Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0fcac2a3-ad6c-44cf-82cd-3537d2c80282.roa
File:                     0fcac2a3-ad6c-44cf-82cd-3537d2c80282.roa (raw, json)
Hash identifier:          e4U8zvEh13bAvK5J7xSnClnUH434NRiyW0lRned2Tt8=
Subject key identifier:   D0:69:17:9F:E9:7F:A7:34:50:F0:C6:59:16:FD:C2:F0:86:1B:5C:87
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1704615D5D95786D61103AA16AFF59CF5EA97F39
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0fcac2a3-ad6c-44cf-82cd-3537d2c80282.roa
Signing time:             Sat 17 Dec 2022 00:00:00 +0000
ROA not before:           Sat 17 Dec 2022 00:00:00 +0000
ROA not after:            Tue 20 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:04:61:5d:5d:95:78:6d:61:10:3a:a1:6a:ff:59:cf:5e:a9:7f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 17 00:00:00 2022 GMT
            Not After : Dec 20 23:59:59 2022 GMT
        Subject: serialNumber=3653a647abd3a43dabbf549317c82e32f76c51522bff48878bf250e51fc00fad, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:56:2a:54:20:ef:4f:9d:94:05:c5:67:03:d8:
                    f8:e3:8a:18:39:d9:02:63:86:55:34:44:76:2e:44:
                    55:32:a8:cb:2b:fc:c2:9d:50:ff:35:a9:d0:67:36:
                    0d:17:b7:d3:89:f8:dc:ad:81:9f:d0:05:55:92:f1:
                    82:3a:0f:04:9b:7a:43:a9:a2:86:93:34:f5:2b:94:
                    15:c2:0d:43:45:97:5a:d8:1d:2a:3b:7a:db:28:d1:
                    32:ae:ee:cb:08:e0:bd:2a:98:f0:88:01:df:2c:15:
                    69:b1:5c:b8:3e:30:fb:cc:76:b4:44:54:65:c0:1e:
                    ae:9a:e9:f4:b5:fd:93:2f:6f:5e:98:43:d3:61:f6:
                    5b:c3:05:71:89:ad:df:72:94:24:d8:5d:e0:7a:00:
                    4d:f2:e7:cb:7d:26:04:fb:96:b2:d3:03:9c:b0:6b:
                    a3:78:bf:10:57:42:2a:cf:14:26:e3:58:74:54:97:
                    be:45:d1:10:c0:72:de:c3:a7:44:51:01:37:4e:9a:
                    80:d1:ed:b8:b3:bf:2b:a6:57:0b:f2:81:2a:81:92:
                    f3:7e:a5:e3:89:35:e4:44:89:a1:64:a7:39:6f:9c:
                    e3:f0:4f:e1:b6:8a:b8:07:2b:dd:61:dd:74:dc:75:
                    5a:4b:22:fc:d8:29:a6:c2:de:ce:55:7d:24:6c:a6:
                    ed:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:69:17:9F:E9:7F:A7:34:50:F0:C6:59:16:FD:C2:F0:86:1B:5C:87
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0fcac2a3-ad6c-44cf-82cd-3537d2c80282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:4c:f7:fb:8d:d2:c7:63:1e:97:a3:5d:59:75:52:02:a7:cf:
         8b:49:89:cc:cf:37:17:04:f8:ed:e9:91:53:f9:67:e7:77:53:
         3d:f2:21:39:5f:66:98:3e:8d:21:c2:99:cb:ee:58:68:7d:e8:
         9f:9f:3f:f1:eb:d6:6c:75:c0:82:46:05:9d:c1:50:cd:97:a8:
         06:8d:83:dc:e2:be:35:09:78:02:bd:0c:1c:40:f9:af:98:5b:
         d6:91:7a:9d:ae:ba:c3:19:f3:19:00:39:cc:d3:3d:5a:59:c2:
         9a:4e:52:cd:79:1c:0f:a3:31:88:c0:10:5b:92:78:ba:55:47:
         73:46:fc:f9:44:35:27:ae:84:95:18:39:c5:b2:6e:b7:c5:3c:
         ce:1a:ed:c5:eb:bf:db:79:da:12:ae:21:8e:85:5c:81:a0:21:
         9c:24:c8:1b:e6:7a:4d:d1:cb:f3:ed:69:45:91:fd:f4:b5:c2:
         88:18:01:35:63:0e:e3:15:31:59:43:14:39:42:b8:0c:46:eb:
         4b:c6:0b:6b:3b:c3:bd:be:c5:fa:35:de:6d:db:66:1f:f4:d0:
         cc:81:dd:81:45:bf:f1:9a:e3:ba:10:a8:78:47:c2:36:fd:b0:
         8a:2d:c5:d8:f2:20:16:2a:91:09:12:77:f9:35:e6:87:29:3e:
         1f:bd:6e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----