Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/377e8f00-701d-4585-b4ec-a232c5ebda40.roa
File:                     377e8f00-701d-4585-b4ec-a232c5ebda40.roa (raw, json)
Hash identifier:          85PwdxHFiqZ/sZZe1CNUxWDlEETs4s2zC4lRbMs7tSA=
Subject key identifier:   BE:D6:01:D9:9D:38:56:F3:22:6C:D1:F4:22:40:97:8F:FD:F5:B7:D9
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6FAC4A15F339BFB85105DDDC699F0D8056AC3849
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/377e8f00-701d-4585-b4ec-a232c5ebda40.roa
Signing time:             Wed 22 Mar 2023 00:00:00 +0000
ROA not before:           Wed 22 Mar 2023 00:00:00 +0000
ROA not after:            Sat 25 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ac:4a:15:f3:39:bf:b8:51:05:dd:dc:69:9f:0d:80:56:ac:38:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 22 00:00:00 2023 GMT
            Not After : Mar 25 23:59:59 2023 GMT
        Subject: serialNumber=71f30df19ab873e00282ef845c06374ca378396d023fe4ee87d236e647d09800, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:52:e0:8c:33:6b:7c:72:22:d7:44:df:b9:2b:
                    87:4f:1e:a2:9f:11:56:71:a7:3c:ac:70:36:f4:c3:
                    72:83:8c:bc:93:bc:66:89:11:14:bd:9c:0d:40:04:
                    c8:cd:29:cc:6d:f3:15:63:06:41:ef:93:ff:45:c2:
                    fe:b7:36:9e:81:77:0f:39:d4:4b:ef:ec:37:d7:39:
                    df:81:f7:b3:dc:d5:86:48:c5:51:83:9d:1f:4d:b2:
                    f5:96:4d:6e:b2:e4:ce:60:c1:b3:71:91:76:15:29:
                    a6:54:21:e4:ff:8d:6a:fc:bd:82:6e:7c:21:a6:09:
                    40:5d:f8:59:97:7e:1b:c7:03:c2:09:65:63:47:39:
                    8e:65:2b:a2:d8:39:b9:50:1f:44:99:cf:f2:27:8b:
                    71:e4:72:de:33:cb:cf:82:10:ee:29:22:39:07:0f:
                    9a:06:5d:51:d5:1f:19:1b:1c:82:cb:d8:47:05:b2:
                    9c:0a:c4:75:79:97:41:86:64:d4:f4:ce:ec:e0:b2:
                    bc:39:82:f2:49:6f:4d:d7:8e:47:ad:0a:5a:a5:8f:
                    91:9c:56:39:16:3a:83:7e:10:4e:0c:bc:52:ba:b5:
                    b1:1e:d0:92:1f:33:7a:57:35:85:a8:f1:b4:9d:89:
                    7b:40:2e:b1:53:48:9b:15:c1:af:9f:cf:06:ad:e8:
                    8b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D6:01:D9:9D:38:56:F3:22:6C:D1:F4:22:40:97:8F:FD:F5:B7:D9
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/377e8f00-701d-4585-b4ec-a232c5ebda40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:8a:74:e0:86:6a:2c:a9:ed:0c:87:20:7c:d0:9f:8b:9b:f7:
         71:39:6d:5f:f0:1b:6e:49:f6:84:ca:cf:b7:e1:54:0e:d7:64:
         51:d7:3f:42:85:19:22:f1:bb:b8:74:df:bd:f1:6a:f1:51:1f:
         56:09:0f:66:cb:4b:7e:ea:cf:21:78:c0:47:cf:8a:24:79:b1:
         cf:2f:63:db:53:7b:e7:01:bf:bc:cd:e6:66:d6:ec:7e:34:9f:
         92:1c:d8:23:b2:55:16:48:1c:d2:29:ce:93:02:f1:79:48:99:
         5c:f9:55:28:7d:e8:7b:6d:d7:67:f3:8e:be:a9:1c:01:b1:53:
         33:8e:75:3c:00:08:bd:ba:05:a1:5f:3d:24:ac:7b:37:43:1e:
         63:16:12:d7:a3:66:8a:22:ad:b3:fd:3d:50:2f:b3:ca:2f:aa:
         80:66:e9:80:c3:91:f0:55:01:65:5f:e7:0f:ac:06:62:69:a4:
         be:99:f5:65:6d:1f:a4:b9:43:a0:12:64:cc:29:83:24:9b:f3:
         aa:84:70:6f:c7:16:ae:36:4e:1f:02:13:b5:94:e1:e0:38:72:
         1c:40:d6:47:51:16:ca:e3:2e:88:7b:51:c1:1a:6c:ac:5c:31:
         13:ef:42:4f:8f:ee:ee:a1:73:08:f0:df:a8:b8:25:51:77:32:
         0e:39:b8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----