Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1d600648-6f8f-4a77-b9bb-dc938f411e0c.roa
File:                     1d600648-6f8f-4a77-b9bb-dc938f411e0c.roa (raw, json)
Hash identifier:          ZAT0NfztZzywS2rAQ1Hhfm9tfoQUqML693n/5oxGQ5U=
Subject key identifier:   0A:AA:2B:0A:5E:09:0B:11:2C:CF:C7:DF:E4:FB:CF:47:A6:90:74:C7
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       084310F4C663EC88E48109F4C7AD2634E9D80C71
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1d600648-6f8f-4a77-b9bb-dc938f411e0c.roa
Signing time:             Tue 10 Jan 2023 00:00:00 +0000
ROA not before:           Tue 10 Jan 2023 00:00:00 +0000
ROA not after:            Fri 13 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:43:10:f4:c6:63:ec:88:e4:81:09:f4:c7:ad:26:34:e9:d8:0c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 10 00:00:00 2023 GMT
            Not After : Jan 13 23:59:59 2023 GMT
        Subject: serialNumber=35765f4f0b464cb05cbb17b1772c7305938615e3220db7a875d24794ae33a094, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9e:4d:a2:10:1a:6f:db:a1:33:77:8d:71:65:
                    21:7f:97:13:68:d6:1c:9f:81:d4:84:50:8f:72:c1:
                    40:2b:a8:c2:38:8e:f1:87:20:10:30:02:77:e9:af:
                    79:cc:1c:28:1c:2a:06:fa:af:b6:32:66:3a:1a:a4:
                    4e:09:1b:2a:55:df:4a:47:70:22:0e:2d:b6:ff:b2:
                    3a:39:b6:e3:95:f3:72:64:08:ee:14:82:31:4f:a5:
                    5a:23:fb:19:13:14:2e:b5:9d:fe:f3:64:e0:e2:24:
                    3e:ec:ef:79:52:2d:2f:4f:b9:b6:85:ed:74:6e:a8:
                    79:d5:eb:bc:13:97:0c:04:77:a5:19:cc:27:e7:ff:
                    e8:95:58:ec:af:cb:d4:53:56:6b:50:1f:05:12:47:
                    02:2f:0a:7b:46:65:bd:21:26:6b:a9:ed:c4:04:83:
                    c6:00:ce:34:34:d2:ef:07:5c:06:69:4e:7c:99:5e:
                    71:ef:71:e8:7d:e3:40:bc:c8:7a:2e:56:b1:55:d2:
                    c9:00:78:4b:47:07:71:2a:46:77:d0:f3:bc:3e:b8:
                    d0:33:87:d4:ae:fa:36:07:8b:55:03:b3:5d:75:ea:
                    d3:84:a5:ea:b1:86:7c:b3:8b:a1:a2:68:a7:e8:be:
                    ce:99:01:33:b8:fc:52:88:7e:97:c0:e5:f8:4f:26:
                    07:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AA:2B:0A:5E:09:0B:11:2C:CF:C7:DF:E4:FB:CF:47:A6:90:74:C7
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1d600648-6f8f-4a77-b9bb-dc938f411e0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:d7:75:5d:71:5f:cb:a5:52:70:9a:23:ce:f4:e7:58:37:49:
         84:a5:d7:62:40:31:d6:4d:4c:42:e8:d9:8f:53:d4:bb:32:09:
         01:8e:ca:79:f6:ce:d2:1b:db:7e:d4:b0:fb:b2:9c:73:85:c1:
         50:b3:f2:1c:57:64:40:07:76:37:84:b9:0e:10:14:09:43:d2:
         fd:e6:58:fd:aa:cc:f4:30:c5:26:cc:24:80:44:85:53:5b:5c:
         49:bb:19:cd:ed:4c:20:c0:16:08:8d:3c:b5:b0:c3:8d:4a:83:
         c1:84:ec:26:77:1b:37:f7:b4:98:37:18:82:c1:06:7a:5b:5a:
         79:90:83:4e:80:9e:ff:de:cf:88:cb:af:14:ca:80:3f:97:d0:
         32:6c:5a:59:bc:83:7f:ba:49:83:75:04:bf:ce:50:72:4a:bb:
         e8:a5:29:fb:0c:a8:27:d0:5e:bb:52:73:32:75:dc:e7:7c:3b:
         eb:fc:98:71:8b:5b:1b:d1:a9:8c:28:5e:e8:99:45:9f:d3:dd:
         85:ce:63:c7:5b:5e:33:3c:d6:58:19:c0:b6:45:e1:0b:d4:fa:
         17:ba:49:61:82:61:a3:3c:fe:ff:01:0d:d9:2c:71:04:7a:15:
         1d:4d:cb:d2:cc:a3:6c:53:30:3b:6a:1e:0b:5f:fc:17:e0:99:
         48:07:52:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----