Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e1c96f5c-04b5-4351-919a-1f226bc18864.roa
File:                     e1c96f5c-04b5-4351-919a-1f226bc18864.roa (raw, json)
Hash identifier:          knK7wLitL9tDQgGAfbdZ4aP3EI2+ne538r1uXN2HVMo=
Subject key identifier:   23:03:9E:42:0B:DD:31:44:89:47:F1:95:FB:CF:29:51:4C:C5:F8:32
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0D7E80C8F62DC356D3558B9A5F0345E576359412
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e1c96f5c-04b5-4351-919a-1f226bc18864.roa
Signing time:             Mon 22 May 2023 00:00:00 +0000
ROA not before:           Mon 22 May 2023 00:00:00 +0000
ROA not after:            Thu 25 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:7e:80:c8:f6:2d:c3:56:d3:55:8b:9a:5f:03:45:e5:76:35:94:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 22 00:00:00 2023 GMT
            Not After : May 25 23:59:59 2023 GMT
        Subject: serialNumber=555577835d2a85d72d0f2f7ccca43064be3f67e2e2f579eb08067f18b02f64bb, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b0:36:5b:f0:a4:89:a0:73:7d:3c:7a:02:f0:
                    94:e5:c6:99:44:89:95:93:ac:3a:3a:fe:ed:2a:05:
                    b0:6f:19:c3:bd:0c:c2:3e:5e:7e:78:fd:6f:0a:00:
                    7c:07:09:85:67:97:2d:5e:66:19:da:cb:a8:02:a7:
                    58:f5:6e:7a:b4:52:e3:7e:e4:c5:57:d7:de:2f:ec:
                    bf:01:39:b9:6b:79:55:2b:6b:6e:a3:20:89:91:48:
                    5d:f2:83:34:b8:99:2c:dd:4b:28:b2:8d:ef:f8:c4:
                    ff:47:d3:ee:a8:09:47:10:d7:4d:e1:3b:38:70:76:
                    df:3e:00:cf:90:7c:d0:e7:94:77:8a:c1:26:01:b9:
                    c6:6d:93:39:bc:94:37:a4:fc:ac:b0:9f:0f:63:5b:
                    bf:d7:22:67:dc:a6:c8:e6:2b:43:e1:09:d0:5b:d9:
                    98:7e:e8:ab:00:9a:55:20:8c:de:ee:89:6e:2c:ed:
                    bd:55:72:48:33:69:1c:5c:af:2b:9b:ba:fe:4d:90:
                    d5:91:db:34:af:aa:9a:e3:ac:da:f4:3c:6e:6b:dc:
                    ac:35:e5:1f:41:08:89:42:fd:6a:49:ed:0a:66:d0:
                    88:ee:eb:b1:79:47:7f:14:8f:b4:fe:57:68:15:d7:
                    cf:d4:39:bf:75:f1:8c:6b:9c:a1:1a:49:b7:71:4f:
                    c5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:03:9E:42:0B:DD:31:44:89:47:F1:95:FB:CF:29:51:4C:C5:F8:32
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e1c96f5c-04b5-4351-919a-1f226bc18864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:c2:54:b1:36:c2:a7:d7:e9:4e:91:42:88:23:39:f5:69:b4:
         11:45:b1:c7:b8:15:aa:03:de:a9:5c:20:2e:9d:8f:e0:e6:23:
         97:7d:76:fe:94:3d:f5:f0:b7:e4:5d:57:08:04:0f:e2:1d:9c:
         82:3e:ab:b8:b9:bb:f8:b9:2d:fd:ad:54:25:15:b1:d9:d5:e9:
         39:3e:9c:92:40:f1:ab:74:a4:80:dc:cc:ef:df:3d:26:27:fc:
         c4:43:8e:8f:98:4d:68:6c:32:84:db:2b:37:5c:d7:30:ed:b1:
         9d:a7:a8:1a:da:13:09:47:04:bf:1d:4a:87:5e:b1:ea:b8:09:
         9d:44:f9:66:c5:e1:65:10:88:c1:94:82:ce:21:db:4f:38:d3:
         72:29:79:67:e7:b3:a4:25:fe:aa:56:f0:2e:10:4c:99:7b:1c:
         88:d7:80:44:35:e0:72:f0:78:ee:d9:58:04:8b:c1:a5:cb:d7:
         a5:82:ab:07:a0:ba:56:fa:22:d4:9c:3f:dd:10:19:c6:ac:dc:
         d7:6c:03:ba:84:cf:09:b4:31:87:7d:73:68:3c:7f:88:da:df:
         88:cf:3e:2e:59:b3:3b:77:eb:fe:93:a5:66:29:bb:87:f2:ef:
         f8:2b:28:a1:96:ad:25:6a:2f:e6:6e:8a:c7:f7:a7:5c:87:39:
         95:8d:be:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----