Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e610809d-9911-47bf-96b6-25159faad5c5.roa
File:                     e610809d-9911-47bf-96b6-25159faad5c5.roa (raw, json)
Hash identifier:          laM3DXtCq7NhviRcg3HpFjIbER9xevft7pi7aptaUqI=
Subject key identifier:   D7:77:73:17:E3:B7:0F:56:78:40:76:5C:50:13:5F:C9:EA:AE:DF:36
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4471D9D76D5C57476FCE720F2EC9F5873BA066C3
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e610809d-9911-47bf-96b6-25159faad5c5.roa
Signing time:             Wed 11 Jan 2023 00:00:00 +0000
ROA not before:           Wed 11 Jan 2023 00:00:00 +0000
ROA not after:            Sat 14 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:71:d9:d7:6d:5c:57:47:6f:ce:72:0f:2e:c9:f5:87:3b:a0:66:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 11 00:00:00 2023 GMT
            Not After : Jan 14 23:59:59 2023 GMT
        Subject: serialNumber=8de5b66f5663f3c283b5e174c974022cd34c11f3120e4d9b6eb5083d3e0cf995, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:20:d3:62:7f:7f:a9:7c:75:de:23:13:04:
                    a9:11:79:4d:17:ff:1e:88:28:45:b1:f6:02:10:1b:
                    a1:cf:c6:1d:1c:18:48:38:4a:03:f1:9e:45:d2:69:
                    32:77:28:d5:9e:f7:7d:ae:36:62:f3:e7:9d:f4:16:
                    3f:97:68:ae:68:5f:ef:90:29:ba:48:05:30:d8:4b:
                    0d:ed:99:01:a8:aa:fe:c8:bd:26:7b:c7:3f:f5:b0:
                    d8:3d:96:65:bd:7b:63:95:98:f4:4d:be:9b:3f:22:
                    16:1a:a0:6c:e2:83:58:1a:3e:3d:1e:e7:d5:50:6f:
                    bf:8d:2d:ab:b2:47:45:b7:30:61:ce:c8:a6:8f:66:
                    94:a6:02:b1:19:23:ad:e1:18:ae:a4:d2:5c:00:12:
                    d2:3d:52:a9:1e:9d:31:3e:86:23:2a:fd:ad:d5:cb:
                    37:ec:d9:86:09:0d:b7:8c:35:2f:cc:fa:eb:f8:56:
                    e7:bb:90:76:b6:6d:66:fc:de:d5:70:fe:ca:18:45:
                    36:fc:35:07:59:0d:a9:2b:ac:73:07:c1:0e:f2:bf:
                    0e:a8:06:25:35:3d:38:6c:b1:ab:00:3d:0d:01:6f:
                    d1:20:6f:09:ee:49:57:1b:14:6a:9c:06:be:6d:2b:
                    22:13:b7:09:25:37:70:6d:fd:ec:79:af:d3:37:d6:
                    08:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:77:73:17:E3:B7:0F:56:78:40:76:5C:50:13:5F:C9:EA:AE:DF:36
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e610809d-9911-47bf-96b6-25159faad5c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:e1:e3:4c:c3:51:25:ae:d6:d5:cf:46:be:50:74:36:7d:b2:
         ce:16:45:a9:b4:4d:c3:57:1c:27:bd:85:50:a3:8e:3f:62:45:
         38:58:6c:21:c6:5b:e5:d1:90:8d:7b:64:b5:35:9d:0c:5a:58:
         24:e8:f3:ba:c6:4f:6c:8b:a3:ed:c3:7a:f2:64:22:f7:ea:f4:
         59:b6:a5:31:69:1b:04:1c:66:d2:18:c0:e6:5e:67:b7:fd:ea:
         19:60:51:65:30:43:fc:73:3a:82:a6:33:42:0c:a6:51:24:1a:
         43:0f:42:c7:2c:c2:71:35:8d:b5:26:a5:8f:68:3b:ed:5c:3e:
         d8:72:2d:18:73:95:50:09:fe:eb:fc:ad:c6:c8:88:88:eb:54:
         11:2b:f1:9b:1f:17:56:28:a7:84:2d:c2:48:7b:51:bc:34:92:
         57:b7:75:88:de:23:50:9e:47:d4:29:d7:34:f1:24:94:0f:52:
         f8:a9:61:b7:09:55:a9:81:99:57:ff:13:c3:4a:3a:b3:73:99:
         8c:d9:98:f0:d0:cc:96:cd:66:9e:10:05:e7:3b:11:d2:f4:19:
         1c:c8:50:2f:92:a8:e4:f5:89:69:59:c6:85:f0:69:8c:d3:6b:
         4b:41:b6:2b:c6:bd:e0:fb:f0:57:2e:57:87:74:c5:49:e5:b7:
         43:cd:39:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----