Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d2499fb0-bc41-4399-ae24-caf168ea86e9.roa
File:                     d2499fb0-bc41-4399-ae24-caf168ea86e9.roa (raw, json)
Hash identifier:          4ae1yeT0F5y1g7H0c7K3nb63jNwD4kUVlO6EclYp/mY=
Subject key identifier:   8F:AF:D0:F2:30:F6:D7:CC:F0:84:4F:99:A1:B4:24:CC:4B:D1:92:4E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6E6D116D5DF0D9E76B89C0F6B7E7C5F755279F66
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d2499fb0-bc41-4399-ae24-caf168ea86e9.roa
Signing time:             Fri 24 Feb 2023 00:00:00 +0000
ROA not before:           Fri 24 Feb 2023 00:00:00 +0000
ROA not after:            Mon 27 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6d:11:6d:5d:f0:d9:e7:6b:89:c0:f6:b7:e7:c5:f7:55:27:9f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 24 00:00:00 2023 GMT
            Not After : Feb 27 23:59:59 2023 GMT
        Subject: serialNumber=88efdd045fc409dbd8ef5ddb03b56629b158b0b88b04a1acbbb82a9a2c0c856f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7b:7c:77:93:a8:ae:fb:6b:99:dc:8e:77:a6:
                    e8:35:58:4d:8a:38:28:4e:f6:e8:86:e9:38:c6:17:
                    af:99:f4:11:6b:66:4f:40:f8:d2:88:d2:2e:6d:81:
                    c5:d3:67:9a:93:0b:73:fa:55:da:43:3d:f5:84:b9:
                    c2:48:6d:a9:22:c1:1d:15:c1:c8:c3:31:77:49:e6:
                    3c:a9:80:4f:29:b8:e6:4c:f3:c9:6c:f4:3d:d2:e2:
                    44:85:69:0a:74:f6:69:2b:b5:fd:b7:dc:09:94:ff:
                    3f:c7:f2:50:17:ba:4d:10:b0:e9:b4:65:af:e2:4b:
                    9b:08:4a:8e:7b:90:53:be:e3:77:1c:12:d2:04:f9:
                    e4:4b:25:d1:74:1b:1f:13:1d:01:f4:29:64:5f:4a:
                    ce:8c:10:91:ab:28:51:73:b2:a3:c9:13:0f:48:fe:
                    31:b4:ca:96:6c:a6:8b:d6:3c:67:39:51:20:b2:a5:
                    5a:33:c7:3e:8e:0b:ec:86:fc:1f:d4:86:18:91:91:
                    b7:48:f2:b2:81:45:3c:f3:db:92:55:74:fd:61:1e:
                    d2:ab:7b:19:22:cb:d9:a2:c9:d8:51:15:66:25:25:
                    67:d5:91:c9:9b:cd:fa:b7:31:a3:2a:14:55:43:91:
                    c6:66:8b:6b:33:af:be:18:d0:22:14:0b:02:40:e2:
                    17:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AF:D0:F2:30:F6:D7:CC:F0:84:4F:99:A1:B4:24:CC:4B:D1:92:4E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d2499fb0-bc41-4399-ae24-caf168ea86e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:69:c6:ba:6c:a9:07:21:63:c2:83:ec:81:16:66:99:ba:fd:
         d6:08:7e:39:2c:e8:f6:b8:30:9e:6e:e2:af:9e:09:54:b5:fd:
         f6:12:7d:b0:24:87:0a:4f:cd:4d:3f:e0:4f:72:16:96:59:31:
         5e:2d:2b:8d:5c:23:90:60:db:3b:04:4a:c5:14:f5:20:72:e8:
         fd:80:30:32:39:0f:fa:11:0e:db:2d:25:c2:eb:07:30:07:6f:
         49:04:88:f4:fd:5a:1c:9f:dc:2d:4f:94:50:8f:bb:40:4d:14:
         c6:a6:34:69:a9:7d:72:60:26:a5:27:20:45:ee:58:9b:11:9e:
         39:41:88:99:6a:03:ac:7d:44:b3:1b:0c:26:17:0b:3b:97:85:
         43:ac:bf:ac:a5:5a:54:39:3f:47:3a:46:d0:67:3d:79:a1:92:
         0a:fa:a5:06:a8:9c:6a:a2:fc:06:52:46:08:51:2e:e7:7b:18:
         ce:22:46:5f:08:b2:7b:e7:ff:58:60:0b:de:22:76:80:a6:ea:
         44:84:eb:89:00:1e:85:17:1e:a6:53:4d:d2:1e:a6:3c:98:a8:
         1f:a5:69:7f:e1:83:70:0d:21:50:d2:73:3d:e5:5a:8f:4f:21:
         6c:98:2d:a2:0a:33:ff:12:55:95:1d:dd:24:fc:af:a6:b3:eb:
         51:16:23:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----