Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b6b31003-3164-414a-9a93-b3ae37e63845.roa
File:                     b6b31003-3164-414a-9a93-b3ae37e63845.roa (raw, json)
Hash identifier:          cQUg6yJdfIwgROChhmTsHlWMoePYf5h3maP6LmNP/0I=
Subject key identifier:   38:17:2D:2F:0F:6E:95:6C:8C:11:41:54:B9:A7:F3:68:DA:C9:F4:83
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6B4C055A439B433BF7FE046D032869BF980442E1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b6b31003-3164-414a-9a93-b3ae37e63845.roa
Signing time:             Sat 24 Dec 2022 00:00:00 +0000
ROA not before:           Sat 24 Dec 2022 00:00:00 +0000
ROA not after:            Tue 27 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4c:05:5a:43:9b:43:3b:f7:fe:04:6d:03:28:69:bf:98:04:42:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 24 00:00:00 2022 GMT
            Not After : Dec 27 23:59:59 2022 GMT
        Subject: serialNumber=ae07f561a2985b8657d3e36373575ddd1eb5a12fd3cf7749dc41a3602231ab2a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:06:f3:dd:84:ed:82:df:20:2b:d3:f0:53:
                    68:1e:10:13:6f:e4:3e:45:af:ce:f2:df:ea:84:ba:
                    64:2a:8e:a9:ca:cc:b2:cf:92:75:38:e1:ee:17:47:
                    09:1a:a0:41:87:1c:48:01:23:52:06:0b:9c:ce:2e:
                    d4:6a:03:2f:68:74:c4:0b:fb:50:3d:0a:64:dc:42:
                    1b:08:78:48:0e:b6:c4:13:61:b7:ee:3e:2f:f4:7a:
                    8a:c5:b5:68:2d:01:c3:a5:4d:82:a4:e7:d0:a9:c1:
                    ed:94:84:1a:c4:11:fa:d0:08:8f:18:4a:12:5e:db:
                    37:33:c3:c6:e9:4b:7e:5b:aa:02:e0:48:0a:21:fa:
                    d9:47:12:fa:61:e4:b1:94:d3:a0:9d:c1:35:26:9c:
                    66:c1:a1:f9:77:15:62:2c:ab:27:03:aa:1a:ca:07:
                    9a:93:f3:77:f7:70:87:ad:7a:c3:8e:9d:12:94:09:
                    96:00:f3:3a:6a:ad:ec:50:1d:f0:b1:02:8a:59:6b:
                    f4:7a:68:a7:9a:a9:e6:36:fa:7a:ae:9a:3c:65:38:
                    bc:ed:10:de:7b:01:32:dd:da:09:30:f9:a0:a2:3c:
                    4c:11:98:3b:18:e0:ce:9a:a7:14:87:86:53:2c:3b:
                    9f:46:24:80:c0:32:c9:a6:87:9c:a3:f5:97:ac:94:
                    ca:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:17:2D:2F:0F:6E:95:6C:8C:11:41:54:B9:A7:F3:68:DA:C9:F4:83
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b6b31003-3164-414a-9a93-b3ae37e63845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:86:c9:b2:7b:ba:69:5a:c9:03:82:4b:e6:cf:c2:21:d5:4e:
         40:26:61:c9:47:6f:b8:13:bc:38:0b:38:31:6c:b9:eb:2c:83:
         ac:ab:44:ea:6b:1a:44:c2:77:1b:af:14:45:65:24:ab:5d:49:
         ba:c6:08:07:d4:78:4b:59:b9:0d:3d:2c:8b:21:1a:37:05:8b:
         0d:08:7d:dd:bc:28:97:3d:66:80:fd:f8:c4:67:67:f0:7f:51:
         99:55:cf:38:77:ee:a9:10:55:7c:7f:ed:a8:79:04:5f:5d:43:
         01:cc:45:03:62:7b:ad:dd:bb:ca:f5:59:90:1c:27:90:94:01:
         5f:1b:5b:62:5e:3a:68:6c:39:70:08:cc:d4:8e:dd:0e:ec:97:
         8e:45:5b:b5:89:cb:35:4f:25:ce:40:b8:72:79:0b:c6:fb:1d:
         7e:3a:1a:a3:66:9a:f9:ca:3a:58:96:4f:a1:ad:80:86:b1:b9:
         68:45:f9:7c:cd:ff:f1:49:c3:82:0c:10:7b:96:fb:f9:b0:86:
         ea:2f:4d:63:66:36:38:4c:aa:b2:37:67:ae:81:f8:9b:d4:96:
         71:84:bf:2e:95:13:4a:c3:99:2f:a8:3c:70:5b:3c:09:1b:fc:
         16:28:4b:0a:66:80:75:8e:5a:af:0f:fd:78:5b:52:a1:6f:4d:
         fb:d7:f6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----