Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0973f2fb-e921-4198-8fb5-10779c7dfca5.roa
File:                     0973f2fb-e921-4198-8fb5-10779c7dfca5.roa (raw, json)
Hash identifier:          2NiMTeovAiq9IL2tNGUzJIX4DvKYDvHFDWwh/M6FoLU=
Subject key identifier:   33:43:9E:EF:C6:D1:EF:E4:F5:F5:D4:6B:CA:7C:3F:AC:38:4E:ED:89
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       24D22DF8F249D7AE0B1CFFD105FEA85C71E27B74
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0973f2fb-e921-4198-8fb5-10779c7dfca5.roa
Signing time:             Wed 07 Jun 2023 00:00:00 +0000
ROA not before:           Wed 07 Jun 2023 00:00:00 +0000
ROA not after:            Sat 10 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d2:2d:f8:f2:49:d7:ae:0b:1c:ff:d1:05:fe:a8:5c:71:e2:7b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun  7 00:00:00 2023 GMT
            Not After : Jun 10 23:59:59 2023 GMT
        Subject: serialNumber=115ac9d6def0c4b1e6efb5cbf02714d0483fb03a476dfa2cc547833caa796506, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:26:bc:71:e3:c9:6d:f4:b1:cf:84:d7:0a:
                    37:12:4c:db:2d:c8:d0:ab:5f:6b:05:ac:5a:91:46:
                    eb:d2:92:70:24:a0:7d:4e:a2:17:55:e5:71:33:9f:
                    46:84:b3:9a:61:f7:ec:c7:af:1a:f6:d1:cd:64:a4:
                    95:44:88:33:ec:32:2a:d0:e3:bb:e2:03:77:9c:93:
                    1f:c7:88:7e:93:ea:9c:b0:d3:72:e2:53:a4:d7:fd:
                    f2:3c:5b:10:f2:d6:05:2d:32:c4:f1:77:02:b3:47:
                    59:41:51:26:9f:9f:c1:a2:19:53:fc:c6:e2:20:5f:
                    25:5c:01:a2:92:6c:3c:fb:c3:68:55:ee:91:7f:fd:
                    83:c5:18:bb:a6:f0:8d:97:16:ec:8d:d1:72:20:1f:
                    33:1c:f3:13:13:18:78:59:82:6b:48:ac:da:1d:ac:
                    d5:57:79:ee:fe:b3:21:9d:45:8f:a0:f1:46:e4:75:
                    88:b5:b4:2e:7f:f1:cf:f9:74:ca:d9:39:79:de:94:
                    01:b1:89:1e:79:ca:11:4c:72:14:cf:f3:61:42:4d:
                    d5:85:75:11:3d:b9:b2:10:ef:2b:21:9f:b0:c0:62:
                    30:55:d5:08:d8:31:c7:4d:57:ab:31:91:96:41:4c:
                    a7:fe:f8:88:f5:31:60:22:40:6c:4b:30:a8:fb:20:
                    74:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:43:9E:EF:C6:D1:EF:E4:F5:F5:D4:6B:CA:7C:3F:AC:38:4E:ED:89
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0973f2fb-e921-4198-8fb5-10779c7dfca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:53:6e:1e:21:fc:1d:22:9d:9d:bd:70:80:e1:91:6d:b5:c7:
         b6:60:0f:8d:d2:25:e6:eb:3a:df:14:4e:ba:ce:40:b2:9a:f2:
         17:c8:80:ea:46:0e:b6:c1:90:05:97:da:e4:f3:ed:7e:b8:f7:
         3c:58:ac:de:f2:22:fb:e3:1f:47:f8:4d:37:8a:0e:46:17:c2:
         ab:90:48:45:60:bb:7e:94:e1:0f:d0:e3:0a:51:eb:65:d2:c2:
         e2:99:de:a5:2a:5a:ea:43:21:b9:f3:c5:e4:12:a6:99:fb:9e:
         1f:47:03:53:35:3b:af:a6:63:16:53:01:e6:59:0a:f7:3c:e5:
         2d:2f:ef:fc:93:6c:2e:1a:96:6a:ec:d8:c5:58:53:60:b4:9b:
         d2:4c:56:f2:54:d9:4e:cb:73:ac:22:81:c9:40:d4:54:8e:1f:
         8b:67:46:5a:74:af:52:3f:25:49:14:c8:d0:4f:3c:20:89:7c:
         3d:38:e1:b8:a0:05:1b:ac:99:31:f4:b5:e6:d9:ff:a2:c0:13:
         8f:bc:6d:d4:77:df:8c:fb:79:69:9f:22:64:7d:e5:78:aa:7e:
         37:85:4e:23:1b:a0:8f:4f:6b:56:3b:d0:01:32:b2:dc:2e:0a:
         bb:9f:cb:e3:e7:ed:b9:f7:4c:b6:8b:a9:dd:cf:53:6a:51:07:
         1c:d5:20:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----