Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e246f365-c8fe-4eda-88e3-36ac23bfc1dc.roa
File:                     e246f365-c8fe-4eda-88e3-36ac23bfc1dc.roa (raw, json)
Hash identifier:          Vmh0JsuLfIFenJDMSgWGB4eXmtgm+WmJ0d3LSs06VQ0=
Subject key identifier:   28:83:6D:B8:D7:74:1C:8B:65:AC:EF:11:4A:3D:80:1D:73:E2:FC:4F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       49E57291A5D362FC9840307B902557B5C39A8C2A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e246f365-c8fe-4eda-88e3-36ac23bfc1dc.roa
Signing time:             Tue 06 Jun 2023 00:00:00 +0000
ROA not before:           Tue 06 Jun 2023 00:00:00 +0000
ROA not after:            Fri 09 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e5:72:91:a5:d3:62:fc:98:40:30:7b:90:25:57:b5:c3:9a:8c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun  6 00:00:00 2023 GMT
            Not After : Jun  9 23:59:59 2023 GMT
        Subject: serialNumber=0c368583f62819aadeb1a22874c3a79c41cafa0cba330ed58e6473cb0639b386, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ec:61:1c:e0:8e:80:1e:98:bc:da:f1:df:3e:
                    da:a8:be:10:fb:8f:1d:67:ef:cd:fb:6a:17:be:05:
                    aa:ba:a3:42:46:bb:45:b2:dd:78:c7:c9:05:da:00:
                    a2:31:c3:67:ea:c0:59:d9:da:c3:55:c8:32:90:c4:
                    b8:12:cd:a9:ef:85:47:79:42:fe:7a:e5:54:a7:11:
                    a9:04:6f:ff:4e:db:20:c0:50:17:d3:26:46:4d:27:
                    dd:42:66:b8:f1:f4:75:c3:83:bf:7d:ee:a3:48:d7:
                    72:f5:8e:42:a7:91:bb:9c:51:b9:01:f9:bc:39:06:
                    9b:00:f7:c6:dc:aa:ab:9e:a8:c4:cc:22:dc:66:ca:
                    30:06:2d:c4:7b:00:74:1a:71:47:60:5b:cb:8f:55:
                    a6:85:7b:38:94:b2:27:db:01:ce:2f:aa:8e:6f:45:
                    a2:25:12:8f:9f:cd:50:cd:73:6b:df:f3:84:3f:b1:
                    af:fe:7d:94:06:d3:b2:00:6c:86:08:e5:ec:59:bd:
                    41:0a:f9:58:a8:35:42:72:dd:de:9f:a0:bf:76:a8:
                    5e:98:49:ca:c0:ed:ca:98:c4:30:89:1f:07:82:1a:
                    d8:f4:75:17:48:c9:ef:d2:d4:2e:65:ea:6f:d3:d6:
                    3d:bd:dc:14:5e:22:7c:d2:de:f4:c2:ed:d6:82:76:
                    04:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:83:6D:B8:D7:74:1C:8B:65:AC:EF:11:4A:3D:80:1D:73:E2:FC:4F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e246f365-c8fe-4eda-88e3-36ac23bfc1dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:78:1e:6a:67:1f:fa:d9:eb:c2:e5:5a:28:38:5c:10:5a:29:
         b9:89:d2:5a:b8:63:6b:5b:e3:82:1a:52:32:cc:6f:36:f4:e0:
         87:d2:46:60:ee:fc:0f:a5:80:d8:4f:55:ae:12:0d:9c:f4:42:
         c1:cc:4f:e9:f5:be:7f:78:fc:1e:ad:83:66:55:58:14:a2:de:
         5b:1f:44:ed:4f:9b:96:db:b7:90:a9:b7:eb:da:3e:a3:82:30:
         c0:db:14:ab:f3:9c:dd:1e:b6:ad:4a:1d:ea:ca:a8:8e:a7:95:
         d8:34:c0:91:fa:9a:60:85:48:a2:c1:3e:13:8a:bf:dd:f6:2b:
         ed:18:93:b1:c7:cf:b6:c8:06:06:4e:43:25:b6:9a:77:d0:15:
         eb:83:73:3c:43:7e:9d:6f:28:e1:88:9a:8c:1a:b6:30:b1:42:
         c1:d3:07:d9:d0:1e:cd:c5:56:36:bf:e9:dd:9f:17:b2:04:8e:
         77:81:10:0a:aa:27:85:0e:6a:de:0b:f1:5a:af:af:69:d8:01:
         15:59:98:41:08:ca:7c:6d:f2:78:45:01:47:00:81:be:8a:95:
         27:04:2b:c5:74:a6:55:4d:29:65:b8:c2:bc:0a:60:00:0a:52:
         e6:07:98:f3:27:f2:08:4c:43:c6:27:e0:df:08:6f:20:bd:7d:
         7b:46:83:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----