Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d1a8933f-0cb3-43fa-8563-5f6a4c1517f7.roa
File:                     d1a8933f-0cb3-43fa-8563-5f6a4c1517f7.roa (raw, json)
Hash identifier:          kjRjQ8tf5qIpVdzssyv7YbqUh5CAnGQHsWPmmw6MZrI=
Subject key identifier:   45:AB:94:F0:9C:E8:69:E1:AB:D4:4B:75:0E:43:0C:8A:9F:B7:58:15
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       638F936BFB8C19B1ACAC9E1A59FE4739F43D16E9
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d1a8933f-0cb3-43fa-8563-5f6a4c1517f7.roa
Signing time:             Tue 30 May 2023 00:00:00 +0000
ROA not before:           Tue 30 May 2023 00:00:00 +0000
ROA not after:            Fri 02 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8f:93:6b:fb:8c:19:b1:ac:ac:9e:1a:59:fe:47:39:f4:3d:16:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 30 00:00:00 2023 GMT
            Not After : Jun  2 23:59:59 2023 GMT
        Subject: serialNumber=6e0f6e13015bef7411d51c17bced6eca34cfc93f7d7cc864809c212826992a9f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:96:00:df:e5:8b:04:ae:17:1f:07:20:ac:c1:
                    bd:9a:34:ce:3b:56:45:0f:17:e8:3a:5e:ca:04:59:
                    41:58:9a:07:ba:b9:2d:5b:d3:dc:8d:54:cb:23:47:
                    46:85:58:bb:bd:4d:6b:0c:b4:58:fe:85:c0:9f:a3:
                    ec:34:b3:f4:b9:bc:32:5e:20:58:c6:2c:6d:38:78:
                    a1:89:36:2d:b1:af:d6:c5:83:df:b5:58:3e:4b:23:
                    df:76:c7:15:45:37:84:8c:44:60:a4:76:eb:2e:2d:
                    cf:61:d4:b6:ae:0d:b8:2f:bd:a0:34:44:1e:f3:c5:
                    aa:a5:c1:24:7a:78:54:aa:ea:d8:48:d7:e5:92:87:
                    b4:36:ee:e6:a0:f6:4d:85:5a:fd:43:ce:ee:b4:fd:
                    e8:33:85:86:ca:1b:4f:c4:da:79:e1:0a:1b:3a:70:
                    ef:1d:d3:db:64:4f:45:f9:15:3d:7b:ff:4c:a0:8f:
                    a1:0f:97:46:e8:ea:2c:ba:1c:2c:4f:14:5c:b2:4e:
                    c2:e6:5c:b8:ee:7b:ba:3e:6b:ba:d3:96:56:5e:fd:
                    31:50:9a:ab:db:fb:b9:94:65:c9:18:57:43:d3:08:
                    23:33:32:05:0e:ab:2d:1d:a3:b2:18:00:55:30:4b:
                    47:d2:af:c0:33:d7:9e:38:c7:88:d8:e3:7e:6b:0a:
                    30:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AB:94:F0:9C:E8:69:E1:AB:D4:4B:75:0E:43:0C:8A:9F:B7:58:15
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d1a8933f-0cb3-43fa-8563-5f6a4c1517f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:51:41:1c:6f:cc:4d:da:a5:68:9a:9d:5a:47:03:de:c4:95:
         45:80:00:b8:8f:d1:6e:e0:f9:8d:9e:9e:93:39:a3:a0:96:c6:
         9d:b3:35:14:0d:ef:4d:9f:4c:2a:9c:df:65:19:a6:77:fc:a9:
         f8:12:c5:c9:b9:65:67:32:79:53:34:8b:de:d2:e5:d2:6a:e4:
         51:2e:e3:8c:36:2b:10:58:68:ef:df:aa:88:8f:fc:02:72:3d:
         84:75:3c:b1:a1:ea:cb:97:50:9d:ac:8a:45:d7:f1:4a:8f:e0:
         48:ec:97:e3:b6:9e:b5:4c:c5:ca:e6:e5:a9:dc:83:d5:ef:46:
         f0:cc:05:d2:e3:d6:23:ff:b1:3e:69:ce:ce:2c:64:c5:0a:94:
         cb:e3:68:c4:43:8a:10:70:8d:da:83:55:2e:31:02:b3:08:c2:
         74:c8:2d:86:f6:89:cd:51:d7:4b:73:44:69:9c:26:d6:1c:38:
         f4:13:de:c8:81:00:82:6d:3e:1e:f0:1e:b2:5e:99:ee:71:4f:
         1c:19:c8:ab:ab:d5:06:1f:32:ed:f5:a7:6d:0e:b8:bb:74:5c:
         60:ca:2e:c6:aa:3a:53:53:7f:5d:8f:3e:4f:c9:95:e6:21:09:
         ea:35:3f:4d:90:b4:93:d0:89:e0:80:e1:71:85:76:c0:17:b1:
         51:3b:65:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----