Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/071d83d9-f24a-40c5-8dd8-db1df4d30fa0.roa
File:                     071d83d9-f24a-40c5-8dd8-db1df4d30fa0.roa (raw, json)
Hash identifier:          s/QSw49i8tb9Amth3p3OWKNxEePfDcFef4kAahCfiTg=
Subject key identifier:   7A:D8:0A:57:EE:D7:EF:80:54:14:B2:9E:01:4D:3F:D7:77:E7:E6:3E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       415A7F5A8E110776815C43ECDBAB762CC77A5810
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/071d83d9-f24a-40c5-8dd8-db1df4d30fa0.roa
Signing time:             Fri 09 Dec 2022 00:00:00 +0000
ROA not before:           Fri 09 Dec 2022 00:00:00 +0000
ROA not after:            Mon 12 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5a:7f:5a:8e:11:07:76:81:5c:43:ec:db:ab:76:2c:c7:7a:58:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  9 00:00:00 2022 GMT
            Not After : Dec 12 23:59:59 2022 GMT
        Subject: serialNumber=f78c7928513c85dd0559144ddd0dc46da4c2ad9cbdd46584814d31613e2293e1, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cb:73:20:dc:70:d6:05:bc:ed:fa:92:43:65:
                    2d:41:ae:1e:b1:e7:47:5d:30:cf:0a:04:66:d7:ce:
                    e6:cc:44:22:b4:c0:a0:fb:aa:ff:2c:1f:d3:9c:db:
                    18:8c:75:12:1b:35:b3:f6:6b:4e:a0:da:a9:90:1a:
                    2f:31:87:04:d7:f5:4d:31:d8:51:14:e9:ab:42:9b:
                    7f:2f:64:6f:f1:4c:a5:25:e0:62:84:a3:bd:96:ae:
                    af:ed:b6:47:9b:07:fb:b3:e1:f5:ab:8c:a8:bf:7f:
                    e8:16:b9:9d:93:3c:b5:a5:68:63:79:ce:04:30:85:
                    1e:be:a4:84:f3:1c:1c:75:2f:4b:05:8e:d7:76:14:
                    f3:d4:94:a6:69:e4:b6:89:97:53:9a:df:6a:b3:1c:
                    63:18:6d:ca:a0:c5:9c:62:0e:b4:ce:61:57:d3:6f:
                    01:76:0e:36:1b:3c:9b:c0:7d:79:90:bb:8b:9e:fa:
                    7f:77:c7:4c:48:8a:dc:80:ee:92:34:61:38:6a:c6:
                    d9:9f:ab:70:83:35:14:5d:93:33:ff:b0:69:fa:c5:
                    15:d2:a9:fb:25:42:7d:a5:ae:fe:c9:33:5d:d6:f7:
                    de:ca:42:53:de:da:27:4c:0e:17:3c:5e:7d:cb:ab:
                    ca:ae:1a:b3:0f:45:31:43:32:39:ef:34:1c:9c:2c:
                    73:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D8:0A:57:EE:D7:EF:80:54:14:B2:9E:01:4D:3F:D7:77:E7:E6:3E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/071d83d9-f24a-40c5-8dd8-db1df4d30fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:14:96:65:56:1f:ce:58:a0:f3:bd:fd:07:7d:cf:25:6c:d9:
         c7:73:24:ee:91:9c:6f:1a:d1:5f:6f:02:4b:36:e9:63:8c:a9:
         be:a0:3b:44:b0:f4:0e:6c:15:fe:6a:88:a7:a6:01:6b:d5:e9:
         4e:09:bf:af:15:30:94:ff:2d:19:b6:05:30:05:a8:98:f1:88:
         f8:07:2a:87:03:6f:69:b6:9f:5f:fe:05:31:c4:f5:0c:c7:bc:
         3e:19:74:a4:06:1e:69:bb:98:8c:5b:a7:a4:14:66:65:d8:2c:
         71:4b:5e:2a:a3:68:cd:32:fc:8f:14:7f:95:e6:9d:ed:99:bb:
         83:4b:60:a7:cf:f0:56:8b:d4:37:41:e8:af:53:ab:2f:e8:92:
         95:38:4a:43:13:db:84:5d:c3:56:8e:d7:92:1f:7c:8b:c7:30:
         53:a1:10:ba:57:05:1a:5e:d3:8c:9c:6f:15:72:cc:37:e6:9c:
         d2:db:45:85:bf:df:d2:c7:6c:b9:9f:6a:cf:3f:ca:5b:7d:1e:
         82:1b:4f:52:c9:d9:5b:43:09:59:35:5a:8a:e3:70:cf:0b:69:
         a5:e6:ac:76:1e:17:66:78:fb:20:6b:ed:3b:1d:31:e5:fb:58:
         82:f2:b9:dc:12:88:f7:f8:9c:af:75:e2:fa:0d:8f:38:01:1f:
         38:d0:1c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----