Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6fc64414-c96f-4d80-9311-97ec4e187165.roa
File:                     6fc64414-c96f-4d80-9311-97ec4e187165.roa (raw, json)
Hash identifier:          19KazIxtHPs6+zSU4iusEBM09ZYQ/2X+dR42mQDuga0=
Subject key identifier:   5F:06:8D:BF:4D:D2:C9:38:F2:31:A1:4F:8C:79:15:53:5B:D7:14:DE
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       63C74646C305D4FBD804F32F84E833490846E24D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6fc64414-c96f-4d80-9311-97ec4e187165.roa
Signing time:             Tue 15 Nov 2022 00:00:00 +0000
ROA not before:           Tue 15 Nov 2022 00:00:00 +0000
ROA not after:            Fri 18 Nov 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c7:46:46:c3:05:d4:fb:d8:04:f3:2f:84:e8:33:49:08:46:e2:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Nov 15 00:00:00 2022 GMT
            Not After : Nov 18 23:59:59 2022 GMT
        Subject: serialNumber=174382cf07fac9eb2aa4f21fca7f1e074d45971f848fb61bbfd2c5b1851e4792, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a3:b9:00:75:61:25:d8:dd:41:09:95:98:59:
                    5f:d8:e8:cc:c8:aa:02:ee:bb:05:a8:5f:fd:a1:fd:
                    54:e9:28:24:d3:35:39:38:fc:ad:95:c4:90:c8:c0:
                    65:1d:16:a0:a1:3a:fa:05:d0:b4:17:dd:ae:f2:e7:
                    a3:50:d3:96:6c:91:32:b0:82:ef:1b:1b:a3:13:15:
                    c7:ae:03:c1:bf:89:2d:41:d3:7d:da:ef:7a:54:8f:
                    b4:a7:24:4e:b5:ef:f5:51:d1:51:c0:0d:58:90:79:
                    ea:f7:be:c3:8b:8c:ec:d0:44:20:69:64:4f:5d:76:
                    6b:05:a9:c7:b2:a3:e7:ec:99:56:9b:ce:e8:f8:eb:
                    c0:7f:6b:bb:ff:86:e5:8b:5c:fb:da:2d:8c:2f:32:
                    e3:21:55:6a:9d:43:42:06:79:39:f9:4c:28:05:79:
                    49:a8:92:14:9d:a3:52:73:28:a1:5a:c8:c7:50:4f:
                    7b:38:70:12:b9:c4:c7:34:af:ce:b8:6c:38:9d:83:
                    e4:cf:78:52:9b:ce:e4:84:ae:58:32:fa:41:da:0d:
                    ea:d8:8c:b0:2a:e1:1e:db:b6:97:26:c1:b8:47:85:
                    2d:a2:fc:50:7e:21:9b:d5:41:c6:8d:57:84:8b:b9:
                    c0:5e:88:be:f7:6b:62:10:48:c1:61:bf:e1:e7:3a:
                    fd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:06:8D:BF:4D:D2:C9:38:F2:31:A1:4F:8C:79:15:53:5B:D7:14:DE
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6fc64414-c96f-4d80-9311-97ec4e187165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:cb:61:ec:89:a5:79:b3:55:83:d9:0c:ec:7b:cf:b6:ec:8e:
         55:f3:27:7c:cc:79:72:b8:97:1a:f1:d5:d7:28:1b:07:68:69:
         d2:73:ce:e4:ef:3a:a2:ae:34:07:6c:7a:62:2f:c3:24:c9:ff:
         65:02:c0:93:49:39:75:71:50:5a:c7:77:5a:e4:f0:ca:2e:ff:
         f7:22:89:12:29:99:a8:a7:83:87:ab:38:b6:e8:d9:94:2e:4b:
         4f:6c:9b:13:a8:67:0d:8e:da:49:2e:f4:1c:23:63:25:9e:02:
         63:32:11:30:a0:a4:e2:93:9f:8c:6f:05:de:30:b2:34:1c:5f:
         91:e6:e2:e5:5a:74:28:26:2e:37:9e:c8:b6:e8:f2:5b:51:84:
         a3:99:a0:e2:7e:18:b7:28:41:82:06:ee:83:dc:da:3b:9a:2c:
         d9:30:69:c6:33:25:3d:76:73:a4:49:79:ef:44:89:1b:aa:cc:
         42:a8:b9:fb:40:30:93:bf:34:ef:35:5c:f9:50:9f:0c:90:60:
         3e:e3:b9:67:83:43:c8:e0:6f:26:c6:ec:4f:e5:61:72:bd:20:
         4e:c9:ef:4b:34:c7:b9:33:52:e7:e8:5c:de:0d:13:11:f1:a5:
         18:dd:af:d9:d8:30:21:23:1f:74:e9:56:e3:e6:bc:2d:1e:ff:
         e7:cc:cc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----