Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fc5f28d7-97a8-4555-ae6e-b87f50c15e58.roa
File:                     fc5f28d7-97a8-4555-ae6e-b87f50c15e58.roa (raw, json)
Hash identifier:          2SAZaFQo21kuuu8mHnIvxb6xGYvfV8vZzH9WEP/gvLM=
Subject key identifier:   7F:7C:64:3E:DD:21:A0:B0:08:84:F1:6B:40:F8:DE:A9:63:0A:7E:BE
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       77826F6D8F186EF44BC55DD6BC40A2932D37C7F6
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fc5f28d7-97a8-4555-ae6e-b87f50c15e58.roa
Signing time:             Tue 04 Apr 2023 00:00:00 +0000
ROA not before:           Tue 04 Apr 2023 00:00:00 +0000
ROA not after:            Fri 07 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:82:6f:6d:8f:18:6e:f4:4b:c5:5d:d6:bc:40:a2:93:2d:37:c7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  4 00:00:00 2023 GMT
            Not After : Apr  7 23:59:59 2023 GMT
        Subject: serialNumber=0cc9c4e2a2378d5f74ab405f797c37367b6782eef3011f866d67a18b059639b2, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c1:80:5a:a3:9c:6a:cd:d3:dd:e1:18:86:a0:
                    d3:53:54:f1:de:0f:3e:ac:e6:7f:d9:a2:6c:7c:e3:
                    89:cb:8f:73:65:62:d8:48:e6:d0:bd:7d:a3:83:06:
                    90:c2:60:f5:2a:8a:ca:ee:00:e0:75:5c:fd:b3:65:
                    b2:cb:4e:d7:e2:11:12:2b:5a:13:23:ec:89:3a:96:
                    4f:6b:2f:cf:86:3d:fb:a0:2b:26:fa:dc:5b:3f:8a:
                    64:82:cd:d5:cc:24:dd:88:e3:75:fa:93:97:c5:f1:
                    53:84:b4:a6:51:1a:55:3e:f8:4b:17:12:5a:15:2e:
                    f3:0a:31:3b:6f:c7:2c:c5:a2:5a:fa:f0:54:72:fb:
                    ed:bf:3b:c1:db:d7:53:d9:89:4e:c8:5b:78:9e:97:
                    69:7f:5e:7a:7d:cf:4b:a2:23:2a:64:10:60:33:21:
                    2d:ae:ef:84:0c:82:b4:92:31:db:a0:7a:22:21:e6:
                    82:e4:2a:d4:fd:f8:97:e0:fd:cc:df:49:17:c7:4c:
                    b0:25:de:b2:55:9a:54:e6:16:23:21:23:99:88:16:
                    ed:4f:02:86:c0:5a:ba:a1:f4:8b:9f:6a:44:e9:e6:
                    8d:b6:91:58:2c:e2:ff:5b:f4:28:e2:e1:45:ea:51:
                    c2:a8:66:ea:12:ef:0c:81:9e:7f:7e:ea:6c:ba:c5:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7C:64:3E:DD:21:A0:B0:08:84:F1:6B:40:F8:DE:A9:63:0A:7E:BE
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fc5f28d7-97a8-4555-ae6e-b87f50c15e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:85:24:9a:40:e6:37:1d:8f:07:37:51:22:d7:57:12:1d:b5:
         3d:b5:63:76:1c:aa:21:12:1d:a7:1b:85:87:84:53:a0:55:fc:
         9f:e4:64:26:0e:1a:9d:04:88:df:3a:fd:b2:57:88:4c:16:e4:
         2c:ee:dd:92:7a:2f:7e:28:d9:09:41:36:1e:c8:94:26:c2:3b:
         32:8c:77:57:fa:b4:41:3b:e5:bc:2d:92:f3:97:cb:89:ab:91:
         dd:c1:e8:f1:18:18:27:a2:4f:9a:79:e0:d7:61:d1:2f:a6:25:
         c9:d4:cc:09:e9:16:97:c4:47:db:7a:78:01:50:80:dd:5c:f9:
         b2:bf:c6:91:ce:3f:72:19:cb:ee:1d:e4:ec:d8:a9:35:66:c9:
         58:b9:72:bc:61:86:f8:08:5f:00:c9:71:7f:84:69:82:83:43:
         54:ce:3e:0b:ac:11:6d:83:6e:cc:82:cf:46:ba:2c:61:35:d9:
         41:aa:91:70:7f:7a:db:13:58:9b:c9:c0:d6:d2:83:18:7a:bf:
         ef:4d:0b:5e:11:83:b5:f4:8a:f2:2b:64:65:88:dc:48:72:04:
         d3:00:de:8c:72:13:01:9e:02:f5:00:8f:e9:35:53:8e:94:ed:
         b8:ba:49:0b:34:12:61:2d:48:f5:40:94:c2:0e:9a:a1:1f:12:
         47:e3:db:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----