Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5019f38c-de99-490b-abfb-903ffca0e50b.roa
File:                     5019f38c-de99-490b-abfb-903ffca0e50b.roa (raw, json)
Hash identifier:          HfydgMaIbzPxzRFlO3IeaRbI8R/q7LZ6MwgltLOKYaA=
Subject key identifier:   6B:A3:65:AA:47:67:5D:4C:42:F2:FD:21:35:FE:3E:7B:6C:1C:44:05
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4A076EEC2FCEC7A4C48576DDA955ED879BA9DA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5019f38c-de99-490b-abfb-903ffca0e50b.roa
Signing time:             Fri 30 Dec 2022 00:00:00 +0000
ROA not before:           Fri 30 Dec 2022 00:00:00 +0000
ROA not after:            Mon 02 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:07:6e:ec:2f:ce:c7:a4:c4:85:76:dd:a9:55:ed:87:9b:a9:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 30 00:00:00 2022 GMT
            Not After : Jan  2 23:59:59 2023 GMT
        Subject: serialNumber=111f609c1e6fd92ef9f7c674dc7ec35eac18c6dbbeae3d6db490b87b2e9313ff, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:48:c1:ff:9a:13:29:e2:b0:bc:0d:e2:db:59:
                    74:bc:59:7e:1d:0a:04:a3:59:7a:22:71:9b:88:0d:
                    43:6a:05:e2:ca:5c:bf:53:e6:b9:79:85:88:13:74:
                    1e:fb:f0:a1:94:a8:1f:78:28:77:76:92:72:79:6f:
                    9d:08:1c:75:83:8a:95:8f:83:a7:62:03:03:8f:65:
                    06:fe:74:47:8b:66:41:e0:69:0e:b9:fe:80:57:3c:
                    88:d3:8b:e3:6c:aa:39:c6:2a:28:38:55:d3:1c:df:
                    99:48:0d:bc:53:12:88:c5:0f:38:6a:cd:4e:bf:9b:
                    8a:d9:5f:b2:a3:65:6b:09:df:ec:c3:4c:90:51:8b:
                    32:16:ef:b8:28:0a:7b:2d:ca:6e:58:97:88:fc:97:
                    20:a5:1d:da:e0:3c:9d:3b:68:1e:98:ce:ff:fc:39:
                    33:ea:34:f2:65:4f:ed:b0:8d:2b:c6:26:d1:58:cf:
                    98:10:98:8d:2c:09:c5:ee:ec:da:fc:f4:52:72:c8:
                    49:92:24:f7:7d:10:8e:b8:c9:b0:90:86:5d:6f:ca:
                    8d:46:d3:40:2f:a6:19:17:85:33:89:3a:e2:70:98:
                    42:6a:63:58:36:b6:b3:6b:55:1f:6b:ae:07:50:48:
                    33:8f:05:26:2d:a7:61:a1:69:3d:6f:c9:47:e5:fa:
                    0f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A3:65:AA:47:67:5D:4C:42:F2:FD:21:35:FE:3E:7B:6C:1C:44:05
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5019f38c-de99-490b-abfb-903ffca0e50b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:5a:4e:a1:63:c4:d2:a8:c4:d4:cc:b7:8b:e5:e6:fc:9c:6f:
         5e:92:4b:89:d5:de:76:31:94:f4:fe:e4:73:ce:2f:8e:76:f7:
         79:62:42:82:88:01:b6:1c:db:00:c9:f3:90:1c:41:94:7f:87:
         4a:ca:3f:58:1f:4c:b6:2c:d2:b6:c7:ae:8e:5c:0e:bc:8f:6c:
         57:1c:84:f6:bc:b2:c4:e7:e7:2d:39:90:c0:5c:d9:48:ee:9b:
         8c:1a:c6:bf:1c:aa:d5:a8:13:1a:99:dc:87:0f:9b:53:f9:e0:
         00:dd:71:3f:b2:16:d3:d9:bd:e9:50:bf:8a:a6:af:5d:29:a3:
         8f:49:97:8a:b6:41:d6:99:61:f1:7f:25:17:bc:9f:5b:7d:7d:
         13:b3:db:dc:2d:cc:a1:50:65:1c:17:ff:9d:3a:de:de:91:96:
         52:75:68:e1:be:db:c4:49:a6:a7:a3:dd:b2:a0:ce:2b:cc:e7:
         94:14:65:32:4c:f6:49:59:92:7c:e9:55:11:db:dd:ae:de:6b:
         12:0a:81:6a:0c:cc:83:f4:15:32:d7:ca:91:e6:93:79:b9:55:
         93:2a:de:83:f2:63:9c:90:d8:86:9b:eb:50:6b:c2:21:5a:5e:
         2b:25:06:a8:bb:1c:8f:51:85:ff:31:48:28:f3:d6:c6:02:26:
         83:57:09:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----