Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/92e5cf9a-21c1-4435-b2ea-77ebd0a689af.roa
File:                     92e5cf9a-21c1-4435-b2ea-77ebd0a689af.roa (raw, json)
Hash identifier:          SFEMSJI2mbwx0NnnQ1Y3+RSUHwVA5Z3FBgLjETiIsXo=
Subject key identifier:   62:F6:BD:1D:67:79:1A:0F:D4:19:C6:C9:91:4E:3A:3F:EC:17:3C:6D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       696B56D2C3D7B2E2CCC115B50A947052B7066E55
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/92e5cf9a-21c1-4435-b2ea-77ebd0a689af.roa
Signing time:             Mon 01 May 2023 00:00:00 +0000
ROA not before:           Mon 01 May 2023 00:00:00 +0000
ROA not after:            Thu 04 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6b:56:d2:c3:d7:b2:e2:cc:c1:15:b5:0a:94:70:52:b7:06:6e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May  1 00:00:00 2023 GMT
            Not After : May  4 23:59:59 2023 GMT
        Subject: serialNumber=2fd2d34c779f3edf4fc023779962bd4b422248267419c1395acbd1132439e3f1, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:97:ef:43:97:a6:54:31:6f:e1:f8:39:cd:ab:
                    7b:74:07:71:1f:0b:10:f5:d5:eb:a6:a0:0d:80:9d:
                    df:92:83:27:76:a2:9d:3a:44:5e:14:74:0e:e7:91:
                    30:4f:52:2a:da:5c:d3:0b:61:4c:c7:e9:db:d1:46:
                    42:27:d0:e8:67:a6:53:61:0f:e8:92:5f:22:90:ff:
                    16:0c:69:c9:ec:26:36:56:e8:74:89:72:39:46:8a:
                    f1:69:ee:2b:72:52:1f:33:d3:48:bf:ef:8f:7d:07:
                    9d:46:4b:95:24:b2:21:16:17:2f:73:c3:91:93:7a:
                    ad:29:c0:6a:2a:dd:86:74:10:b5:5d:1b:04:7a:e2:
                    fb:24:e7:d1:b5:0a:de:80:23:ec:8a:c8:ea:a0:06:
                    4c:3b:fb:2a:fb:11:1c:24:6f:2f:18:ee:80:9a:e0:
                    cd:d0:c9:20:50:da:30:36:06:70:39:dc:8f:fa:18:
                    61:df:87:74:26:4b:6b:da:98:42:0d:15:8d:55:a3:
                    89:ba:90:56:54:fe:c5:5e:1e:5c:13:3b:96:91:7f:
                    85:43:41:1b:90:c9:2f:9c:54:cb:01:e0:fc:d8:6e:
                    22:3a:8c:15:51:3b:ef:1f:4c:5f:43:ed:f4:04:3f:
                    85:8e:81:55:0c:7b:c1:30:61:55:a6:9a:3d:30:0d:
                    e7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F6:BD:1D:67:79:1A:0F:D4:19:C6:C9:91:4E:3A:3F:EC:17:3C:6D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/92e5cf9a-21c1-4435-b2ea-77ebd0a689af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:23:56:39:f5:cb:c3:9b:9d:3c:02:b3:9a:cb:ee:e0:9f:f0:
         ec:ca:c1:d8:aa:0f:4a:e2:5b:73:b4:b2:99:43:18:06:67:a4:
         e0:c2:af:a9:eb:77:c5:63:3e:84:c4:eb:3e:77:98:a8:07:f7:
         94:d9:40:f9:67:0d:2c:8d:a6:7d:e9:d8:0c:00:da:d5:14:75:
         dd:ff:ad:43:c1:72:05:c2:e5:f1:6c:64:60:57:f5:5d:9f:02:
         a8:08:ac:a5:fa:69:f9:0c:69:f2:09:3b:a7:80:de:29:b2:e2:
         83:1b:a8:47:d6:92:00:a7:1d:58:f5:ea:f5:15:e7:cb:4f:38:
         84:07:1d:3b:cc:ad:b9:67:ac:cc:ed:a1:de:3d:e4:36:55:f5:
         4a:64:dd:74:e4:4d:15:50:cd:4e:2d:c6:fa:a2:89:4d:e4:6b:
         aa:92:2c:4e:ad:c6:be:b7:cb:ab:69:8c:1e:72:df:22:90:df:
         b5:7c:ef:2a:08:c1:e7:63:b5:93:ac:97:42:45:26:62:a4:1f:
         78:82:ec:4f:97:ae:26:cf:de:f0:e2:ed:2d:33:93:c0:de:62:
         20:8c:1a:ab:dc:5b:5d:aa:27:fc:d4:c8:6a:75:7b:b1:01:2a:
         0a:c9:06:20:6c:2a:28:0c:b5:90:6b:3e:86:50:aa:05:2f:11:
         3a:67:2f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----