Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6ff30732-3fb2-410b-9f4e-4f51d6f0897a.roa
File:                     6ff30732-3fb2-410b-9f4e-4f51d6f0897a.roa (raw, json)
Hash identifier:          wfVSE5tO7wseJ0z2XZNvT3dZq2DT4dyltJYjDyFTRO0=
Subject key identifier:   74:3C:E9:DE:3C:F9:FD:BC:AF:F1:7A:0A:5C:47:94:4F:3D:1F:0B:91
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4F79379BFEAF9707FA2BBDFD3F4AAA3FAE9F0E17
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6ff30732-3fb2-410b-9f4e-4f51d6f0897a.roa
Signing time:             Wed 17 May 2023 00:00:00 +0000
ROA not before:           Wed 17 May 2023 00:00:00 +0000
ROA not after:            Sat 20 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:79:37:9b:fe:af:97:07:fa:2b:bd:fd:3f:4a:aa:3f:ae:9f:0e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 17 00:00:00 2023 GMT
            Not After : May 20 23:59:59 2023 GMT
        Subject: serialNumber=b2c4f77ce29a2cb7f28bc352730bbec58c17153f26253f1822bc8ae2f4e5e2e9, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:3b:fc:13:da:00:c6:7a:81:67:29:71:44:
                    e1:a0:ea:40:d6:d0:36:0c:34:1a:a8:bd:82:62:49:
                    a4:60:f6:02:6b:da:fd:50:50:50:5b:aa:fb:5c:09:
                    9a:d1:91:69:d7:b7:23:b7:a4:3e:5a:f7:00:fb:aa:
                    9d:62:11:bf:7b:49:8d:6c:a3:36:8f:c5:8b:ab:70:
                    f0:9d:6c:a8:00:03:98:de:2b:d4:9e:a2:f5:b3:e5:
                    48:1c:77:6f:7f:60:3c:09:53:2d:f1:c6:15:f7:68:
                    23:1e:59:e1:9d:28:de:2c:36:b4:ef:7a:ba:c0:51:
                    78:ee:52:4c:ad:6d:b0:0c:65:fb:5e:0e:ce:6d:2b:
                    4e:ed:b0:32:f6:a4:a1:5a:8d:f0:c4:96:46:6f:c5:
                    a7:f2:26:85:ee:1e:e8:c4:11:86:78:01:7f:c3:8f:
                    3c:55:2f:bd:4c:a3:b7:0a:c8:6f:b2:7c:76:38:0f:
                    89:b2:31:32:a4:19:92:ed:49:c2:75:15:03:7a:cd:
                    ab:3a:7d:a0:d3:63:00:09:f6:37:e6:5f:14:84:ca:
                    a5:b6:62:6d:c1:bd:17:ea:bc:c3:39:2c:e4:83:50:
                    f5:2c:36:37:61:19:6e:5e:11:d6:ab:4b:90:29:f6:
                    25:7e:2a:f5:32:db:cc:93:ab:bb:7d:49:2f:9e:9d:
                    51:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3C:E9:DE:3C:F9:FD:BC:AF:F1:7A:0A:5C:47:94:4F:3D:1F:0B:91
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6ff30732-3fb2-410b-9f4e-4f51d6f0897a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:81:9a:6f:2e:21:d4:99:77:30:3d:7b:c7:8d:8e:20:3d:20:
         d1:5e:c0:02:a2:ff:09:23:42:06:35:60:0e:0f:f5:a9:07:14:
         94:ae:85:0b:ad:d7:4d:b4:3b:4f:e8:72:e6:51:20:fb:0b:31:
         df:42:9b:13:6f:5e:7e:b7:0b:49:13:c4:c3:fc:74:be:e9:29:
         d5:22:b9:f2:fb:15:24:32:ce:16:65:3a:81:b5:cd:ee:71:6d:
         d8:63:0c:fe:2f:53:34:10:51:08:6d:a8:72:a8:1d:e5:f9:a5:
         45:1e:5a:3b:80:53:2c:c2:79:9d:c6:1f:40:25:84:b8:4c:e9:
         57:ec:83:fe:41:dd:5a:d4:11:67:aa:dd:d9:58:21:86:b0:83:
         8a:f8:83:e3:a3:e2:03:05:1b:d1:2a:25:f8:f3:fe:b8:44:ef:
         61:bd:8e:17:a5:bb:3a:30:70:35:e1:9f:13:61:07:8f:c8:0a:
         36:59:58:b7:a1:f2:31:fd:66:9b:2e:b5:fa:f1:28:1b:97:20:
         ff:1f:3d:d0:53:28:f7:23:3c:1c:67:30:59:46:60:3d:ec:3e:
         0a:c6:e0:96:f6:7a:f2:07:ed:08:72:a0:26:c2:aa:ff:12:6e:
         ca:29:b2:0a:47:b8:c9:33:d1:e2:c6:8c:b1:e2:6f:70:8f:e1:
         64:c9:2a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----