Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/60389e1c-6b96-488c-9566-3857e400f811.roa
File:                     60389e1c-6b96-488c-9566-3857e400f811.roa (raw, json)
Hash identifier:          uTQ/3z7Lve05iCYPHxiGdwqpMG4YKpBoksXQzFGy9ow=
Subject key identifier:   98:66:95:E4:18:C5:0F:90:B6:93:66:E7:90:E7:58:68:AC:12:61:50
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       77E74C934FC69CC1BD4DA5089A711972A2ADD0B3
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/60389e1c-6b96-488c-9566-3857e400f811.roa
Signing time:             Wed 12 Apr 2023 00:00:00 +0000
ROA not before:           Wed 12 Apr 2023 00:00:00 +0000
ROA not after:            Sat 15 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e7:4c:93:4f:c6:9c:c1:bd:4d:a5:08:9a:71:19:72:a2:ad:d0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 12 00:00:00 2023 GMT
            Not After : Apr 15 23:59:59 2023 GMT
        Subject: serialNumber=f4aa7f7cc06add77f56e0e3830c2f08a0dc013421e75d6e3c6b21d72d127b3e1, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f2:06:39:95:ba:34:19:38:01:98:cd:4e:d2:
                    b4:94:2a:69:9e:a7:78:97:93:9a:55:30:14:8e:eb:
                    b1:6d:47:0b:bd:2d:31:73:f0:3d:0a:d3:cd:8a:e4:
                    e5:b3:1c:25:3f:f9:b4:98:40:de:b2:a3:7c:ab:41:
                    5c:9f:3d:2f:4e:ee:f3:dc:37:c5:f9:af:36:03:b5:
                    f7:66:23:7a:75:86:5e:ac:f9:f7:6d:ab:ee:d1:17:
                    1c:16:e2:07:2e:04:89:0d:a1:d3:e1:27:14:f2:47:
                    3c:87:96:08:49:62:fc:9a:98:a0:59:c3:06:81:81:
                    39:ac:5e:04:ab:c3:1a:fd:94:68:d4:cf:86:75:7f:
                    fe:31:0a:b5:f9:09:38:55:60:38:47:70:d9:23:12:
                    8f:69:47:4f:ee:9e:fa:0b:de:30:c7:11:42:5e:01:
                    13:db:5b:c1:ca:db:90:db:2c:35:80:5b:58:53:ab:
                    10:fc:9e:02:18:e8:d2:17:02:39:fd:95:fd:5b:82:
                    a0:fc:08:71:78:f4:05:e4:87:01:63:55:02:80:89:
                    27:58:36:3b:6b:3b:6e:32:93:94:80:f6:4a:fc:3f:
                    8b:7d:85:60:ab:4b:36:24:fc:45:d7:1d:d3:43:65:
                    3b:39:c5:6a:aa:22:89:b4:78:83:f6:83:bb:0c:27:
                    a1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:66:95:E4:18:C5:0F:90:B6:93:66:E7:90:E7:58:68:AC:12:61:50
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/60389e1c-6b96-488c-9566-3857e400f811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:2e:d4:37:fb:db:5e:31:8e:1a:e0:2e:f9:ef:b8:1f:81:10:
         65:df:26:0f:e2:9e:0f:b5:7f:8a:8e:47:6e:0d:73:b8:bb:e7:
         f6:88:3c:50:91:de:f9:68:7d:7f:a4:02:4f:8a:d3:a5:26:92:
         b8:14:b5:a3:7f:b2:1f:e7:7b:0a:64:5e:55:4c:6c:6c:e5:c3:
         9f:55:2d:86:60:f7:62:4d:5b:73:c0:00:6e:7d:59:b0:44:88:
         11:af:48:f0:56:bc:2f:54:ff:d5:59:fc:e9:17:0f:36:db:89:
         22:5d:67:e3:0b:b5:69:b3:75:42:31:04:5d:54:af:b7:b4:fc:
         f7:2e:7b:f9:21:7d:d6:e7:17:02:15:65:eb:7c:45:6e:6d:79:
         fe:58:38:37:58:d5:32:4b:b5:83:9e:a1:1f:ca:4d:7b:c9:71:
         aa:07:b0:b4:11:30:23:cd:1d:9c:5f:ce:fc:17:a0:8c:4f:05:
         d9:27:24:68:d6:e7:50:58:22:2b:9f:5a:73:d7:9d:7b:fb:c9:
         c1:6b:a7:87:f9:12:58:82:88:0c:2c:e1:80:48:65:51:39:ee:
         db:32:02:91:1b:51:bf:38:d3:11:3e:c6:db:0a:98:5a:f4:f9:
         b5:2a:a3:2c:4d:3f:5b:e9:52:00:37:f3:ab:03:3a:58:22:7e:
         ce:d4:91:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----