:22:58:9c:df:86:96:c7:
                    ca:ee:9c:56:5a:08:d3:8f:b1:d9:ee:65:14:d3:09:
                    61:d0:5f:41:a3:a0:be:eb:8a:0f:5e:7a:23:d8:f1:
                    ed:4f:64:4a:7c:47:6a:03:ad:ed:8c:82:00:dc:8f:
                    9c:a7:32:9d:6d:8d:6e:30:55:cd:63:34:93:f3:57:
                    dd:8d:a3:e6:26:39:e1:98:a6:18:d9:f3:e2:5e:5b:
                    08:d8:cc:f8:c9:a1:1a:49:65:7b:d7:f6:1d:79:a8:
                    8b:ea:fe:e5:6f:9e:8e:7b:49:d5:42:5b:0d:08:54:
                    b8:75:ae:83:ac:d3:b9:07:32:20:5f:18:6a:c4:60:
                    bd:4f:2a:ff:dd:f3:d2:62:d7:b5:98:2f:d9:56:f8:
                    5c:13:31:04:be:6a:52:7e:a7:56:db:13:f5:a7:db:
                    6a:1e:97:d8:26:1f:fe:cb:81:c4:c3:19:8f:ef:fb:
                    71:35:90:23:9c:68:48:08:32:9f:b1:85:cb:87:62:
                    3d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:30:5B:95:1C:33:CC:35:A8:F1:5D:B8:C9:D1:7D:73:F1:0C:B5:AA
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f2a6e948-2bbe-4cee-93aa-a1dea0357d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:7f:a6:ff:cb:38:75:4d:d9:c3:e9:96:0a:35:30:a9:15:07:
         75:1e:d0:29:8b:67:13:9d:ab:a7:dc:b0:51:3e:9d:ec:65:b1:
         d7:ef:85:2e:ad:fc:de:0b:65:b7:bf:dd:d7:12:24:fa:cc:04:
         2e:71:04:cd:41:07:0a:b0:61:f8:d1:6a:b3:59:bd:cf:2e:21:
         3f:f2:e8:0b:45:37:8b:27:65:10:6e:0c:5b:fd:7e:92:db:39:
         31:c1:b0:69:ea:ed:db:04:8a:07:75:c0:fb:1a:b0:f1:c2:13:
         38:df:74:9c:43:0a:be:a5:ee:c8:bc:99:6c:b5:ab:fd:b1:9d:
         59:bf:41:48:3d:ae:8b:d5:8c:8f:13:94:22:41:33:a3:86:c3:
         b0:da:4d:f5:0b:31:a3:d2:cf:c4:a0:ce:84:c5:73:50:8c:6b:
         50:fb:02:1b:6e:a0:72:fe:05:af:11:6f:07:15:c9:a6:74:35:
         85:b2:f3:b7:11:3b:d1:62:7c:31:e8:66:ec:49:e9:8e:15:62:
         15:cd:21:13:92:2f:cf:86:be:7b:fa:f8:bc:15:d5:22:a0:23:
         42:95:c0:c6:8e:86:86:b3:c2:76:53:8b:f5:59:e5:50:e6:bb:
         66:31:14:01:f5:51:98:69:58:c4:91:48:4a:67:4a:05:e2:49:
         20:45:71:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----