Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/57ce991d-f2fc-4435-b1ed-2eef0b4534c8.roa
File:                     57ce991d-f2fc-4435-b1ed-2eef0b4534c8.roa (raw, json)
Hash identifier:          Ip/GtNlErqz0tWUOl7Pd28fzPUgTdLjzMG/XJftL604=
Subject key identifier:   DD:F2:23:CA:31:A9:24:E6:9E:FE:64:89:AA:6A:D4:68:15:2D:98:29
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       57DEEF79B8DBD5C951A1C7238CF0F2E9CE97611F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/57ce991d-f2fc-4435-b1ed-2eef0b4534c8.roa
Signing time:             Thu 13 Apr 2023 00:00:00 +0000
ROA not before:           Thu 13 Apr 2023 00:00:00 +0000
ROA not after:            Sun 16 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:de:ef:79:b8:db:d5:c9:51:a1:c7:23:8c:f0:f2:e9:ce:97:61:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 13 00:00:00 2023 GMT
            Not After : Apr 16 23:59:59 2023 GMT
        Subject: serialNumber=13981c176e65e6e5b80d189bcc3fe77f1d62876216e630054fbfa7797cfecc13, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4d:54:2d:9e:0f:d0:d9:1e:e4:63:61:c4:70:
                    e3:3f:75:3e:88:40:10:09:29:28:8d:52:dd:49:80:
                    5c:81:19:74:8d:85:44:75:1e:7b:34:b4:bc:4b:f2:
                    a0:1b:dc:fe:a3:4a:54:53:3a:65:11:bc:47:47:36:
                    41:ba:f1:1b:40:d7:4d:19:d3:41:bf:a0:f6:7d:7c:
                    1a:42:5a:5b:f6:cb:7e:c8:ec:15:41:11:76:38:b4:
                    4e:1e:79:ac:c8:47:d5:9a:29:a0:c1:ad:05:52:04:
                    77:00:99:63:dd:da:e5:98:16:b3:94:ce:f3:b2:14:
                    7c:81:03:ff:69:c4:a1:6e:7d:f7:53:b5:3c:fe:e4:
                    01:99:7a:29:52:16:29:5e:a0:3b:ba:33:3a:4d:1c:
                    92:ff:56:67:33:69:2a:89:6e:33:37:01:13:40:48:
                    18:56:d4:75:b8:89:ff:c6:fb:f6:11:07:dc:24:e3:
                    35:75:c8:1f:fb:85:c2:1d:1e:5a:9e:e2:8e:57:dc:
                    5c:a4:69:f8:5a:95:75:93:46:2e:59:19:bb:38:08:
                    86:f5:a8:1a:9c:8f:3e:83:a8:1d:e8:66:14:3c:ee:
                    21:f6:63:99:65:ce:9b:c4:1a:33:42:49:e1:df:04:
                    ab:66:e8:c3:f5:2f:81:48:dc:15:e3:91:42:26:ad:
                    7c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F2:23:CA:31:A9:24:E6:9E:FE:64:89:AA:6A:D4:68:15:2D:98:29
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/57ce991d-f2fc-4435-b1ed-2eef0b4534c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:5e:4a:8e:31:84:24:33:68:04:f8:19:ca:6c:49:95:72:47:
         f4:1c:84:30:53:7d:ef:a0:68:46:18:1f:c4:2d:73:4f:fd:69:
         20:23:ec:b3:3c:4d:e7:e9:93:79:4f:e1:7b:0e:95:9a:f7:90:
         ad:04:5e:31:e3:82:6a:3c:04:c8:78:d4:25:13:8a:53:90:27:
         1f:f8:fd:f9:94:19:65:46:d1:46:48:41:fd:a4:39:29:1a:dc:
         93:2a:1f:6e:81:a1:13:4b:a9:0a:37:28:f7:5d:b1:84:0b:4a:
         25:e7:be:96:5a:68:e2:43:f3:1d:c0:c4:66:04:8b:5e:46:d5:
         87:49:e1:1a:8b:d9:4c:04:1a:c9:78:f5:fc:1b:b8:96:3a:aa:
         0f:35:9e:17:06:d7:f2:02:a2:d0:5d:47:42:b1:6a:55:c5:0f:
         26:02:d6:24:da:fc:f9:09:b6:44:cb:49:25:43:ba:1d:ee:49:
         34:75:63:a4:e1:37:59:ef:83:1b:d5:3f:b7:84:98:eb:5b:a9:
         e7:3f:08:f3:f1:8d:a4:34:d6:63:38:94:21:21:91:74:a9:aa:
         9d:f1:97:87:5e:28:df:e4:7b:a3:1f:f2:07:3a:b1:00:9f:e3:
         77:be:f0:c0:88:17:a8:01:63:68:0a:48:72:c0:66:44:a2:79:
         fc:29:82:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----