Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f4d52f92-d778-451c-9928-bcb96d1f8e7c.roa
File:                     f4d52f92-d778-451c-9928-bcb96d1f8e7c.roa (raw, json)
Hash identifier:          xGHSDL80g77gkp6ZT0fWKYfHiAZKUmjAThCkAdP6Caw=
Subject key identifier:   71:5A:A1:8B:A8:83:81:E4:73:E9:5C:D1:60:34:3E:65:EB:00:3E:C5
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6875E328179EF60D6BDFB1DAB74459B966A54700
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f4d52f92-d778-451c-9928-bcb96d1f8e7c.roa
Signing time:             Mon 09 Jan 2023 00:00:00 +0000
ROA not before:           Mon 09 Jan 2023 00:00:00 +0000
ROA not after:            Thu 12 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:75:e3:28:17:9e:f6:0d:6b:df:b1:da:b7:44:59:b9:66:a5:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan  9 00:00:00 2023 GMT
            Not After : Jan 12 23:59:59 2023 GMT
        Subject: serialNumber=bd1c0efc3b2ea0748114201692d969b255c96c48a5131f891e3d71cd219e530c, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:37:2d:59:c9:a9:e5:e5:f6:ec:f1:8d:c2:1a:
                    94:a6:87:59:90:71:81:22:97:f0:48:fa:f0:80:30:
                    e6:d3:49:06:a2:f0:76:40:2a:87:50:0d:69:91:ef:
                    03:9a:cc:89:cd:90:b4:03:8d:53:3f:08:36:ae:ca:
                    93:27:f8:21:f8:f4:22:fe:79:cc:68:ef:8b:2a:96:
                    da:bc:96:19:b1:3f:9d:fa:75:33:92:3c:83:2b:b4:
                    33:8b:c5:4e:7c:86:70:fe:31:87:f2:f4:a1:5b:6e:
                    6b:32:5c:2a:20:5d:f9:c7:5c:2a:61:ee:d9:7c:28:
                    ef:45:07:16:04:3a:f9:dd:a6:af:0c:c0:68:4b:e8:
                    73:91:89:ff:ec:37:f5:ad:63:04:74:4b:98:1b:33:
                    0b:66:a5:35:82:a3:23:ff:de:c1:a2:62:8d:01:27:
                    df:3f:4b:b8:92:b1:08:54:33:7a:ae:09:87:c5:40:
                    57:98:1d:c9:d0:1c:bf:f1:09:46:b5:56:5b:e2:4e:
                    a2:a1:33:d5:8c:5e:66:79:71:16:77:9a:7b:36:e2:
                    f5:e0:68:80:82:bb:f7:fb:6f:b3:05:ed:11:e0:04:
                    f7:0b:8b:61:47:4b:1d:70:ff:a3:53:41:c1:80:74:
                    59:1c:48:09:c4:56:52:a7:ca:33:53:15:99:84:98:
                    01:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5A:A1:8B:A8:83:81:E4:73:E9:5C:D1:60:34:3E:65:EB:00:3E:C5
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f4d52f92-d778-451c-9928-bcb96d1f8e7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:3e:99:70:d4:cd:67:e5:9c:01:b2:66:70:53:33:f6:3f:ed:
         56:cf:36:18:3c:fa:69:6f:b3:a1:ab:73:69:4e:73:ad:a4:e4:
         dc:90:c0:22:fb:6d:60:95:be:31:12:09:23:84:cc:7a:c5:cb:
         22:76:98:f7:0e:4f:50:6d:8b:73:b6:37:52:6d:44:0d:a6:b6:
         13:1f:ac:93:54:64:fe:aa:ce:d5:6c:e5:83:d9:56:c1:85:3f:
         bc:dc:ce:8b:44:5d:d2:25:03:20:d5:61:f6:14:eb:62:48:04:
         bb:10:e8:eb:29:5e:05:3c:c8:cb:d7:9b:3c:18:2c:eb:6a:d9:
         94:c0:f1:fb:35:33:12:f3:b3:66:5c:be:10:76:77:62:48:6f:
         f3:7e:77:e6:73:82:81:54:2b:f9:7f:b9:06:37:97:da:fe:7a:
         a0:dc:1a:51:12:b6:b6:17:be:ff:ef:be:cd:0e:11:f6:01:88:
         24:83:c7:93:a2:63:1c:46:66:bc:17:62:a8:60:d0:8f:64:97:
         2e:8d:ab:7d:6d:2f:d9:18:5c:71:f0:d1:15:29:fc:ae:df:a1:
         f0:14:9a:28:de:74:80:99:af:52:cb:db:61:fa:03:8f:70:43:
         d7:54:00:10:37:12:c6:c9:78:43:01:c9:61:81:0f:5d:2b:7a:
         ba:d0:ca:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----