Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1ba59935-c7f1-437f-bd8b-d54044f3a01d.roa
File:                     1ba59935-c7f1-437f-bd8b-d54044f3a01d.roa (raw, json)
Hash identifier:          D3yKn8Hy/9700UOFPXDz/vQ3EEhB1kY2+LhbBg2I9bM=
Subject key identifier:   F9:66:14:38:14:59:AE:9C:F0:B1:8B:9B:C9:DD:AF:DF:7A:AD:84:B9
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6E60A191D63A4A496EA20484E533DB2DAFDD40C4
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1ba59935-c7f1-437f-bd8b-d54044f3a01d.roa
Signing time:             Mon 05 Jun 2023 00:00:00 +0000
ROA not before:           Mon 05 Jun 2023 00:00:00 +0000
ROA not after:            Thu 08 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:60:a1:91:d6:3a:4a:49:6e:a2:04:84:e5:33:db:2d:af:dd:40:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun  5 00:00:00 2023 GMT
            Not After : Jun  8 23:59:59 2023 GMT
        Subject: serialNumber=ec81ca19486fac971a038d8a7968a72c1528f475d3e82809edb425c33b6003df, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:00:7c:c2:9e:da:35:bf:02:7d:dc:71:83:
                    3e:24:6a:3a:fa:3c:74:8d:64:49:45:38:e3:30:60:
                    18:00:f0:bc:07:80:74:97:3b:1b:60:d1:2c:5e:7c:
                    03:4e:20:c8:38:97:eb:71:b0:b0:c0:df:68:aa:b2:
                    9d:b6:81:6e:8a:f6:32:bb:f1:27:d6:cb:a9:66:67:
                    f8:c3:10:df:96:bf:93:7f:29:48:ef:48:bf:01:12:
                    b7:51:3f:2c:b9:e9:40:e1:c4:98:d2:cb:ca:a2:d3:
                    50:60:82:47:e5:0b:a4:27:cc:b5:f1:d3:fc:f6:21:
                    ed:9f:31:45:b9:72:88:82:ed:c9:cd:fb:3a:69:1e:
                    9c:f8:4b:64:f3:ba:73:e9:12:40:da:80:f2:92:56:
                    d3:d9:5e:b1:a8:8f:54:82:db:f7:71:58:88:0d:a0:
                    5c:ed:e8:69:99:1c:02:ad:10:28:32:4d:41:c5:20:
                    bd:34:85:f2:1a:83:0e:df:e3:18:99:c8:0a:df:91:
                    e1:01:07:7c:36:e4:e5:55:65:30:ba:c5:19:df:81:
                    68:21:54:b9:db:e5:72:34:37:31:5c:47:08:4b:8d:
                    32:0b:e9:a9:a7:58:50:2b:0e:6f:9e:25:b7:f8:79:
                    27:17:6d:f1:14:b6:e8:61:2d:eb:33:f8:a4:95:c9:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:66:14:38:14:59:AE:9C:F0:B1:8B:9B:C9:DD:AF:DF:7A:AD:84:B9
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1ba59935-c7f1-437f-bd8b-d54044f3a01d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:a1:42:25:3b:1b:5e:1b:41:7f:46:8d:0a:41:c2:29:46:25:
         e7:97:ce:35:d8:a8:3f:4b:ec:86:b4:03:e3:0c:ac:12:e7:22:
         10:a8:09:75:53:93:76:55:87:49:2e:15:85:cc:97:95:f2:82:
         d1:04:54:39:ff:50:4c:b6:7e:73:25:f9:cd:da:b5:e0:0a:16:
         bf:62:07:05:76:d1:7c:2a:5f:33:34:1e:64:66:bd:58:a6:9f:
         7a:a3:2e:c3:df:5d:8b:0c:a1:38:12:40:fd:34:58:33:cc:17:
         23:82:21:b1:8f:c6:b9:fd:06:8a:d4:41:8b:47:57:96:7e:23:
         35:d6:5c:a6:28:de:e4:d0:84:d9:ba:40:e8:c5:b7:c1:ad:90:
         4d:64:8c:08:4d:d1:24:da:e7:d3:10:c1:02:00:4b:33:3a:97:
         85:89:72:f9:8f:2f:5f:12:99:09:6c:df:d5:f1:19:03:41:98:
         c2:84:42:3c:0c:3c:b4:be:75:6f:6a:45:64:9f:9f:f4:d8:a8:
         83:1e:80:07:00:4c:3d:39:82:0e:22:34:97:d4:3d:51:cd:a0:
         49:f2:2e:04:65:50:e9:73:b9:1d:8c:fb:f7:b3:ef:85:14:bb:
         d3:a9:73:96:51:26:89:50:93:8d:c1:00:f2:d6:fe:07:8b:23:
         e0:af:63:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----