Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3ba2cf05-27b6-4d38-b65f-940c505b459d.roa
File:                     3ba2cf05-27b6-4d38-b65f-940c505b459d.roa (raw, json)
Hash identifier:          y22OEoUlGwSYXSoYnJu3NII/UxIoHQgF4z8kUGOijhs=
Subject key identifier:   B1:4B:D6:D7:30:33:98:30:6E:04:2A:0C:41:EB:84:D8:69:00:D6:D7
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       38D7A2E24F9CBE86BE8E888B84E9054FF1357BFF
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3ba2cf05-27b6-4d38-b65f-940c505b459d.roa
Signing time:             Fri 14 Apr 2023 00:00:00 +0000
ROA not before:           Fri 14 Apr 2023 00:00:00 +0000
ROA not after:            Mon 17 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d7:a2:e2:4f:9c:be:86:be:8e:88:8b:84:e9:05:4f:f1:35:7b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 14 00:00:00 2023 GMT
            Not After : Apr 17 23:59:59 2023 GMT
        Subject: serialNumber=b3df0816440ff04063c9d6288e494c3ed38d7afc0f46e8c7c1f5fd1163d13bfd, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:c3:4f:38:48:d0:9a:55:96:be:b5:8b:96:
                    b5:97:22:1e:5f:85:af:64:e0:36:30:e0:bc:be:f7:
                    b2:21:27:35:b9:e8:54:48:c0:72:15:00:53:09:d0:
                    b6:21:cf:4b:88:7f:83:f3:af:95:97:a4:ec:d4:ef:
                    12:d0:81:39:01:69:0a:16:ab:cf:91:ef:ed:3f:39:
                    cc:a5:ec:2a:98:98:e3:32:ff:fd:f4:bb:a1:50:f1:
                    c7:1d:d5:76:4c:bf:b2:c8:9f:c2:74:9a:fd:fa:e8:
                    fd:fd:12:03:e3:f6:08:a2:49:b3:70:07:92:61:77:
                    0d:8c:ce:24:c6:d4:ef:50:0b:42:fd:86:50:08:40:
                    7a:26:69:70:c9:0b:be:46:89:3a:45:bb:c5:b6:c2:
                    67:7f:3f:91:e2:36:d0:4d:77:aa:2a:72:6f:2a:bd:
                    0f:3d:a3:6d:f4:3f:a8:d6:5e:11:ab:bd:04:4c:13:
                    08:1d:5e:5c:b9:44:f5:c3:c9:e3:b1:cd:a7:f8:04:
                    81:21:10:25:e5:79:e4:a8:fd:cc:ac:d5:1b:f6:de:
                    a3:ef:91:a6:9b:14:28:7f:b3:5f:41:13:a2:ea:8e:
                    2d:e7:5f:4f:70:e2:cf:1b:d1:4f:3d:d8:8a:69:07:
                    e8:3d:2a:c3:ab:0b:b0:f7:95:fe:3e:35:2e:4c:3c:
                    af:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4B:D6:D7:30:33:98:30:6E:04:2A:0C:41:EB:84:D8:69:00:D6:D7
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3ba2cf05-27b6-4d38-b65f-940c505b459d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:a9:89:58:b6:2a:28:d9:a9:ae:24:65:3e:1c:b4:fe:fb:d2:
         56:80:27:a1:60:5e:65:8e:47:2a:18:4c:dc:b4:2b:c4:2b:82:
         85:cd:98:ed:2d:7a:ed:e0:fe:1e:d6:e7:4e:a0:cc:21:5c:07:
         f1:0a:55:ac:b9:84:06:a6:53:82:5c:c1:41:df:e5:c4:ca:55:
         da:47:37:31:b0:ec:f0:47:e3:e9:00:a3:f2:82:20:f1:a7:65:
         99:12:53:5e:1c:4d:d2:81:67:4b:38:f9:ef:42:73:ff:2d:d3:
         f2:ec:9f:eb:eb:a7:63:b2:13:6d:86:4e:d3:ca:2d:98:a8:4e:
         b8:2e:8c:9f:8e:02:74:0b:32:4b:80:2f:cd:3d:4c:8c:86:ba:
         52:2b:d9:59:f6:c1:91:a0:6e:d6:b3:cb:14:a2:59:27:e1:23:
         53:01:0d:26:5c:ab:bc:e4:f8:be:f0:62:87:a5:4a:df:90:1e:
         64:ee:98:a2:cd:99:45:e4:24:19:5f:8b:cb:d1:89:30:86:74:
         9f:6f:97:a0:00:17:51:41:a7:ea:eb:86:da:58:73:ec:fb:58:
         a7:16:dc:34:fd:a5:79:2b:4e:9a:61:17:b0:12:09:58:ed:aa:
         2a:04:f3:40:aa:f9:bf:ca:2b:cc:dd:ef:0a:bf:9d:8f:e4:9b:
         eb:1e:56:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----