Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/38356e92-1b97-4349-b80e-b6a8c0ff9d21.roa
File:                     38356e92-1b97-4349-b80e-b6a8c0ff9d21.roa (raw, json)
Hash identifier:          Vn3X2DTW/t8ybNGb1I3+GH1mdoNs1p03FjGGP3cuRmo=
Subject key identifier:   E2:B0:1B:6F:0E:6E:BE:CD:E5:BF:E4:79:7D:8C:A8:B0:2B:59:3F:F8
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       060EBAEE2650632E258A5397C8B67AA6EA184C97
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/38356e92-1b97-4349-b80e-b6a8c0ff9d21.roa
Signing time:             Thu 16 Feb 2023 00:00:00 +0000
ROA not before:           Thu 16 Feb 2023 00:00:00 +0000
ROA not after:            Sun 19 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0e:ba:ee:26:50:63:2e:25:8a:53:97:c8:b6:7a:a6:ea:18:4c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 16 00:00:00 2023 GMT
            Not After : Feb 19 23:59:59 2023 GMT
        Subject: serialNumber=487e58c8505d630e6c0cf9b223efaf31c67c6f14e4a82fb6c99f35aa40f41a69, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f9:a0:29:c7:c0:56:2d:32:4b:4e:e5:ce:79:
                    bf:cd:bc:5c:9e:b9:d0:bb:bd:82:8f:2a:1a:76:d1:
                    ad:ef:b3:3b:eb:2e:c1:9a:ae:14:3d:91:ff:c2:e8:
                    30:18:01:27:75:2a:0f:f1:74:6e:f6:e8:70:ed:5e:
                    7b:2f:84:22:f0:35:2c:b6:26:2a:8a:97:18:da:b1:
                    28:86:1d:19:f1:61:9d:5a:8a:ba:fd:4c:90:63:ea:
                    2c:81:82:e7:1a:e0:8b:b0:00:a7:67:87:66:0d:8c:
                    80:42:b8:63:f0:a1:13:1f:38:9e:a0:d4:48:c6:14:
                    1e:fd:2f:a8:67:cb:64:fa:30:2d:67:36:62:1a:1c:
                    da:7f:19:bc:d3:fb:a7:ba:72:f2:5d:e2:26:dd:01:
                    ec:63:fd:53:24:06:c0:4c:09:29:93:03:9d:11:b6:
                    b2:27:96:b6:b8:de:6e:33:fd:2c:f8:66:47:72:07:
                    c1:7a:ad:cf:ea:63:eb:0d:0d:fd:5f:79:d3:9c:88:
                    c5:ff:41:26:8c:ed:52:65:dd:68:a9:5d:28:15:cc:
                    c3:83:8e:f5:98:cf:57:cf:ce:2e:a6:a6:a7:95:3f:
                    9a:22:80:33:fc:ce:c7:55:28:d6:07:ef:0e:33:a2:
                    94:a3:bc:20:8b:9b:9f:bb:dd:28:0f:d4:3f:67:a4:
                    2b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B0:1B:6F:0E:6E:BE:CD:E5:BF:E4:79:7D:8C:A8:B0:2B:59:3F:F8
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/38356e92-1b97-4349-b80e-b6a8c0ff9d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:a9:06:1e:5a:a6:3a:00:58:88:73:7a:c4:b2:9f:7f:e5:c3:
         8c:20:69:dd:a6:3e:30:31:a1:f8:0b:a6:87:b2:aa:30:70:40:
         c3:6a:1d:17:cc:e9:8d:87:0c:58:2e:91:09:02:4f:a0:f8:fa:
         0c:23:7d:5e:65:99:0c:fe:d6:74:5f:a6:32:f5:c1:94:5c:01:
         c6:04:a7:53:1e:84:f7:f0:76:e7:b5:86:b1:b5:4e:37:84:15:
         2e:8b:5f:2a:81:87:44:06:17:aa:68:71:80:57:d5:a1:7c:23:
         0e:4e:58:4d:45:30:2e:88:9b:03:0c:c7:ea:7a:39:ec:c2:7b:
         f0:c4:b4:7c:c2:d7:7c:5e:33:b1:e7:45:c5:ca:2a:7f:83:b7:
         78:0c:7d:72:bb:5d:20:55:7d:5b:c3:81:9e:f6:4d:73:53:10:
         d5:84:bd:f1:8f:ee:eb:a6:f4:6b:26:b9:b1:9b:60:9f:d6:82:
         33:36:ea:5a:d7:76:d8:f2:0f:87:3b:7f:03:c1:87:54:a2:84:
         81:a2:54:50:74:20:5d:24:dc:9e:16:7b:da:79:fd:9d:f2:0c:
         bf:e3:82:3f:4e:20:ac:7e:7c:a0:a7:b6:65:3c:2e:fc:d1:e1:
         31:d2:2e:60:64:8e:ed:76:07:87:e8:30:78:6d:39:47:b0:f3:
         5a:44:02:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----