Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1edec27f-b8f3-4c92-a314-113af1abad34.roa
File:                     1edec27f-b8f3-4c92-a314-113af1abad34.roa (raw, json)
Hash identifier:          x6tguWPDVj549Sxtu7B/42spowTy4+TcrVuUkBBsaAs=
Subject key identifier:   9C:F0:9F:47:D1:F3:F8:23:20:E3:A4:FF:48:C9:02:8A:FC:36:F9:81
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3BA1362604C140D57C5C21A407CE138909E06B8C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1edec27f-b8f3-4c92-a314-113af1abad34.roa
Signing time:             Tue 09 May 2023 00:00:00 +0000
ROA not before:           Tue 09 May 2023 00:00:00 +0000
ROA not after:            Fri 12 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a1:36:26:04:c1:40:d5:7c:5c:21:a4:07:ce:13:89:09:e0:6b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May  9 00:00:00 2023 GMT
            Not After : May 12 23:59:59 2023 GMT
        Subject: serialNumber=9240d97aa6047c23da9d60e9590e6f9b645885b9d9c3f8fa47c1aaf726a40efa, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:a1:fc:cd:ba:ea:48:4d:71:6c:5a:b0:9f:
                    09:99:26:7b:fe:c8:51:f1:9a:a6:2c:53:85:b8:54:
                    f8:c2:9e:15:99:60:68:c4:49:68:e3:23:be:47:b5:
                    06:6e:b9:e0:57:51:a1:cb:33:1c:55:df:e3:33:b0:
                    20:07:33:86:75:07:d7:49:69:cb:18:be:76:d0:e1:
                    e8:10:3a:c5:89:2e:1e:27:59:59:b7:7c:51:a7:a7:
                    f1:e1:92:7f:e0:2e:07:31:ce:4e:65:d6:bf:65:8b:
                    72:51:4e:bb:98:37:e9:51:d6:88:e3:6a:77:81:c7:
                    1b:5f:d6:a8:c5:f7:24:c0:4a:19:4b:41:5e:76:fd:
                    b5:e1:c8:98:ad:cf:3e:5c:e6:55:0a:b1:49:50:70:
                    9e:86:5c:c8:7e:de:37:67:63:46:c6:3e:60:2c:03:
                    7b:ed:c9:f8:53:fe:8d:a7:e6:36:a4:9e:47:77:9e:
                    b3:a7:0d:ef:f6:1d:74:98:2e:24:37:7c:01:8a:c5:
                    e7:eb:29:67:96:90:1c:f1:9d:cd:5f:53:95:11:1d:
                    59:50:7f:10:29:b4:98:18:7d:cc:05:e1:4a:91:e9:
                    1d:6f:76:6a:a0:83:1d:03:2f:bb:ef:cc:91:bb:65:
                    a5:36:b7:6e:55:4a:a1:dd:06:b9:d6:b4:bd:9f:43:
                    d7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F0:9F:47:D1:F3:F8:23:20:E3:A4:FF:48:C9:02:8A:FC:36:F9:81
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1edec27f-b8f3-4c92-a314-113af1abad34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:c7:fb:bf:51:7a:03:1f:d0:85:04:59:a6:de:ac:60:b0:a8:
         71:46:83:bf:b8:27:0b:c1:06:09:aa:68:7a:12:69:1d:7f:5d:
         35:74:d6:6d:7e:99:bc:f5:5a:c0:42:9c:a5:9a:80:9a:aa:bb:
         fa:97:0b:49:0b:90:8c:18:8e:0b:ae:4e:6e:14:e3:55:28:d0:
         a4:c8:92:9f:50:5f:65:31:8c:02:95:bb:95:25:03:dd:3c:41:
         ec:11:42:5a:6b:44:f1:c3:df:62:73:f4:6c:54:6e:55:0d:bb:
         83:19:ca:3a:4c:5e:50:69:bd:c8:9d:c8:dd:09:50:40:a4:95:
         ab:40:b3:00:94:65:4e:71:fc:f5:04:c8:fe:ee:3f:c3:4d:0f:
         e6:b3:ec:01:90:f6:3b:40:e4:d3:91:25:a6:2c:40:d0:da:f8:
         ca:c8:b1:52:f4:e0:03:06:3c:56:e7:dd:f3:75:70:85:c9:9e:
         cc:77:7f:ae:c6:25:11:c0:e8:00:6d:ca:f5:f9:d9:1d:80:1e:
         05:cc:58:f8:c3:17:c1:dc:7a:f7:57:93:87:22:f6:02:8c:ce:
         0f:84:44:4c:60:b8:b3:06:c5:b6:be:88:0c:9e:21:d3:0f:d5:
         ed:3f:53:31:ad:92:f9:d5:ed:92:51:bb:03:c1:32:b9:eb:e7:
         bb:07:cb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----