Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/14396997-9b41-42c4-9e6a-9cc24939908f.roa
File:                     14396997-9b41-42c4-9e6a-9cc24939908f.roa (raw, json)
Hash identifier:          SUljkO2LAJHJpcjd1tOffFJtTg5qBpawybuKEx6gB8M=
Subject key identifier:   8D:22:12:11:13:32:47:25:35:44:F6:34:86:2A:51:D9:1E:E9:50:2F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5519EE861143B44B1E7BBF8732FCC626C040B725
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/14396997-9b41-42c4-9e6a-9cc24939908f.roa
Signing time:             Fri 09 Dec 2022 00:00:00 +0000
ROA not before:           Fri 09 Dec 2022 00:00:00 +0000
ROA not after:            Mon 12 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:19:ee:86:11:43:b4:4b:1e:7b:bf:87:32:fc:c6:26:c0:40:b7:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  9 00:00:00 2022 GMT
            Not After : Dec 12 23:59:59 2022 GMT
        Subject: serialNumber=eafb5de94f094f496b639895eb4c74cd75e174e729a6bed250ad55342d0c5560, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:40:cf:be:68:df:ce:24:e5:20:49:0e:40:b6:
                    26:6d:5e:cf:ba:dd:60:9c:94:e5:3e:cb:bc:54:d7:
                    7a:37:f6:08:2f:67:18:0b:d1:ff:66:fe:7b:9e:cd:
                    73:82:1b:96:4d:d1:e6:ab:d4:fc:cb:7a:7a:27:38:
                    90:4f:4f:bc:b7:3a:36:c0:c5:3d:bc:52:56:15:21:
                    3b:54:55:5b:04:f4:57:3b:a1:8f:f4:97:a3:c2:f6:
                    97:7c:5e:b7:73:81:2a:40:55:d8:7e:db:91:56:4e:
                    82:7c:11:b2:0b:43:98:b6:89:40:e0:d4:97:31:70:
                    e5:b7:7b:c6:ba:bf:8d:d2:9e:74:65:98:b9:64:2e:
                    8d:c4:c1:ab:c6:ca:49:35:5e:11:48:1f:21:1b:73:
                    fb:46:0f:af:dd:7d:32:50:a3:7d:53:69:59:35:e8:
                    ae:09:ee:e6:03:1a:88:13:41:b7:f4:c3:17:06:0d:
                    37:4c:97:a9:72:bb:30:ca:1b:13:17:27:a8:ce:bc:
                    84:e5:00:52:4f:59:ad:69:08:34:9e:51:85:32:1a:
                    4a:eb:43:e4:3c:0e:f6:ab:9d:ab:6b:31:49:98:4a:
                    ba:38:89:e6:ca:67:f6:77:90:7b:f7:12:32:83:ba:
                    fa:68:2c:57:15:31:95:99:7d:8f:bb:d1:64:83:05:
                    0a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:22:12:11:13:32:47:25:35:44:F6:34:86:2A:51:D9:1E:E9:50:2F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/14396997-9b41-42c4-9e6a-9cc24939908f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:06:0e:94:f4:30:b9:d7:62:8c:9b:22:fb:5d:39:94:0c:87:
         71:41:a6:14:d7:54:80:80:e1:38:d9:8c:fc:39:6a:0a:92:1e:
         31:04:cb:69:39:2e:69:77:a4:40:3d:b9:2d:8f:f2:75:8f:e3:
         93:4e:55:4c:43:9e:f8:5e:0b:94:af:f5:4c:a6:cf:df:fc:c9:
         a5:9d:d9:11:57:26:13:c5:5d:c1:ed:ae:47:b6:06:3e:1c:9e:
         ea:57:6e:50:45:44:ba:89:c1:38:08:4b:18:53:52:6d:c5:36:
         7e:50:bf:47:4d:99:18:41:fa:52:3a:6e:23:c1:eb:e2:c7:60:
         d5:49:ff:5b:90:25:33:cd:95:96:f5:d2:38:b2:2f:88:9f:97:
         ec:bf:bd:6d:ea:b0:b0:55:9b:0a:ee:fb:8a:d6:ff:e5:d5:6a:
         15:17:10:56:94:fa:d5:4e:5f:75:eb:ba:ee:c4:e4:75:22:9d:
         ee:fc:2d:80:fe:0d:43:e5:d9:78:9c:9f:bf:0f:6b:c7:24:6c:
         73:57:61:1c:2b:9f:38:ab:dc:12:dd:06:e8:53:a7:82:d5:25:
         0b:63:6e:7c:91:b2:db:68:d1:a1:da:de:ed:23:be:3b:7a:45:
         e1:81:fe:fc:df:c5:73:61:f4:c1:f8:e4:7d:77:be:ca:18:b9:
         6d:52:9d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----