Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f3dabbde-fb37-44db-bab4-1eb72999a6de.roa
File:                     f3dabbde-fb37-44db-bab4-1eb72999a6de.roa (raw, json)
Hash identifier:          yGa8E7AlSrcKJhyhqoXa2lYlm7teY/T0NFL8oxeJqWA=
Subject key identifier:   B6:3F:44:1C:42:F5:E7:8A:39:60:CE:5F:9C:45:88:2F:FC:9E:74:94
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       086BECEFDA2431DCBB819799BBFC5BFAB1A219DF
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f3dabbde-fb37-44db-bab4-1eb72999a6de.roa
Signing time:             Sun 12 Feb 2023 00:00:00 +0000
ROA not before:           Sun 12 Feb 2023 00:00:00 +0000
ROA not after:            Wed 15 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6b:ec:ef:da:24:31:dc:bb:81:97:99:bb:fc:5b:fa:b1:a2:19:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 12 00:00:00 2023 GMT
            Not After : Feb 15 23:59:59 2023 GMT
        Subject: serialNumber=47a6c933a5aad7bf1fcc618cc4efa1e39cbe401173f1a777d4d778e383a59533, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:26:59:4e:66:e6:f1:e1:f6:04:bb:29:f1:86:
                    28:89:cd:0f:43:25:de:b5:4e:cc:50:be:f1:9b:2a:
                    34:ec:bf:93:a9:0e:e2:c5:13:a7:c8:03:c6:ed:a8:
                    40:17:a3:c7:dd:15:89:af:dc:e6:f7:a1:16:73:65:
                    93:a8:df:d1:e3:be:e3:31:75:ba:57:c4:89:ba:15:
                    46:65:f2:63:b8:6a:69:5a:29:1d:83:35:cb:ad:04:
                    ea:81:a4:e4:f6:ee:4e:19:34:a7:0a:34:e3:5e:ee:
                    b3:47:dc:ee:bc:fc:43:57:74:65:db:1f:0d:1a:19:
                    92:b6:ea:50:69:eb:ae:9a:a5:fb:2f:e4:1c:eb:7d:
                    d8:6d:67:75:0d:5c:74:cb:44:e4:3a:18:a2:c4:cc:
                    2e:f8:73:ba:70:e5:86:11:9a:eb:05:43:4c:3b:3e:
                    c2:98:b6:11:71:16:6a:d8:6b:87:72:af:c3:38:29:
                    f2:93:b6:66:5c:4a:08:a2:ca:3a:9e:5f:6e:09:6a:
                    1f:c5:5f:77:39:35:f2:21:e4:54:03:79:37:53:3c:
                    62:ca:4e:61:a0:1d:f8:8c:55:28:f3:a9:ef:d1:77:
                    89:b7:12:21:c1:47:b6:23:a5:c3:08:56:a8:2f:19:
                    cc:be:17:05:8b:82:39:4a:7a:6e:00:2f:a9:03:c1:
                    ab:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3F:44:1C:42:F5:E7:8A:39:60:CE:5F:9C:45:88:2F:FC:9E:74:94
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f3dabbde-fb37-44db-bab4-1eb72999a6de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:06:41:10:3b:e4:ec:4c:7a:34:1e:25:c1:13:5d:f4:cb:57:
         6b:55:33:ce:7b:56:f1:28:07:98:bd:40:57:3b:92:d6:7d:9a:
         6f:b2:85:9e:e6:3c:6f:05:73:f2:cd:b1:38:06:a9:05:29:f7:
         3f:a9:ab:8a:f2:52:55:e1:fe:c2:13:77:14:86:ef:00:c0:8b:
         83:37:be:c8:1f:59:72:fd:74:b5:8f:fa:3e:d1:a7:51:aa:9c:
         81:f0:f1:65:86:30:51:aa:66:f5:bf:51:81:bc:84:b8:db:c1:
         35:f4:e7:19:60:2e:4c:d2:e0:7b:25:be:0f:4c:ec:4f:06:e6:
         08:45:18:a3:16:e5:af:42:91:e2:df:86:cc:94:10:70:68:80:
         0c:30:75:4d:19:0b:76:32:1a:f4:ee:19:d5:c7:cf:e6:fb:97:
         73:d1:31:57:ff:9b:03:64:40:87:1a:7f:66:22:c5:02:1c:31:
         bb:9a:01:ea:bb:39:19:da:f8:c1:c9:82:52:39:c4:d8:c6:6a:
         91:5a:d1:1b:ce:c9:6d:b3:9b:89:f4:cd:0e:42:d3:9b:2a:1e:
         d8:69:ba:fe:4d:b2:8f:02:a4:12:10:38:fa:2a:be:f5:51:fa:
         2f:f1:1f:f7:7d:36:61:fc:13:f6:5e:6a:36:47:22:71:80:e2:
         27:89:29:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----