Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2729b98e-7e93-4ea4-af83-30b4b9342d2b.roa
File:                     2729b98e-7e93-4ea4-af83-30b4b9342d2b.roa (raw, json)
Hash identifier:          usMYK0zaYyIwk7gpGgifyn+Sd7ymcnGAUH139kkrL+k=
Subject key identifier:   32:5A:98:EE:6C:BE:6A:74:53:B9:E9:D3:2A:5B:01:D7:B9:BB:17:2F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1C54930582F120BAC1B1CD450E2E86C53AE8F4FB
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2729b98e-7e93-4ea4-af83-30b4b9342d2b.roa
Signing time:             Sun 21 May 2023 00:00:00 +0000
ROA not before:           Sun 21 May 2023 00:00:00 +0000
ROA not after:            Wed 24 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:54:93:05:82:f1:20:ba:c1:b1:cd:45:0e:2e:86:c5:3a:e8:f4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 21 00:00:00 2023 GMT
            Not After : May 24 23:59:59 2023 GMT
        Subject: serialNumber=9b5d27c93584138cd6677621b020ece6479a6dfbbabe8ccd3a14508521323480, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:30:58:d4:19:07:cd:73:4f:30:54:cc:a1:c5:
                    fb:e4:2a:ee:fb:34:82:3a:23:bf:d3:17:de:43:20:
                    f3:e3:78:64:69:b8:ac:1a:56:0c:3e:ed:4e:69:f5:
                    00:e2:26:8d:86:23:c0:27:00:ab:01:46:5d:9b:94:
                    53:f6:29:44:f6:d9:9f:e7:45:96:a5:55:70:a9:c7:
                    31:b3:1b:30:76:a3:b1:98:24:7c:56:40:a8:d4:17:
                    5d:05:5e:45:83:a0:44:ab:0b:56:ae:7b:b8:db:4e:
                    e1:68:ba:29:31:1e:8d:8c:46:74:0c:ac:41:b2:03:
                    c5:4d:11:94:ca:2f:c3:ea:ad:9b:e7:37:ff:97:d5:
                    53:2f:e3:d0:73:67:a8:48:35:45:a3:30:d2:13:02:
                    77:8b:30:86:b1:46:7a:19:68:b4:b5:ba:69:ab:e2:
                    49:a3:47:22:05:d6:c9:c9:3f:a7:d0:d9:ba:7a:9c:
                    69:5e:6d:c5:64:77:e1:a9:86:73:b3:dd:09:18:63:
                    7a:d1:7a:0c:00:4b:34:8b:83:97:69:c5:9b:22:9e:
                    82:3b:b3:73:ce:c4:2a:9a:c0:9c:5a:94:aa:b4:29:
                    2e:db:f3:d5:7a:f6:7a:eb:bf:38:3e:35:86:2f:0c:
                    eb:5a:dd:58:72:a8:c8:66:39:b4:c0:8b:c4:8e:6b:
                    92:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5A:98:EE:6C:BE:6A:74:53:B9:E9:D3:2A:5B:01:D7:B9:BB:17:2F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2729b98e-7e93-4ea4-af83-30b4b9342d2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:9c:a0:ca:66:83:e3:36:36:7e:4b:fb:dd:7e:89:bf:da:0b:
         94:22:da:f0:a6:a1:fd:7e:25:56:28:35:0c:b2:46:a3:bf:5d:
         bd:4c:ce:91:4e:07:42:43:65:fd:1a:52:ae:b2:88:24:10:03:
         75:41:6d:4c:c3:21:5b:75:60:67:49:b2:3e:0b:18:60:2a:21:
         49:9e:60:e0:34:57:40:67:13:64:6b:6a:86:40:4c:1d:83:40:
         ab:c0:b9:c6:89:4b:73:3f:f6:79:83:10:a6:5b:7c:53:6f:9a:
         78:d0:fb:f2:9b:7c:c8:f1:1f:d1:90:25:2a:2f:09:1e:03:15:
         49:10:1e:07:e1:25:5d:73:e4:be:85:cd:49:ba:02:dd:a7:da:
         9c:96:d3:0b:80:57:b9:f9:d5:87:df:19:a1:7d:0a:b4:be:6e:
         57:8b:a7:f0:6b:b0:a7:2b:c7:fe:ef:d9:16:25:85:79:58:b6:
         79:a8:49:c6:7c:ad:88:8f:c0:a8:31:50:d0:bd:e4:67:d4:0c:
         cf:9e:19:9b:dc:5d:85:e1:b0:86:0c:76:06:7f:5e:1c:11:b4:
         35:bd:52:69:18:2a:e1:67:ba:1e:c4:0e:92:d2:10:5e:c2:53:
         8f:d2:9f:49:44:fc:73:6a:f8:b9:a4:8d:d8:86:35:07:00:02:
         eb:04:0e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----