Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3004e9a1-ed8e-4fda-9cc3-93bb9b814cce.roa
File:                     3004e9a1-ed8e-4fda-9cc3-93bb9b814cce.roa (raw, json)
Hash identifier:          ChgfuDL60LFehM5B5bTozBMaUmfPGSpPpqUY6U0tJ50=
Subject key identifier:   53:E8:CC:33:06:D1:30:D1:65:2F:A7:AA:51:6D:85:31:FF:3C:6D:4B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7565E8CFF41BA0DDD3B45A9AD40B585376D49333
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3004e9a1-ed8e-4fda-9cc3-93bb9b814cce.roa
Signing time:             Tue 16 May 2023 00:00:00 +0000
ROA not before:           Tue 16 May 2023 00:00:00 +0000
ROA not after:            Fri 19 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:65:e8:cf:f4:1b:a0:dd:d3:b4:5a:9a:d4:0b:58:53:76:d4:93:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 16 00:00:00 2023 GMT
            Not After : May 19 23:59:59 2023 GMT
        Subject: serialNumber=f85d8d7d08a998d4a4862e4102dbbc8e15d9bbba964d552440e65c8f98d11376, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:2e:a3:d1:7b:93:b2:c8:08:f6:13:bf:9f:
                    33:91:79:58:bf:30:dc:30:4d:c0:92:96:26:5e:b2:
                    69:17:a1:04:8b:99:5f:7e:6e:24:9b:1b:66:61:5b:
                    74:80:88:bf:60:30:23:16:3c:f9:f5:91:7c:c5:66:
                    cc:20:51:62:2c:68:b9:f3:b8:40:57:39:9c:9b:e6:
                    d8:e0:a9:95:f2:c5:cc:05:87:0d:1b:44:30:f2:77:
                    c8:27:9c:ad:32:a6:3a:fc:5e:1d:c0:2f:66:41:84:
                    58:8d:cb:ee:8d:ab:d5:1b:1c:72:c8:68:e7:ae:8f:
                    95:4f:ec:0d:42:5b:7e:6f:07:e4:b5:bd:f1:51:2d:
                    94:0b:1f:75:14:2b:39:4c:48:98:8f:73:73:65:57:
                    c7:d3:8f:5f:f3:3a:8a:c6:93:90:b0:cc:41:88:a3:
                    99:ff:b1:2b:7a:ac:5c:c6:b2:9c:18:ba:27:44:32:
                    00:16:fd:26:2d:fe:9f:31:be:8a:d9:56:0a:09:19:
                    46:9b:c7:22:73:2c:91:61:3f:25:1c:15:4a:66:5a:
                    a3:da:fd:1c:ae:d5:ac:e4:db:bf:db:8d:6b:29:15:
                    80:5c:55:9f:64:93:9b:7e:a0:e3:f1:7c:58:7b:10:
                    e7:fd:3d:6a:12:62:c0:6d:6d:be:86:bc:56:c9:5e:
                    03:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E8:CC:33:06:D1:30:D1:65:2F:A7:AA:51:6D:85:31:FF:3C:6D:4B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3004e9a1-ed8e-4fda-9cc3-93bb9b814cce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:38:c4:8a:6c:fd:cf:9b:c6:04:f4:0f:bc:93:1c:74:92:00:
         c5:7c:64:c3:d7:5d:d0:5e:d4:a5:10:d4:69:85:36:8e:2b:c6:
         ff:6d:59:8e:49:22:b3:dc:13:09:c7:a2:4c:34:c9:6d:d2:1b:
         ab:b6:27:2f:df:e1:f1:13:c4:0a:b2:fb:9a:bf:c2:99:f6:ea:
         ac:e3:fc:01:9e:29:bc:9e:fe:94:f2:77:88:9a:3c:65:3f:22:
         4d:1c:b0:05:e0:37:d0:ad:5a:a9:17:d0:40:98:95:29:2e:63:
         01:fc:05:15:da:22:d8:12:30:82:f5:9e:c0:44:88:89:2f:da:
         ff:7c:c9:76:e1:76:be:43:97:a4:96:37:3c:7a:79:09:5d:f3:
         2f:d0:b5:6b:25:0b:a1:d4:fc:71:ab:a3:e5:16:90:32:f0:23:
         e6:7c:d7:ed:ac:f0:e8:80:0b:52:1a:1c:5c:6d:e9:22:49:bf:
         a9:f1:ff:0f:43:79:5f:1c:76:16:c4:b6:65:37:60:07:7b:c1:
         a0:68:c1:e7:ce:ea:8b:9f:90:c5:c0:ad:e0:2f:ee:18:b2:8b:
         aa:ee:3c:b7:78:b9:d2:93:b7:e0:4a:b5:1a:ba:2a:06:b1:ef:
         b2:c8:58:40:76:6c:d4:dd:53:56:bc:61:0c:24:bb:28:e4:f9:
         c0:0a:d4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----