Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/aa9450de-22e8-4082-ae0a-fa0e14565c82.roa
File:                     aa9450de-22e8-4082-ae0a-fa0e14565c82.roa (raw, json)
Hash identifier:          O8Kb5O8iPxXaR/A4U2SmuDOJCyA9KDznciHh6c+S/Lw=
Subject key identifier:   43:8A:4B:60:DC:48:3C:AC:89:11:A0:32:61:32:80:BE:1B:6B:C0:9C
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       48F78216EF91347035B6BC78E7616458725F8468
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/aa9450de-22e8-4082-ae0a-fa0e14565c82.roa
Signing time:             Thu 13 Apr 2023 00:00:00 +0000
ROA not before:           Thu 13 Apr 2023 00:00:00 +0000
ROA not after:            Sun 16 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f7:82:16:ef:91:34:70:35:b6:bc:78:e7:61:64:58:72:5f:84:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 13 00:00:00 2023 GMT
            Not After : Apr 16 23:59:59 2023 GMT
        Subject: serialNumber=c5dab17b2fec8c89f4c4bf70bfd35ffa95dd76a4a57708f7a0db136fdc01527d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:28:d3:53:c0:e1:bf:7c:66:69:96:04:4c:03:
                    14:e4:37:0c:e1:d5:44:29:1c:98:5a:0f:e0:2f:5c:
                    4f:58:b7:8f:20:7d:93:74:3d:8f:41:95:52:b9:ad:
                    a6:25:1a:01:c3:64:cb:41:bb:a4:9b:27:37:40:c0:
                    db:f3:f2:29:cd:b7:92:00:23:b8:67:92:7a:a7:e5:
                    a8:95:62:d9:24:a4:a6:97:22:fb:df:2e:5d:a8:f3:
                    02:10:fb:bd:b0:d7:4a:bb:ae:a0:5e:bf:b0:c2:f9:
                    e0:24:73:f3:10:77:66:4f:86:5f:1a:a6:19:b5:39:
                    49:83:d1:96:5a:13:cc:27:67:08:c9:92:56:e2:57:
                    6c:af:c0:fa:bb:65:dd:b9:da:17:69:94:36:fa:67:
                    16:58:7e:ec:c3:94:91:9c:6e:ad:1a:10:0e:15:04:
                    8a:42:3f:04:cb:3a:51:01:79:aa:2c:64:13:2e:85:
                    e7:78:35:79:b1:a1:e7:67:81:75:af:36:c9:78:a2:
                    af:12:af:1e:6d:1b:d5:65:dd:24:34:1e:78:07:98:
                    d7:54:7f:a7:00:45:cf:07:49:c3:2e:fb:99:6c:82:
                    01:57:dd:26:89:53:c8:e5:14:08:30:f8:ed:e2:36:
                    08:27:c3:2b:2d:ed:a7:ea:99:24:5c:dc:a4:bf:ba:
                    65:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8A:4B:60:DC:48:3C:AC:89:11:A0:32:61:32:80:BE:1B:6B:C0:9C
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/aa9450de-22e8-4082-ae0a-fa0e14565c82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:75:2e:8f:a6:d6:8b:1e:96:7d:e7:c0:4b:c6:43:4c:f4:04:
         b7:3f:c3:c9:4a:6c:80:9a:b3:bd:31:d4:fb:c8:da:98:f9:e6:
         03:f8:de:09:d1:f9:7b:95:10:67:96:06:d2:18:55:7b:fe:3c:
         c0:21:71:75:d4:2f:59:31:1c:be:d0:b0:1c:f8:c6:ad:a1:04:
         86:df:25:67:00:3b:d6:f5:5e:02:95:73:75:a6:d5:1d:f0:68:
         ce:89:c9:6b:57:b9:c7:0d:0e:25:e8:af:84:bb:07:a0:58:9b:
         e8:d9:f2:f9:c8:ad:5e:be:3f:93:dc:b8:26:b5:0e:e2:7b:78:
         4d:38:57:f6:e4:07:2c:0f:17:d8:a1:1c:d7:25:3c:22:94:21:
         d5:5d:3c:c4:1d:60:db:fb:4d:b4:b1:93:53:1c:1e:1e:d7:bb:
         e0:c0:98:b7:4d:30:72:94:25:d2:f5:7c:e8:77:91:5f:3d:9c:
         bd:f0:54:0a:8d:3c:4b:c2:65:0f:86:24:87:e3:d7:50:19:ab:
         80:6a:ca:10:2f:98:60:25:fe:88:ac:69:15:12:22:dc:c4:3b:
         80:87:f0:1f:57:bf:00:03:93:2d:68:f4:a6:a5:4f:93:f3:f0:
         f8:62:62:69:d1:3a:8d:5a:20:91:fd:74:42:94:4d:00:c5:7b:
         b8:76:aa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----