Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/201734be-f56e-47a2-9c31-7d620366f719.roa
File:                     201734be-f56e-47a2-9c31-7d620366f719.roa (raw, json)
Hash identifier:          4+Ac5niQMOdQIjOwV5TpGYPf2aKQ2OPTzr+xMC47Nic=
Subject key identifier:   57:68:9D:E8:C8:75:31:94:E4:61:CF:88:66:EC:99:41:AF:95:25:4A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       012CA7BA5347EDB80B6FA8EB8C4409C6B296513C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/201734be-f56e-47a2-9c31-7d620366f719.roa
Signing time:             Fri 14 Oct 2022 00:00:00 +0000
ROA not before:           Fri 14 Oct 2022 00:00:00 +0000
ROA not after:            Mon 17 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2c:a7:ba:53:47:ed:b8:0b:6f:a8:eb:8c:44:09:c6:b2:96:51:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 14 00:00:00 2022 GMT
            Not After : Oct 17 23:59:59 2022 GMT
        Subject: serialNumber=13c7afe9bf56cf4a91687ac36f5b47b0d9071ee7968b433ee662934a49926884, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f4:06:cd:e7:0e:d4:33:92:c6:b3:56:02:86:
                    7d:ef:0b:00:71:eb:3a:f0:43:5b:65:a2:b0:18:1f:
                    ff:3e:c0:48:2c:5b:3b:89:ce:65:b2:fe:1e:eb:a7:
                    05:4d:d1:72:e7:f6:a1:1b:0c:f4:3b:f9:37:c7:a1:
                    df:8b:c2:ba:7a:04:e8:ea:e8:f4:67:d1:e0:61:0c:
                    02:ca:71:d3:cf:5a:fe:84:44:03:9c:78:7b:f4:5e:
                    85:5a:11:0b:40:38:fd:e2:b0:82:50:c8:1d:24:b4:
                    9b:b0:96:ac:d7:34:9f:d5:66:7b:2e:90:09:89:82:
                    df:5f:1f:79:90:91:4d:e7:ff:09:66:e2:ca:48:fe:
                    7d:d1:88:76:b7:1c:27:a7:f0:57:9d:60:1e:71:3f:
                    14:38:96:77:bf:cf:dd:e9:fc:38:4f:cd:05:38:a5:
                    09:1e:d0:23:4e:5b:68:47:26:61:df:60:23:ad:38:
                    05:aa:33:eb:a6:9d:46:f5:c1:8c:6e:42:c7:09:91:
                    13:16:d0:28:1d:de:92:04:14:37:b3:b3:d4:21:80:
                    d8:64:2d:30:f6:ab:f5:9f:2a:59:28:78:6a:d1:0b:
                    b6:31:40:c3:4e:44:a4:76:f6:d9:ec:1b:3c:b9:cc:
                    87:9b:a9:bd:1b:38:d6:fb:81:3f:01:83:d6:06:a1:
                    f6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:68:9D:E8:C8:75:31:94:E4:61:CF:88:66:EC:99:41:AF:95:25:4A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/201734be-f56e-47a2-9c31-7d620366f719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:f0:b4:0d:ff:b3:5e:3b:ab:f8:12:3e:c6:20:d3:a6:71:7e:
         86:01:4a:a5:23:58:23:4e:ae:72:8e:50:53:6d:27:59:7e:e0:
         65:2d:ba:76:1e:b7:7e:5d:e2:6c:d7:d4:57:18:ac:28:61:f8:
         37:67:0e:37:d0:68:84:72:a8:7b:c7:f7:c3:44:53:db:49:15:
         dc:fd:d9:c4:d7:1c:91:a8:e0:c4:ac:c9:a7:04:28:8e:a7:1b:
         cc:0e:ac:f7:c0:96:3d:ce:c3:59:d5:a1:78:97:66:ca:11:be:
         db:65:23:b0:b4:95:9d:93:02:e2:d6:d6:cb:8f:07:fc:49:18:
         10:aa:5e:94:bb:b2:7e:7a:dc:07:8e:6f:ca:eb:e0:57:b8:6e:
         80:e9:67:ba:7d:08:bf:ef:f3:e4:61:32:35:37:44:ed:c9:f9:
         40:71:b0:73:0e:25:f5:43:2d:7d:46:11:3b:15:a9:29:ab:46:
         de:ee:41:16:a8:32:40:6c:55:9b:f4:9e:20:d3:55:6a:e6:8a:
         8a:b0:9b:9e:9f:e5:10:de:8a:3e:56:b8:91:51:35:63:56:7f:
         40:32:f2:7d:7f:57:b0:58:05:71:fc:77:43:8f:46:37:e0:d2:
         0a:5b:fc:ee:f7:c3:39:c9:b4:0d:88:71:5f:99:66:09:91:4f:
         03:3f:9b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----