Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6623a033-7507-4c7c-8c3e-3b24fb6a6033.roa
File:                     6623a033-7507-4c7c-8c3e-3b24fb6a6033.roa (raw, json)
Hash identifier:          i4f7C7jRl0db+0cjMS5EbitIqhDDoVmf9nlQgDS6kqo=
Subject key identifier:   31:04:DA:F5:63:AC:DE:DF:51:63:3E:9E:BF:8E:B4:8E:C4:29:BB:EF
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       61B49451659D55D9054897F93557677D8A8F4AA9
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6623a033-7507-4c7c-8c3e-3b24fb6a6033.roa
Signing time:             Fri 07 Apr 2023 00:00:00 +0000
ROA not before:           Fri 07 Apr 2023 00:00:00 +0000
ROA not after:            Mon 10 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b4:94:51:65:9d:55:d9:05:48:97:f9:35:57:67:7d:8a:8f:4a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  7 00:00:00 2023 GMT
            Not After : Apr 10 23:59:59 2023 GMT
        Subject: serialNumber=0f2adcb9c5409797428e5ad78dd35b03691da3214098b1f14a4adabd171debbc, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7c:80:91:58:8b:e0:c6:39:d4:5d:0e:ce:0d:
                    91:b8:61:5c:c7:3c:e8:6b:48:7f:d5:7a:67:81:b7:
                    01:06:f9:36:b5:36:d4:61:83:9d:18:fd:df:da:91:
                    c5:88:ea:46:d1:6a:b9:84:6d:fc:07:a4:2e:b5:5c:
                    f5:f3:f8:51:eb:ba:ce:82:8c:9c:c4:cb:3d:61:2d:
                    43:14:05:7f:1e:14:13:68:30:f7:07:2b:2c:6a:de:
                    35:f7:ef:f8:e6:f7:a7:d1:11:22:e6:ae:9b:6c:0b:
                    27:a6:eb:a2:19:af:49:49:db:1e:a9:f2:d2:b2:58:
                    67:a5:d1:d6:ee:b4:90:79:db:51:07:04:d5:9b:ca:
                    a2:69:dc:dd:8c:ab:ca:bd:be:de:8e:bb:48:bb:c2:
                    2f:e4:5e:6d:99:c6:1e:83:d0:15:cc:fd:ef:78:cf:
                    8b:73:ae:16:cd:de:ea:1a:61:e9:c0:50:2b:cc:4c:
                    73:92:02:3a:9c:a9:7a:0e:cd:8c:28:55:65:75:03:
                    90:bd:2c:b3:54:f5:81:b4:1e:62:9d:d8:d5:5a:41:
                    ed:5b:71:f7:a8:b2:ea:80:d6:63:00:ae:2c:89:53:
                    77:9d:b9:b2:c8:1c:45:4a:bc:07:f3:e9:b1:38:82:
                    ac:16:76:3b:a1:37:5a:8d:25:53:8a:71:d9:a6:8e:
                    09:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:04:DA:F5:63:AC:DE:DF:51:63:3E:9E:BF:8E:B4:8E:C4:29:BB:EF
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6623a033-7507-4c7c-8c3e-3b24fb6a6033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:f6:5a:57:1d:43:21:4f:c6:cf:82:52:4e:05:cd:89:c6:07:
         f3:b9:b1:db:b4:1e:ef:e6:25:31:86:42:a4:a9:30:35:19:6d:
         7c:36:ee:0b:52:d3:2c:da:94:78:b1:87:7e:55:38:11:11:89:
         83:47:a3:35:2c:61:a3:fe:bb:23:57:e7:25:40:65:14:86:63:
         ee:e4:4f:7e:dc:e4:78:1d:dc:d4:d3:0f:fd:bf:fd:4a:fc:01:
         2a:00:13:32:e0:5b:ef:25:e1:52:37:e3:be:d4:56:26:c1:8b:
         59:e1:ec:73:93:37:d9:45:24:84:1c:ff:97:fc:59:82:ab:dc:
         ff:29:e8:9b:eb:8e:d1:9e:dd:7b:c3:04:8b:27:7d:b4:b3:13:
         f7:49:55:e1:24:8f:38:14:f9:8a:67:1e:62:98:1b:15:87:fa:
         02:61:af:88:45:e4:85:f0:35:ab:6f:e7:70:da:a6:17:9e:19:
         3a:ef:b7:24:19:63:b2:65:0a:be:a0:42:fa:f4:80:01:1e:fd:
         82:b9:40:b1:09:c5:c9:f4:ba:51:ec:8c:50:95:15:54:60:37:
         62:6c:ff:e8:df:05:a0:2d:8d:bf:22:d1:74:a3:6c:50:e6:32:
         ee:25:11:5d:71:6e:2e:55:8d:c0:4a:8b:32:97:2e:2c:a4:b3:
         1f:06:20:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----