Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d9bbb608-0681-43e0-acf5-48c067bc348a.roa
File:                     d9bbb608-0681-43e0-acf5-48c067bc348a.roa (raw, json)
Hash identifier:          mHMWT9QQ940zFopsY4VrCIW3JNUDgd7mTgV+DCAqtu8=
Subject key identifier:   E0:C1:BF:92:03:CA:3F:FB:8C:0D:54:A3:6F:27:DE:2E:F6:DF:B4:C5
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       342E2D161E4DE869075908602F23B95D1F86D3D0
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d9bbb608-0681-43e0-acf5-48c067bc348a.roa
Signing time:             Wed 22 Mar 2023 00:00:00 +0000
ROA not before:           Wed 22 Mar 2023 00:00:00 +0000
ROA not after:            Sat 25 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2e:2d:16:1e:4d:e8:69:07:59:08:60:2f:23:b9:5d:1f:86:d3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 22 00:00:00 2023 GMT
            Not After : Mar 25 23:59:59 2023 GMT
        Subject: serialNumber=f05e1f16224166f799be3b18ce821a7d26057c32c2b0150549b7b59d60ba8b65, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:f5:28:6a:fc:21:28:9f:ff:cb:60:56:9b:
                    2d:81:1b:65:37:b3:bf:09:76:02:4e:59:b9:83:33:
                    54:5d:88:f6:f9:df:6f:82:1a:97:f8:8d:07:3a:bc:
                    13:2b:73:00:48:ca:71:93:a4:6d:ec:83:0a:e6:94:
                    0c:b0:02:c6:79:f2:55:8a:ba:a7:2a:31:3c:b8:63:
                    58:48:d4:3c:63:7f:44:af:39:a9:f8:bf:68:46:11:
                    0f:2f:2a:fa:4b:c1:1c:bf:18:e6:a0:08:9e:68:f6:
                    88:cd:4f:91:2a:13:e7:39:0a:b7:f6:13:96:99:c8:
                    f3:c7:5b:d0:f9:ca:42:99:2f:50:7c:8a:5c:ec:c5:
                    42:0b:c8:43:da:38:71:ca:59:cd:45:90:25:6a:16:
                    83:ce:b9:7c:3c:75:0d:af:77:e4:9e:04:d5:25:f8:
                    aa:db:0c:3d:ad:52:ef:3d:ad:d2:53:4c:0d:8c:a5:
                    01:33:1d:a6:ad:ce:4b:89:82:ad:c5:87:d7:7b:c1:
                    c5:73:6b:b0:79:56:5c:3b:fd:17:a0:cd:66:f9:b6:
                    18:06:47:26:30:67:61:92:9c:d2:08:53:3d:30:51:
                    b2:73:13:3c:ac:a9:30:98:b8:71:68:82:1e:c7:11:
                    d8:fa:70:b0:4b:10:ba:17:93:05:7c:ee:b4:d7:cd:
                    8d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C1:BF:92:03:CA:3F:FB:8C:0D:54:A3:6F:27:DE:2E:F6:DF:B4:C5
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d9bbb608-0681-43e0-acf5-48c067bc348a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:80:fc:03:dd:ac:17:1d:89:e5:37:be:49:19:11:33:0e:f1:
         e5:01:32:8b:5d:95:ad:30:72:69:a0:ac:67:9f:80:13:36:4d:
         d4:96:c8:1d:6c:18:52:ff:3f:1b:29:f3:9d:07:9e:c5:cf:6a:
         fc:50:09:b3:61:5a:0d:8f:aa:e0:35:de:94:08:d2:21:42:2d:
         62:a9:86:1a:f6:43:17:dd:23:7e:0a:5a:e3:90:b0:49:1f:a0:
         d4:46:5d:4d:18:3e:a6:38:4c:16:78:81:7e:c5:6a:03:bd:00:
         9c:2a:c2:df:b3:ac:fc:f7:63:86:9f:99:72:77:8f:6d:10:c7:
         71:87:e2:d9:47:d4:c3:cf:8d:22:07:35:e8:2d:53:3e:a9:ef:
         be:45:3c:a1:ab:be:09:ce:0f:bb:50:5e:a3:db:d9:ad:66:38:
         a0:9d:73:cd:f8:a6:51:30:ad:4a:66:75:0c:d5:bf:94:c4:0c:
         38:43:b8:cf:eb:cf:71:ac:9c:56:bb:65:4a:bf:19:12:c8:d1:
         56:1c:d6:4e:e8:4c:6b:16:ab:16:4a:1a:dd:29:5f:7d:a7:13:
         5b:26:2d:13:41:99:5b:fc:56:cb:eb:e6:29:bc:b7:58:10:f3:
         b5:0d:38:34:3d:c2:8f:1e:08:06:ba:a5:da:10:73:e0:02:70:
         b5:1e:a0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----