Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/61991533-d8e7-445b-91e3-d361023b1323.roa
File:                     61991533-d8e7-445b-91e3-d361023b1323.roa (raw, json)
Hash identifier:          bkBrA62r9ZYQVm/vctSSlka0mNPkyFkt5f9O3xnHgUw=
Subject key identifier:   4D:AF:B5:71:10:2E:02:5F:14:98:21:74:5E:8C:1E:6A:38:25:C4:DB
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       26F73D3162D29B1EDC6A50B3304063156193B4C2
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/61991533-d8e7-445b-91e3-d361023b1323.roa
Signing time:             Mon 09 Jan 2023 00:00:00 +0000
ROA not before:           Mon 09 Jan 2023 00:00:00 +0000
ROA not after:            Thu 12 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f7:3d:31:62:d2:9b:1e:dc:6a:50:b3:30:40:63:15:61:93:b4:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan  9 00:00:00 2023 GMT
            Not After : Jan 12 23:59:59 2023 GMT
        Subject: serialNumber=0baf2ca575e8999352f299d5693650036ae0888f6b4a297091463a542a5ca28d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:20:b2:98:68:fb:93:fd:dd:c7:e9:51:b0:6a:
                    ff:a0:1d:74:31:8a:7b:cf:0b:a6:13:f3:22:c5:d5:
                    4a:a0:92:02:b5:ad:67:75:72:01:36:06:69:4b:d4:
                    83:5c:c3:2e:f6:8b:aa:2b:e1:e5:65:eb:87:a6:b3:
                    a2:bc:57:ac:b5:61:ca:9d:ef:9a:fe:92:c1:b0:2e:
                    96:07:b6:09:87:8a:e6:f6:2b:6a:cb:df:0a:d1:cf:
                    de:5d:7b:4c:42:b6:80:ce:db:06:84:92:35:6b:5a:
                    3c:35:8a:67:c0:86:1a:2b:4d:d0:d4:59:bb:2f:f5:
                    1c:90:58:55:86:0a:ba:88:7a:89:37:24:e3:af:fa:
                    e7:5f:32:15:ce:7b:84:32:ea:2f:57:c0:6d:d5:e6:
                    c0:b8:74:7d:3b:1e:5d:64:05:29:f1:0b:b7:ef:c5:
                    cc:f6:0a:b7:fc:50:14:0e:2a:2f:b2:c3:b9:8d:b9:
                    62:38:7f:4e:1c:aa:f8:17:02:fb:8b:ec:49:34:63:
                    7b:33:59:88:0a:f0:cc:35:ac:8d:bd:91:66:f9:50:
                    d8:25:63:cc:c6:6f:9a:c4:84:e8:32:d9:ff:8f:82:
                    5b:e2:f4:09:d7:5c:11:49:db:7f:1d:77:84:cb:25:
                    ec:92:0a:ee:d4:09:37:3e:e4:7d:06:aa:12:05:0a:
                    ab:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AF:B5:71:10:2E:02:5F:14:98:21:74:5E:8C:1E:6A:38:25:C4:DB
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/61991533-d8e7-445b-91e3-d361023b1323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:c5:44:d0:09:d6:26:12:ca:64:ec:83:cc:e0:ff:b8:ec:7e:
         eb:62:ac:28:20:a2:4a:cb:10:b4:3f:05:a7:a2:12:96:01:0e:
         d6:c8:42:f8:64:6b:d1:07:04:6c:5f:37:6c:18:fb:7b:54:bb:
         6f:c3:a6:f0:82:3a:c5:c9:41:79:b9:c7:be:af:cc:f3:66:1f:
         23:9d:34:27:35:e0:e7:f8:54:8b:a5:a3:fd:ce:4d:10:e5:3b:
         e6:b7:27:0c:32:28:5a:ce:ab:56:4c:01:33:d1:52:03:dc:43:
         24:c2:b1:1d:3a:6f:4d:56:9d:9b:59:67:14:eb:10:98:9a:37:
         a4:6d:63:e7:79:20:08:b8:78:73:df:e9:99:09:c7:b6:88:c0:
         4a:d6:4a:ea:3b:3e:94:5e:40:ec:83:6c:47:24:34:4b:f3:d9:
         df:21:8a:06:98:3e:62:b5:ae:80:82:df:d1:8e:af:dd:a7:e2:
         c2:a6:2c:63:d1:4f:21:1f:d4:aa:69:3a:c6:42:f8:ff:22:e4:
         44:56:29:de:69:d3:96:44:6d:1b:17:51:fb:01:f7:29:ea:eb:
         73:bf:74:4a:45:6f:70:bc:e1:96:3b:4d:f0:9d:47:4d:2a:72:
         92:10:62:57:4e:2d:fa:86:c9:cc:0b:bd:96:40:15:b3:84:c9:
         f8:b2:19:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----