Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/595a9d1a-a1e6-4058-9513-e87d19d91e3f.roa
File:                     595a9d1a-a1e6-4058-9513-e87d19d91e3f.roa (raw, json)
Hash identifier:          WG3+Q/AEK4QTPbDn1t3SwpoqDFNmz1Gw1ZYYx1cTTqs=
Subject key identifier:   AE:F5:C5:C6:52:5A:D7:76:E2:48:F6:1C:5D:1C:E7:4A:9D:99:E6:7B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4C2478E639BF8537D3614FB693A2C79C78419339
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/595a9d1a-a1e6-4058-9513-e87d19d91e3f.roa
Signing time:             Wed 31 May 2023 00:00:00 +0000
ROA not before:           Wed 31 May 2023 00:00:00 +0000
ROA not after:            Sat 03 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:24:78:e6:39:bf:85:37:d3:61:4f:b6:93:a2:c7:9c:78:41:93:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 31 00:00:00 2023 GMT
            Not After : Jun  3 23:59:59 2023 GMT
        Subject: serialNumber=fabceae1700f09099ab4c6b3ebd06c320dd7266ab01b478802c1ebf04058eb8e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:72:17:54:19:73:f2:64:ea:e9:75:46:cf:a6:
                    ea:a0:f6:e0:e6:f4:c1:b1:c1:fd:af:21:5a:b2:28:
                    1a:70:83:de:0c:be:8c:50:f0:32:e3:c1:0b:bd:eb:
                    71:a2:bc:9a:81:00:f8:22:2d:9f:69:a2:61:fe:75:
                    22:37:d0:14:be:57:93:01:cb:55:3d:f4:0b:c5:df:
                    f4:df:3a:f0:b4:dc:fd:05:ba:13:0d:28:30:8a:b9:
                    dd:b4:47:9e:26:3d:d7:6e:36:1f:94:c3:ff:dc:39:
                    ad:73:10:0e:a6:e4:33:94:62:0e:0f:3c:c2:f5:49:
                    de:9e:a0:77:7e:2a:a1:fd:62:e6:1c:1c:89:d6:a3:
                    12:76:1f:72:aa:db:2e:e2:a6:d0:7b:2b:ba:1d:88:
                    0e:bc:bd:c4:d8:11:91:03:ad:8e:1b:c6:38:87:9a:
                    6a:0e:b5:f6:7f:62:db:ae:64:fa:85:29:4a:dc:63:
                    44:15:4e:e7:ac:86:66:da:e1:b3:36:b0:07:27:9f:
                    43:a5:9e:97:23:25:b2:40:db:27:2e:57:c2:5f:b1:
                    19:7a:f2:7e:1d:3b:f3:8b:82:9b:de:7f:2d:fa:c4:
                    d0:75:c5:af:11:00:fb:73:76:b8:6d:1e:c3:fb:c3:
                    87:d9:96:07:b2:ca:0b:f8:1e:4f:3e:0d:ba:8f:d3:
                    95:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F5:C5:C6:52:5A:D7:76:E2:48:F6:1C:5D:1C:E7:4A:9D:99:E6:7B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/595a9d1a-a1e6-4058-9513-e87d19d91e3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:3a:4d:a7:3b:36:9c:56:19:01:fc:15:49:05:86:88:61:4b:
         d2:8b:1a:06:25:a0:84:46:9c:74:e5:28:0f:17:39:68:c2:ef:
         7d:3f:21:87:1e:3b:b4:0e:00:21:c5:38:9a:aa:97:5e:fb:3a:
         ed:d4:fe:03:18:7c:ab:39:48:0a:49:e2:4d:68:61:37:61:cc:
         58:89:5d:aa:cd:c4:11:c2:8d:70:6f:c6:7a:b6:7a:82:00:54:
         71:6d:3a:e7:3e:98:50:e8:20:09:82:b9:db:02:6e:60:2c:62:
         6e:9d:0b:ff:2b:d1:44:88:f6:1f:91:c8:a0:f3:5b:b5:bd:a9:
         83:4d:c9:ab:74:25:7d:48:3c:c7:85:40:c3:e4:20:52:cb:c3:
         ca:a8:31:b0:0a:39:f4:14:6b:31:93:ca:86:f5:a6:8e:09:8f:
         ba:32:1c:8b:7f:f0:94:56:af:56:12:9e:d2:ba:c0:d5:bd:09:
         91:0a:1e:4b:e9:53:f7:71:c5:cf:2c:20:eb:f9:00:da:e1:96:
         bb:ee:df:af:a0:a1:ca:9e:52:99:db:a6:2e:b6:72:94:d7:37:
         2b:b7:0f:13:b8:ff:20:1c:eb:15:cb:04:e9:ef:04:7e:d6:b3:
         f7:7d:9e:db:7e:3f:5c:e3:38:7f:29:d0:8e:fb:4a:52:60:4b:
         1e:84:96:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----