Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/de339bef-17e4-408c-ae0a-90a6857db7b8.roa
File:                     de339bef-17e4-408c-ae0a-90a6857db7b8.roa (raw, json)
Hash identifier:          Vs14VvEWwpIasrgKkSnJDnG3a/yLnoxT35QoktytArk=
Subject key identifier:   9A:86:EC:E9:4C:EB:83:8B:BB:8B:64:5B:20:9E:3B:F9:69:C9:3F:67
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5DED915B886A34857136BD19B8A8E445F1F6E9E6
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/de339bef-17e4-408c-ae0a-90a6857db7b8.roa
Signing time:             Tue 24 Jan 2023 00:00:00 +0000
ROA not before:           Tue 24 Jan 2023 00:00:00 +0000
ROA not after:            Fri 27 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ed:91:5b:88:6a:34:85:71:36:bd:19:b8:a8:e4:45:f1:f6:e9:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 24 00:00:00 2023 GMT
            Not After : Jan 27 23:59:59 2023 GMT
        Subject: serialNumber=e36338fc7957f9e2c5342919e8ba8f67a8ec322ea35a7e153c75865d3ccecd54, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f1:b5:ed:47:c9:da:ab:ab:8e:80:5e:7f:67:
                    22:8f:e5:01:2b:b8:a4:93:bf:73:57:66:4b:8e:5e:
                    b4:6a:94:d8:3a:29:06:3b:83:2b:32:44:0c:de:03:
                    f4:a3:fb:68:ec:51:69:97:f0:77:a3:23:10:c6:0d:
                    23:1b:af:14:28:94:1d:cf:06:45:e9:ba:d7:fc:ff:
                    28:76:35:64:b1:69:63:08:9e:ab:9b:2e:d4:a0:5f:
                    43:89:da:c6:c1:df:03:0f:ae:b7:89:1e:cb:2b:24:
                    18:4a:2e:85:9b:12:84:f3:8c:3c:b7:52:af:12:02:
                    dc:49:dd:f2:d2:1e:8d:84:a6:f4:1f:79:3d:83:cf:
                    cb:a9:60:58:98:07:7f:7f:a0:38:d8:63:bc:3f:2e:
                    9e:de:f6:4e:d6:76:5b:e3:53:cf:f5:9a:d2:8a:ff:
                    7b:13:34:b6:7f:3f:2d:75:d2:f9:14:0d:94:57:14:
                    67:94:a1:9b:a4:03:e5:92:83:3f:e0:39:b7:b5:22:
                    f7:7d:10:73:28:11:8f:08:72:95:1a:f7:f7:be:4a:
                    8a:c7:3e:9f:2e:b9:25:16:51:b6:5d:ff:6a:c3:c1:
                    82:b4:a5:ca:08:43:7e:c8:d0:2d:ca:f4:a9:a5:a8:
                    10:b9:ab:b2:5b:11:e5:88:be:c9:18:41:5e:e4:62:
                    42:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:86:EC:E9:4C:EB:83:8B:BB:8B:64:5B:20:9E:3B:F9:69:C9:3F:67
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/de339bef-17e4-408c-ae0a-90a6857db7b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:3b:2c:04:ab:82:93:77:2c:02:d6:19:5e:55:b4:e3:66:f3:
         f9:09:71:f2:a2:c1:ac:5c:d1:47:3b:da:4b:01:63:4f:7f:07:
         91:2b:c6:17:6d:c2:5a:e7:59:9c:6d:0f:0e:c9:31:be:a1:75:
         25:29:f4:41:bc:cf:ff:21:6f:80:95:8a:4e:f9:d0:78:31:5c:
         20:38:c8:c5:dc:b1:f6:af:45:28:73:02:6d:80:42:f6:59:7b:
         21:7a:cd:27:be:91:b6:67:37:5d:a3:4d:7b:a7:46:eb:34:03:
         5e:1d:07:e9:c1:7e:d0:20:70:a9:9a:de:23:cc:49:c6:eb:84:
         14:21:a1:ed:7a:cc:10:75:ca:f2:9c:73:d6:9e:a5:40:36:76:
         f1:7e:dd:12:63:db:a1:cb:fc:fc:6d:2e:73:85:c0:2e:1d:ce:
         ae:c3:58:65:0c:01:e0:35:a5:68:1f:40:2f:a2:8d:4f:f2:b1:
         33:7f:17:56:43:54:3e:0e:2b:63:64:33:3f:a0:60:12:a1:ed:
         7a:14:ca:bf:f3:a3:3a:23:4f:51:d3:51:26:ca:fd:c7:bf:6c:
         15:c2:05:23:10:49:0a:21:f3:72:eb:11:68:da:d3:35:4f:15:
         e4:fa:98:f5:9b:37:44:6d:fd:16:be:41:2b:d1:b0:e6:a7:79:
         0f:43:00:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----