Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f4ad69e2-2ead-4356-998c-2f055b4f32a8.roa
File:                     f4ad69e2-2ead-4356-998c-2f055b4f32a8.roa (raw, json)
Hash identifier:          Zc2ZpeTmoyKaiJOK/KyiUZ0XAvvLxPte6SNYKRlfcsU=
Subject key identifier:   4B:98:EF:D8:FE:6E:EC:0B:2D:DD:9D:8B:35:4C:1F:54:63:EE:E1:80
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1D4C1080795A7D35019E5D9D6BC5AA3BD005C167
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f4ad69e2-2ead-4356-998c-2f055b4f32a8.roa
Signing time:             Thu 16 Mar 2023 00:00:00 +0000
ROA not before:           Thu 16 Mar 2023 00:00:00 +0000
ROA not after:            Sun 19 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4c:10:80:79:5a:7d:35:01:9e:5d:9d:6b:c5:aa:3b:d0:05:c1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 16 00:00:00 2023 GMT
            Not After : Mar 19 23:59:59 2023 GMT
        Subject: serialNumber=184aed76030ba7b90a4f742d4bf491ef7497d96b300f05315043e0f8c212da46, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7e:50:a8:76:fc:d8:a3:46:19:b8:5a:d0:4d:
                    05:54:19:62:8b:c9:51:eb:41:5b:3f:b6:9c:07:22:
                    ac:d5:a7:e4:50:25:f6:8f:0d:6a:54:ee:b2:ab:50:
                    18:d6:d2:78:53:27:1b:46:29:9f:e5:10:2a:e3:ff:
                    45:6d:20:ee:b2:a1:fd:2f:2e:12:44:94:bb:c0:97:
                    f5:07:8d:5e:48:ce:3b:7f:5c:e2:df:78:c1:9d:6f:
                    c1:92:67:0a:52:18:ef:5d:ee:67:ce:c3:96:14:d1:
                    26:7c:11:b2:a3:ee:03:eb:9e:82:62:e9:08:cc:cb:
                    21:e8:13:fe:06:ca:3e:78:23:1b:67:43:92:cd:d3:
                    a9:fd:ae:bf:65:4d:83:09:81:b0:7f:4a:0f:71:85:
                    bf:bf:ff:94:78:4e:94:7c:f3:1f:17:e6:4c:fa:3c:
                    b1:fa:32:58:8a:36:64:88:13:db:29:9b:c2:ff:14:
                    c7:ac:e8:80:8a:4a:93:5d:bd:fb:82:c3:d2:6e:fb:
                    c1:43:17:cb:ce:27:9b:72:a7:84:a1:fc:28:78:cf:
                    59:99:07:b2:c5:c1:13:7e:6a:2c:af:18:c8:5b:f5:
                    49:2e:13:e6:bd:2a:05:6b:9b:97:d9:d0:59:30:18:
                    12:28:aa:8d:8d:c9:f7:bc:d8:e0:82:8a:68:6d:3d:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:98:EF:D8:FE:6E:EC:0B:2D:DD:9D:8B:35:4C:1F:54:63:EE:E1:80
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f4ad69e2-2ead-4356-998c-2f055b4f32a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:12:02:a5:f9:06:7c:0b:d6:33:76:e5:2f:cf:f7:ac:9b:d7:
         6a:1d:b6:67:77:3b:51:04:fb:04:d2:b4:29:2e:71:6f:54:23:
         c6:e3:25:81:14:04:2a:df:b8:58:a7:4b:21:f8:09:39:c6:64:
         b6:05:38:fc:06:e5:e7:40:f0:61:f3:00:f0:ee:7d:a3:e7:78:
         56:f4:57:5b:f9:97:c3:9e:9b:c8:e7:db:5b:89:5e:78:46:3d:
         3b:26:08:74:d5:b2:fe:f3:91:50:88:88:76:25:53:77:cd:01:
         3a:87:f1:18:e5:83:9e:a9:ac:0f:1e:3a:c9:3a:8d:a8:ff:3a:
         da:aa:a5:f4:e5:63:21:ce:00:ec:81:0d:ee:c9:3c:d4:58:8b:
         b4:be:ff:3f:1e:32:66:45:77:2d:9f:5a:93:4d:92:a6:75:16:
         ed:84:b5:76:c0:39:86:01:67:2e:da:dd:9f:1f:37:5f:d8:b5:
         ec:b0:d7:62:15:a8:24:a5:d2:72:9c:37:27:66:fd:99:70:01:
         31:d4:6b:f9:84:13:e0:d7:ae:c0:56:c9:0b:ba:92:cc:e5:8e:
         71:46:54:60:2d:02:d8:c4:17:7f:93:2c:5d:53:db:4a:83:96:
         48:69:99:f9:d6:d3:8e:07:65:ee:a7:2a:16:23:1c:b7:25:03:
         4b:78:4b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----