Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1b6a0925-00b4-4d2a-b246-caba1ad7d260.roa
File:                     1b6a0925-00b4-4d2a-b246-caba1ad7d260.roa (raw, json)
Hash identifier:          v7pjJ3f5t+FHYxn6M8R7qW7h4VdSLHWF476lGJngteQ=
Subject key identifier:   EE:1B:A5:47:1D:12:FA:39:5B:24:C3:03:AC:DD:0C:96:4D:C4:F5:8C
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2116BD06A3937DBF792A9BA700759FE36A62708D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1b6a0925-00b4-4d2a-b246-caba1ad7d260.roa
Signing time:             Thu 16 Mar 2023 00:00:00 +0000
ROA not before:           Thu 16 Mar 2023 00:00:00 +0000
ROA not after:            Sun 19 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:16:bd:06:a3:93:7d:bf:79:2a:9b:a7:00:75:9f:e3:6a:62:70:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 16 00:00:00 2023 GMT
            Not After : Mar 19 23:59:59 2023 GMT
        Subject: serialNumber=cf2350a5bca9e92dcfe17787a4168f258bc59b844829ecb639512fe1df775892, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:27:e7:7c:03:45:8d:58:71:39:c7:b1:40:08:
                    e9:a2:78:1e:59:1a:a7:02:00:80:3b:b0:dd:47:47:
                    dc:cc:4f:97:36:32:1c:17:be:a8:5e:a6:70:71:dd:
                    d7:a5:fd:a3:53:6f:53:47:0c:85:f5:27:8c:a4:24:
                    4e:e7:fc:f2:d0:86:60:36:4d:f0:40:97:53:be:f6:
                    51:fa:21:64:3b:b0:7a:a7:8c:2c:32:44:60:13:bb:
                    51:1d:56:50:74:25:47:d1:bb:2a:05:e7:ff:00:1c:
                    36:82:81:02:25:19:4e:cd:71:b4:dc:b3:e4:35:67:
                    ea:65:7c:d3:ed:82:7e:21:ce:12:c5:18:2b:98:be:
                    db:00:f3:7c:c5:e0:94:ce:e9:1b:37:53:af:2b:a3:
                    fe:0e:b6:71:25:a8:b9:db:c9:1f:7f:79:79:ba:07:
                    ff:ea:ce:09:b9:2d:8b:0f:75:7c:ed:01:ee:1c:f0:
                    de:12:b6:5b:58:1d:8c:c5:2e:ff:c6:2b:24:7e:92:
                    cf:4a:af:3e:ae:1a:52:2b:6d:12:7f:b0:e4:9a:99:
                    e7:a4:39:79:36:ef:8e:fa:35:e6:12:60:c9:d5:9a:
                    62:a2:37:c0:10:9f:a6:33:ab:9c:3d:f0:a2:12:1e:
                    d5:5b:b8:43:e9:0f:85:e2:01:0e:29:b3:a0:1f:c9:
                    0e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1B:A5:47:1D:12:FA:39:5B:24:C3:03:AC:DD:0C:96:4D:C4:F5:8C
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1b6a0925-00b4-4d2a-b246-caba1ad7d260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:31:ac:9d:2c:8d:77:ff:62:a4:53:b9:d7:ac:8d:f8:25:68:
         a1:fb:04:00:4f:82:18:dd:d7:b4:4a:b0:d9:f2:d9:8b:17:ca:
         7e:72:7b:30:70:c8:c3:22:92:40:20:91:55:2f:a3:59:d6:b3:
         bf:14:1e:e0:b5:09:56:f4:71:13:cd:1d:43:62:8f:b4:68:21:
         9a:36:6d:0c:40:e9:43:32:56:7e:9e:ae:11:bd:b4:11:f9:cd:
         a1:d1:55:21:0c:cb:ba:4c:e2:3e:e2:ec:e5:32:50:92:c5:7f:
         07:d6:8c:60:48:ad:5f:c2:c0:03:7b:e7:fe:98:56:cb:cd:00:
         e9:16:1d:a2:fc:bb:53:64:e2:ee:2d:0c:c6:ee:ff:8b:a4:aa:
         74:56:1f:f4:76:19:3a:c0:90:ee:7f:ee:98:0b:8b:8d:e3:5e:
         4b:91:04:ea:16:e8:24:ec:b2:fc:0d:66:d5:ca:2d:ca:63:15:
         66:c7:81:24:35:fb:73:d3:a6:a1:26:f4:0a:9a:86:20:8b:a6:
         f5:07:ee:f6:74:21:0f:a3:cd:63:be:f8:e9:03:e1:ec:d5:3f:
         2d:3f:7a:0f:88:55:f3:58:d8:fb:2c:83:08:a5:ff:f3:ba:c8:
         1f:08:89:15:92:b5:6c:6a:a5:e9:9a:cc:2b:d4:d4:0c:1f:a8:
         98:7b:ed:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----