Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2a45d66e-5fcb-4e9e-8cc6-42b7739e7338.roa
File:                     2a45d66e-5fcb-4e9e-8cc6-42b7739e7338.roa (raw, json)
Hash identifier:          61kFLYbaBDQHK6xsLRH2ivxNB4FZEqihLg1WjeQd+KY=
Subject key identifier:   F4:1D:62:2D:0B:A8:2E:E7:9F:8B:7D:12:A5:D7:6C:1E:A5:A0:6A:69
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6A0821012B175D5A09DFBECBA7BC5827FAC84EDA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2a45d66e-5fcb-4e9e-8cc6-42b7739e7338.roa
Signing time:             Thu 13 Apr 2023 00:00:00 +0000
ROA not before:           Thu 13 Apr 2023 00:00:00 +0000
ROA not after:            Sun 16 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:08:21:01:2b:17:5d:5a:09:df:be:cb:a7:bc:58:27:fa:c8:4e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 13 00:00:00 2023 GMT
            Not After : Apr 16 23:59:59 2023 GMT
        Subject: serialNumber=d101a50c347d51298692f07d8f838ee37d7c7e4975cb3260db46dd400d833b86, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:83:ff:ae:b9:c1:45:b0:90:ea:8d:4f:66:03:
                    a6:3c:29:05:90:67:87:87:2d:d5:05:d4:59:96:c8:
                    3b:63:a7:7e:b9:f8:ba:ab:3b:71:23:69:b9:46:23:
                    bb:ad:95:c3:fe:2a:2e:80:5c:70:60:ef:47:50:2b:
                    fe:a3:47:29:e8:44:c8:1b:30:3b:46:33:fa:32:0b:
                    60:65:f6:95:05:c1:f9:e0:69:cd:7b:ce:ee:13:54:
                    29:05:ea:05:cb:00:20:ba:86:0b:d8:ee:a5:14:79:
                    96:72:79:4e:75:66:c0:26:a9:5f:33:86:5e:09:55:
                    da:90:05:ee:ad:bd:f6:b1:5f:3b:f8:e7:4c:34:86:
                    05:f6:3e:9c:e5:99:16:67:2b:62:fc:c8:f0:a9:cc:
                    5d:63:c2:19:ee:5e:03:fe:c1:ab:c9:86:dd:9e:bf:
                    d9:1e:92:ed:96:03:0a:5a:be:d7:0b:86:aa:04:8a:
                    5d:3c:0a:a3:9d:41:9a:93:e8:09:3c:cb:55:91:56:
                    a5:5c:34:f9:5f:0a:d7:9a:1d:e0:68:72:db:e0:bf:
                    35:9e:45:47:6c:a6:f1:88:ae:e8:92:a6:3b:81:b4:
                    25:9c:79:be:e2:73:a5:d2:ac:22:35:13:04:96:e4:
                    83:dc:28:ce:b5:ab:ab:5a:91:eb:81:78:d9:59:08:
                    45:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1D:62:2D:0B:A8:2E:E7:9F:8B:7D:12:A5:D7:6C:1E:A5:A0:6A:69
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2a45d66e-5fcb-4e9e-8cc6-42b7739e7338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:2f:9a:77:62:a3:12:b5:55:57:9c:26:04:a9:7c:94:ef:f0:
         55:e8:de:96:c7:a3:8d:cd:a4:c8:8c:59:f6:65:61:05:54:98:
         74:c1:91:a9:31:11:0e:dd:09:87:e9:9d:a0:dd:8d:67:04:5e:
         8b:23:8f:2e:63:23:ff:28:04:eb:9e:7e:5e:85:33:cc:76:95:
         80:cd:c3:26:2d:46:1f:2f:a2:36:94:eb:ff:60:9f:f3:28:ac:
         10:09:c7:c8:ad:ac:ff:03:e9:98:e4:e9:c4:a4:8f:63:84:4e:
         ed:a5:7b:2c:4d:75:29:3e:17:25:42:d8:7b:bb:ca:2f:ed:79:
         82:46:ab:f6:5e:91:50:f7:fe:54:c7:f4:d5:a7:63:05:0f:4e:
         86:ff:91:2d:09:1f:fb:85:87:00:ef:56:ae:08:1e:0b:19:7a:
         35:de:ac:6c:dd:a6:e3:dd:dd:50:ed:34:68:b2:3d:61:07:42:
         b7:08:fc:3b:04:53:ba:71:5e:9b:b4:cb:e4:7c:3b:3c:8a:f1:
         9f:8e:37:18:f9:bc:ed:cc:f9:08:06:a4:1f:7d:a3:ea:78:9b:
         b1:33:29:cc:00:f1:a7:83:6f:47:d6:23:8d:f6:00:9e:83:60:
         27:b4:5e:cc:2e:40:16:9c:ac:3c:ad:bd:39:f8:8e:df:5e:f5:
         0a:6c:7c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----