Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fa93c253-e816-4b94-8c8a-d07ad5a4927c.roa
File:                     fa93c253-e816-4b94-8c8a-d07ad5a4927c.roa (raw, json)
Hash identifier:          vsozzUKu9sJWLzT6o/UgvS5YwVLJE40ZAXBZwQdA/ZU=
Subject key identifier:   FA:9A:39:3C:AE:C9:AA:A6:24:00:86:E6:1C:39:A1:F7:36:9C:AE:F2
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       18690225E051002AC937476E254BC3CCD9EBFADA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fa93c253-e816-4b94-8c8a-d07ad5a4927c.roa
Signing time:             Mon 13 Feb 2023 00:00:00 +0000
ROA not before:           Mon 13 Feb 2023 00:00:00 +0000
ROA not after:            Thu 16 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:69:02:25:e0:51:00:2a:c9:37:47:6e:25:4b:c3:cc:d9:eb:fa:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 13 00:00:00 2023 GMT
            Not After : Feb 16 23:59:59 2023 GMT
        Subject: serialNumber=e507d83c4cad65e848de04fa95691edc0e0b7e20d31ac1f52f1dbac5b5111d63, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d2:a8:b7:03:8b:99:8d:b3:18:cd:cd:93:f0:
                    f2:2a:ec:24:9e:7b:54:d0:29:5a:78:39:5f:8f:f3:
                    a0:f7:e2:87:dc:ec:aa:95:e9:b1:a5:d0:e6:40:ef:
                    8a:aa:f4:8e:41:35:3a:c2:d2:de:9b:d4:d5:b9:b9:
                    4e:27:c3:b2:df:d3:ea:a4:aa:ef:0f:59:18:3d:6d:
                    09:c6:36:6e:8d:a5:31:6c:99:93:77:d1:d9:e3:48:
                    d1:b3:e3:64:4d:44:e6:2f:72:0c:d5:ca:26:76:38:
                    6a:bc:99:af:e3:b3:c3:64:e9:e2:01:14:b2:70:a7:
                    bf:99:e0:7e:84:e2:3b:57:95:45:d1:a5:82:91:7d:
                    43:94:c9:e6:ed:b2:07:19:e3:ce:43:49:71:a8:5a:
                    10:58:1f:92:c6:5a:28:e6:26:e1:5a:a3:88:57:91:
                    fc:93:c2:90:df:31:fd:9f:88:15:f9:78:c3:22:5f:
                    46:55:4d:fa:8f:eb:48:62:49:15:0b:78:8a:31:1d:
                    80:b4:f0:47:39:e6:8e:37:5c:7c:50:4a:a1:de:d3:
                    4a:2c:da:c8:67:4b:10:26:bc:3b:26:3e:20:58:8d:
                    29:40:d0:f6:f6:ac:91:9a:a1:07:82:1f:b8:44:64:
                    5b:e9:38:dc:be:31:77:71:f3:6e:59:2d:1f:12:ad:
                    da:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9A:39:3C:AE:C9:AA:A6:24:00:86:E6:1C:39:A1:F7:36:9C:AE:F2
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fa93c253-e816-4b94-8c8a-d07ad5a4927c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:5c:b5:8a:7e:33:ce:b8:13:20:1a:3e:85:ff:8e:15:b0:20:
         96:ca:ec:2e:21:11:6c:e1:72:ea:f2:34:c0:2d:2d:d4:4f:63:
         41:bc:4f:90:7f:5c:81:2c:1f:10:1d:d9:44:0c:b6:d6:49:37:
         91:90:9a:dd:4d:66:a4:36:2f:8b:62:29:ef:ff:74:54:eb:97:
         0f:30:16:78:fa:a2:aa:33:5c:24:0d:33:5d:9f:62:b4:07:af:
         ad:ff:cf:bf:ed:3c:5e:d9:45:52:a2:5b:63:f8:9d:eb:2a:37:
         f4:bf:fd:a9:fc:54:64:f6:4f:e8:5c:22:72:91:ec:7c:da:e9:
         84:16:2f:16:75:d5:ab:18:e3:6d:9c:ee:d9:ff:0c:ee:49:16:
         59:1b:82:ab:7b:8a:40:45:4f:99:bd:0d:dd:d3:34:f9:7d:d3:
         b5:47:7e:3b:ff:12:46:a6:a5:bf:ef:42:d9:93:49:b1:f8:12:
         58:f3:50:25:11:f1:0f:06:cd:bf:a9:2e:eb:60:28:c5:70:23:
         7a:1f:cb:f8:34:07:7d:3c:11:93:36:b7:d3:92:f9:b3:4b:01:
         9b:a0:73:ee:54:fb:76:ae:21:61:2b:95:75:f4:e4:7d:63:f7:
         32:7f:2b:59:f5:a7:24:7e:21:85:62:68:fe:5d:0c:ff:72:26:
         d6:01:8c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----