Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f91a5ce3-dd25-47e4-bceb-72c400a8da71.roa
File:                     f91a5ce3-dd25-47e4-bceb-72c400a8da71.roa (raw, json)
Hash identifier:          dPa20VXd3DegSEA3+2u6nonuQhK/hVCd5XMIj6nLwHY=
Subject key identifier:   8E:44:A1:59:E1:DA:9A:3F:32:E4:DE:D7:C8:58:A7:DB:A1:FE:E2:7D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       13703E4FF114C090ECCEBD992A41BF60C0E3920F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f91a5ce3-dd25-47e4-bceb-72c400a8da71.roa
Signing time:             Thu 13 Apr 2023 00:00:00 +0000
ROA not before:           Thu 13 Apr 2023 00:00:00 +0000
ROA not after:            Sun 16 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:70:3e:4f:f1:14:c0:90:ec:ce:bd:99:2a:41:bf:60:c0:e3:92:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 13 00:00:00 2023 GMT
            Not After : Apr 16 23:59:59 2023 GMT
        Subject: serialNumber=55b4643521f1d8ec2592ce1d864e63ecc5466a7d35b560a5a3c9887af4df2080, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8e:c4:96:e6:a4:e5:a7:16:84:7e:fc:d2:33:
                    e3:ef:bf:b6:7e:f0:c5:cd:84:cd:52:01:86:ac:3f:
                    a6:cc:c9:79:d7:83:ce:5d:ad:b3:ac:95:9d:12:41:
                    f8:3d:7d:9f:f7:87:01:ab:a0:13:9e:4c:a0:4d:ed:
                    55:f2:fc:a1:09:2d:e3:16:f8:bc:8c:ff:55:6a:e3:
                    8b:d5:5e:10:7c:39:48:d3:38:13:8b:45:39:e5:8d:
                    23:40:3d:e3:b9:d3:22:9c:17:24:88:67:d5:e9:e2:
                    10:c1:f7:88:6c:f9:bd:5e:11:c8:ef:19:b6:60:dc:
                    33:28:56:7f:9a:0a:43:0a:39:c5:0d:b2:7d:91:e2:
                    35:26:45:e4:81:73:52:f7:c8:d1:f3:cf:03:01:e1:
                    5c:2a:44:04:9e:fa:10:6e:d6:6e:c9:2f:bb:49:a4:
                    cf:3c:18:06:8b:32:40:10:41:50:52:2b:6f:6d:71:
                    89:fa:0b:f0:fd:eb:46:9c:94:c5:7c:de:9b:78:29:
                    e3:25:84:cb:bc:01:a6:33:23:cf:15:64:51:82:9c:
                    12:2b:5b:15:d4:ff:82:29:2c:7a:29:0f:3c:5b:f3:
                    38:55:fc:b5:2d:a6:93:99:68:a6:6b:28:39:9a:8a:
                    f6:82:8c:d5:ed:2c:ba:d4:5b:90:83:fa:4a:c3:0f:
                    71:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:44:A1:59:E1:DA:9A:3F:32:E4:DE:D7:C8:58:A7:DB:A1:FE:E2:7D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f91a5ce3-dd25-47e4-bceb-72c400a8da71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:4b:1f:90:0e:5b:90:d7:f2:e2:69:b2:93:46:dd:cc:4c:48:
         c7:b8:9d:8a:9c:31:02:43:81:97:aa:db:24:fe:31:e2:14:d1:
         f5:90:31:a4:68:bf:46:29:35:09:63:78:32:0f:22:ce:ce:38:
         b6:e3:b1:65:0c:03:26:1a:1c:09:36:db:7b:69:d4:df:c5:ef:
         85:83:50:09:31:7b:94:fe:fb:7d:6f:79:b6:7a:16:03:45:99:
         80:a9:32:6f:88:65:73:79:00:63:d2:2e:b1:8f:d0:4e:1b:7b:
         4b:52:55:4a:9e:aa:96:ee:7b:38:1e:70:83:84:d2:61:b2:ad:
         f5:81:ea:8f:ef:85:f8:3a:c8:f7:52:db:be:b5:e8:69:b8:78:
         ca:91:f0:43:9f:f3:bf:04:b7:90:39:b5:03:24:40:25:93:1e:
         b3:b1:74:8d:68:aa:c5:a0:2f:cf:da:16:03:6b:e0:c6:19:ee:
         13:97:37:39:4b:c8:94:6b:0a:6c:9d:fa:ef:d2:8c:b7:3d:f0:
         3a:61:f9:d7:b8:28:2b:67:f4:c1:5d:3b:f7:25:2f:95:c5:54:
         de:c4:df:c4:79:53:9d:dc:95:02:37:cd:31:77:bf:30:15:b6:
         c2:b3:d5:1b:5f:ed:ac:b5:2f:cb:45:bc:0a:d4:07:ad:27:b4:
         e4:8c:8c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----