Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/65357695-b039-487e-83b0-fb3960dc9c62.roa
File:                     65357695-b039-487e-83b0-fb3960dc9c62.roa (raw, json)
Hash identifier:          brXpqPsB4fn1zy1KugDazbrYuDNdwqc+JhHA42aNXqo=
Subject key identifier:   A7:FF:B3:A4:83:7E:53:6E:D4:F0:B6:E3:AE:19:AE:EB:0F:68:B2:68
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6D4590C776B5672FF646372967CA696F0A000053
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/65357695-b039-487e-83b0-fb3960dc9c62.roa
Signing time:             Sat 03 Dec 2022 00:00:00 +0000
ROA not before:           Sat 03 Dec 2022 00:00:00 +0000
ROA not after:            Tue 06 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:45:90:c7:76:b5:67:2f:f6:46:37:29:67:ca:69:6f:0a:00:00:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  3 00:00:00 2022 GMT
            Not After : Dec  6 23:59:59 2022 GMT
        Subject: serialNumber=9638b551839db377a51255439ffbdad1b16608062b638f3bc9efe34c4e5a56bf, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bd:a3:b1:89:1f:7a:84:92:c0:1e:dd:2f:b3:
                    59:dc:46:3e:07:79:ed:fb:c6:7c:9d:07:0c:37:79:
                    93:e2:51:00:24:d1:79:0f:ba:84:b1:85:c6:94:33:
                    e8:7c:96:23:f3:b6:6d:5f:de:03:53:be:eb:1c:3d:
                    ce:55:b8:90:db:89:ff:41:dc:5a:8a:93:28:05:4c:
                    dd:1d:bd:df:e9:7b:f2:e3:ec:ab:8e:dc:6d:5d:64:
                    f9:92:5b:03:56:ed:e7:7d:af:f8:e7:25:3f:3d:12:
                    7f:c3:b9:c6:d9:a8:61:45:a7:12:27:35:ba:3f:2d:
                    61:ee:8d:38:ca:79:2b:ec:fd:e0:98:72:46:fc:e5:
                    88:e5:bb:1f:18:1a:4c:3c:98:9d:5b:61:df:4e:6c:
                    3e:5e:12:d0:c3:70:c6:c7:59:c0:e0:0a:6a:f7:22:
                    de:d5:2c:02:40:f7:91:f3:9f:5f:14:d4:94:cb:53:
                    54:cd:5b:e5:d1:9e:32:a8:22:bd:a8:f1:08:d7:0d:
                    de:e6:0b:28:25:34:10:d6:a7:9a:83:15:88:20:d3:
                    a9:5c:ce:f7:07:3f:5f:37:47:02:02:ac:46:71:a9:
                    be:f4:ab:fa:76:58:e2:d5:11:5c:c4:62:77:91:bd:
                    3b:e1:da:4f:dc:5f:a7:f0:d7:65:2e:7f:97:21:fc:
                    67:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FF:B3:A4:83:7E:53:6E:D4:F0:B6:E3:AE:19:AE:EB:0F:68:B2:68
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/65357695-b039-487e-83b0-fb3960dc9c62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:18:2a:f4:2b:c1:ff:30:48:09:2c:9d:93:f4:e7:25:2a:3e:
         be:3d:87:0d:32:68:41:4e:f5:c5:16:fb:5d:a5:82:18:7b:18:
         14:79:e5:c7:a5:21:f8:3e:3a:38:71:bc:e5:c9:ba:37:3c:48:
         96:c8:fa:40:2f:8f:6a:ff:6c:09:5f:39:31:b2:01:34:e5:9e:
         b0:fe:99:1f:51:80:27:cd:1a:98:9d:17:c0:47:61:37:05:fc:
         04:19:62:75:37:78:ac:f8:83:13:a6:c3:cf:52:5b:7e:9b:fe:
         4b:c1:cf:4f:52:0f:07:b9:e0:87:17:8e:56:6a:5c:6e:1f:10:
         05:a0:06:80:a4:c3:5d:88:61:70:d9:3f:f5:7c:3f:98:e6:3d:
         21:2f:51:7b:f6:d7:c4:f5:4e:c4:9c:95:f1:31:71:87:70:dd:
         f3:4f:ee:5c:04:69:8f:3c:01:a4:0a:a4:8d:44:f8:6b:62:df:
         84:f5:a2:64:67:1c:2a:1c:91:7e:66:04:37:16:e6:46:6a:f0:
         90:24:9b:c6:b4:ed:46:20:79:ee:8e:18:18:d4:1c:81:cb:29:
         74:37:b8:cd:7b:d3:b9:bb:41:15:b3:da:fa:b5:55:62:31:67:
         82:29:e9:c8:a5:f2:8b:cf:41:f5:78:69:a0:d7:48:7e:b2:76:
         00:b7:59:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----