Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/49a7ea6c-e41a-4556-983b-93b8e09bb090.roa
File:                     49a7ea6c-e41a-4556-983b-93b8e09bb090.roa (raw, json)
Hash identifier:          EIKx2bHn8V56bGDQSfyacmG+BoLQWF7+1eyMH1qBbCY=
Subject key identifier:   54:DC:F4:B0:E6:BA:59:A3:39:ED:38:05:A9:77:04:8D:6C:99:FC:B8
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6B59A2DA8C2C3BB9642A067C2EAF0001753F991D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/49a7ea6c-e41a-4556-983b-93b8e09bb090.roa
Signing time:             Mon 10 Apr 2023 00:00:00 +0000
ROA not before:           Mon 10 Apr 2023 00:00:00 +0000
ROA not after:            Thu 13 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:59:a2:da:8c:2c:3b:b9:64:2a:06:7c:2e:af:00:01:75:3f:99:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 10 00:00:00 2023 GMT
            Not After : Apr 13 23:59:59 2023 GMT
        Subject: serialNumber=63bd5dd84d4638a700974c54dc8dd8e057fc74522adb8409bd6c366b294dd5dd, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8f:fd:f4:5c:7f:f1:a8:ec:96:09:02:0f:19:
                    df:46:8c:9f:2a:37:61:fd:6b:0b:4a:c8:1d:21:b4:
                    df:46:6f:b1:bc:ef:52:94:db:7e:76:34:08:13:67:
                    5f:b6:98:1b:2e:81:84:3d:29:a2:73:c7:52:84:02:
                    c0:90:32:ac:ec:47:23:f4:dd:5f:28:14:e5:21:6a:
                    de:19:2d:a5:9a:bb:db:04:5e:ee:a9:81:01:78:bc:
                    63:ff:8b:51:ac:fc:41:9c:5c:97:7e:cc:4e:b7:6f:
                    f4:eb:b8:7a:db:6f:e9:c7:56:f7:59:8a:06:14:bc:
                    e2:91:6f:10:a4:52:fe:6d:db:03:9b:db:23:8e:60:
                    df:10:30:8c:bf:2f:d0:37:6f:31:98:4b:f0:98:fd:
                    0e:f0:f1:9d:eb:e3:f4:cd:10:f0:d0:90:a9:8e:85:
                    c6:3e:42:ef:7e:d6:01:0f:92:a0:bb:a8:d4:7f:72:
                    96:97:45:90:ce:b5:a4:53:f0:62:f7:57:7e:57:86:
                    7f:c5:bd:e0:b1:e3:c0:45:21:cd:5f:ff:27:61:47:
                    f1:cf:06:d7:be:03:b6:01:35:28:55:a4:75:8d:8f:
                    3c:70:9d:62:fc:ae:f3:76:bd:b7:ae:d5:a2:57:38:
                    1c:07:8f:7e:72:b8:be:66:57:c7:3b:a5:be:cb:68:
                    3e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DC:F4:B0:E6:BA:59:A3:39:ED:38:05:A9:77:04:8D:6C:99:FC:B8
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/49a7ea6c-e41a-4556-983b-93b8e09bb090.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:8b:68:8c:f3:53:06:8e:1e:f0:78:88:75:6e:0c:5d:d4:35:
         63:eb:43:04:6c:4c:0e:b7:dd:93:7f:35:c6:55:29:9d:5f:ad:
         1d:2c:e3:ba:15:e7:26:be:03:12:82:68:35:f3:42:d0:b1:95:
         3d:7f:bb:d8:e4:4f:17:1c:98:f0:e9:b3:a2:36:c4:b2:43:95:
         45:f2:6c:e2:c5:aa:7a:2c:8b:08:04:f3:a9:53:7b:fd:0f:bb:
         f0:85:9d:b2:21:18:ab:ca:45:94:93:f4:34:74:5e:14:71:4c:
         88:39:b5:5a:a5:93:b7:fc:18:9d:de:7b:56:8c:51:64:b8:48:
         fb:d5:5b:9c:c2:3c:d4:c6:22:fa:82:23:f7:72:f4:3a:02:59:
         aa:2f:89:ae:8b:c8:6b:34:5c:8e:88:6e:52:41:c6:58:46:6e:
         33:53:b0:e5:f1:9f:86:b9:af:4e:78:f4:39:1d:6d:9a:3f:f9:
         d9:24:be:c5:40:3c:01:f1:28:ee:fe:f3:1d:97:25:87:3f:ca:
         88:8a:4a:25:c9:1b:9b:35:6c:e7:42:3b:85:2e:37:2c:72:39:
         ca:1e:25:1c:d3:6a:3c:45:cf:b0:8f:2d:5a:cc:d4:bd:27:75:
         b2:2b:a9:ba:25:5d:b7:0b:dd:e5:95:14:cd:7a:8c:8f:7b:5b:
         42:c9:fb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----