Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5e551a85-7636-4e63-b97b-783324397ef2.roa
File:                     5e551a85-7636-4e63-b97b-783324397ef2.roa (raw, json)
Hash identifier:          q4TwCJNkWjUAiY12ajLpUV2UsTM5+NebMWltBkJOG1k=
Subject key identifier:   F8:BD:CB:78:53:46:3D:D1:8D:EE:ED:6C:4A:5C:FB:A6:80:CE:A9:D8
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       655FE7F0A3736120B19F16F9F490738BECD1BBA4
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5e551a85-7636-4e63-b97b-783324397ef2.roa
Signing time:             Wed 22 Feb 2023 00:00:00 +0000
ROA not before:           Wed 22 Feb 2023 00:00:00 +0000
ROA not after:            Sat 25 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5f:e7:f0:a3:73:61:20:b1:9f:16:f9:f4:90:73:8b:ec:d1:bb:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 22 00:00:00 2023 GMT
            Not After : Feb 25 23:59:59 2023 GMT
        Subject: serialNumber=47f6a0b9e2335cba7732c7d75aaa401d39f5039a92339c2dfd7ad82e16350021, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:46:23:10:10:c1:8e:08:b1:a5:3e:64:d3:8d:
                    c4:c2:9d:9b:ac:05:65:af:25:41:47:d9:3e:23:31:
                    a9:92:c8:39:8a:b2:3a:d9:de:b5:ad:da:42:7f:f7:
                    2a:9d:b6:fd:d0:f6:d8:9f:14:9c:4f:53:9c:8d:f8:
                    1b:6b:4e:53:95:e1:58:bc:5c:93:8b:9e:5b:0c:8f:
                    50:9f:dc:c5:a4:73:d7:31:53:7f:d1:a4:69:a2:10:
                    c6:d6:0a:07:ca:de:1d:7c:3f:cc:d3:85:d1:3e:6e:
                    a0:86:f8:fd:a8:83:08:1a:75:c9:fe:bc:c9:56:03:
                    f1:f0:8b:76:f9:37:bc:1a:c8:d4:b8:63:9f:77:68:
                    74:6a:90:1a:9c:cb:d7:62:4b:c3:3e:d0:56:b4:33:
                    69:47:74:41:cb:a3:de:3f:b9:60:93:21:e3:cb:5a:
                    f8:7f:cc:ae:08:e0:6e:44:93:a7:a9:15:93:73:3f:
                    88:cf:ff:d9:37:8a:8a:83:19:05:33:3c:cb:7a:38:
                    86:77:a0:7a:5f:51:7f:fa:6b:00:af:7d:98:b1:2c:
                    43:79:cb:ce:8a:91:92:ad:06:6f:dd:24:c0:ce:03:
                    32:b0:d4:a5:d1:64:8e:03:77:47:be:5f:0b:2b:5b:
                    0f:94:39:8f:3e:9f:89:5d:eb:e1:56:00:08:6c:91:
                    cc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BD:CB:78:53:46:3D:D1:8D:EE:ED:6C:4A:5C:FB:A6:80:CE:A9:D8
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5e551a85-7636-4e63-b97b-783324397ef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:46:c1:53:49:0d:bb:93:33:02:ff:d4:8c:60:a0:10:a5:ec:
         a7:b5:2c:fb:c3:7f:67:5c:d4:8c:86:11:db:ed:1b:79:81:bb:
         5b:66:00:1c:86:ca:5b:57:00:9d:3f:96:f6:85:c6:9c:96:25:
         05:f5:eb:73:aa:6e:06:43:40:2d:03:9b:fd:25:db:77:90:96:
         34:46:63:cc:8c:fa:da:14:a8:77:9e:0a:ba:f0:6e:c9:e3:1f:
         c0:5d:b6:d7:9d:08:db:21:42:61:d0:aa:26:27:4e:2b:25:39:
         30:f3:f4:24:2b:4a:cb:15:5e:57:c5:70:e3:47:f4:d9:89:42:
         93:43:3e:16:99:42:23:60:f6:e7:78:d0:6c:d0:a4:59:50:53:
         b5:ae:20:57:ac:b7:05:35:e7:40:8d:92:54:2a:26:7f:6d:b5:
         98:b7:e6:e6:87:27:3c:0c:27:a8:94:30:f5:db:d5:6c:5f:08:
         2b:49:ef:84:5c:2d:81:29:87:9c:35:c4:62:16:74:f0:dd:1a:
         c9:0a:0b:31:90:aa:1c:69:78:cc:35:33:02:00:7c:9d:e8:ea:
         98:a6:e1:d3:bd:b6:85:f9:46:0f:52:36:ac:aa:5c:e7:0d:a8:
         3f:bc:2b:06:cc:06:70:79:ad:fd:51:05:77:b7:41:40:e5:58:
         48:78:9b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----