Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/24b19b56-5200-4c0e-a61b-a3feb2334e54.roa
File:                     24b19b56-5200-4c0e-a61b-a3feb2334e54.roa (raw, json)
Hash identifier:          5CTmYr5PMVb2HHS9zqQsdV894FE34VonmQTNZoZjqrA=
Subject key identifier:   DE:FE:04:09:07:7C:DC:17:1D:C8:46:C8:D9:50:0A:2A:BC:EB:68:FD
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       16C401E64A34E8DBDA11D1CCD3FD878FAF3F4B5E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/24b19b56-5200-4c0e-a61b-a3feb2334e54.roa
Signing time:             Wed 28 Dec 2022 00:00:00 +0000
ROA not before:           Wed 28 Dec 2022 00:00:00 +0000
ROA not after:            Sat 31 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c4:01:e6:4a:34:e8:db:da:11:d1:cc:d3:fd:87:8f:af:3f:4b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 28 00:00:00 2022 GMT
            Not After : Dec 31 23:59:59 2022 GMT
        Subject: serialNumber=925461e712f92b8f2bb4bfc0a12d7d66abe085a45df38f345c8095bdde906550, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c2:db:42:59:f8:4d:07:da:9a:d2:d8:85:cf:
                    a0:a1:ce:74:26:c0:9c:62:90:3e:0e:28:e8:67:a9:
                    b5:26:d0:1e:90:a4:ed:0b:95:d6:56:13:97:dc:a3:
                    52:c1:b0:d3:ad:54:ac:a5:e4:74:c0:a1:1f:de:5d:
                    f0:b1:8e:23:c2:76:07:5f:c6:da:c0:ae:09:55:df:
                    ec:dd:6a:17:8a:ee:5b:f6:b9:fe:62:bd:11:b3:82:
                    f7:33:83:67:73:1f:a6:c8:f4:23:d7:7c:d2:38:ce:
                    25:42:f3:b1:63:4c:ab:07:7a:cc:0e:82:05:5f:46:
                    60:7d:19:20:ec:01:18:af:25:c5:7a:be:ef:4a:d7:
                    d7:9d:d9:02:2a:6b:c1:8a:1b:90:41:0b:d7:72:bb:
                    88:66:6d:5b:14:d3:b3:3b:eb:02:6c:4a:6b:e3:e1:
                    20:f8:40:6b:ee:48:ca:f3:21:ed:a8:e0:5c:06:df:
                    cb:1e:c6:e3:88:dd:d9:ca:10:f6:b4:56:b4:df:75:
                    a3:fe:ab:d9:5f:21:32:1f:1a:5e:8e:61:11:19:7c:
                    ef:5f:46:f8:94:7d:62:2c:06:3d:45:94:7f:bd:0e:
                    e2:5a:43:b2:7b:c9:c2:0e:99:01:b0:eb:af:2d:e7:
                    c7:02:4d:11:78:ef:49:35:17:ca:18:c9:e6:93:90:
                    5e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FE:04:09:07:7C:DC:17:1D:C8:46:C8:D9:50:0A:2A:BC:EB:68:FD
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/24b19b56-5200-4c0e-a61b-a3feb2334e54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:1c:be:48:26:c8:5c:c1:29:00:14:c5:24:e3:6a:c6:f0:19:
         bc:bb:5d:fe:e3:23:5a:90:97:b2:5b:a8:02:24:de:39:30:24:
         d8:67:3d:5f:e5:03:65:5d:db:df:ce:78:f4:22:7f:3b:7e:38:
         6e:57:21:74:2b:ef:f8:26:ce:15:2e:30:1c:27:e2:42:e5:4f:
         70:e9:51:0a:b0:01:62:bb:be:62:73:68:0e:dc:95:31:ed:1b:
         6f:e9:7f:a9:51:58:ed:3d:d8:5b:d0:7a:c5:1e:09:27:c7:4a:
         c8:59:93:37:d3:af:fe:f0:e4:da:37:02:a6:02:cb:de:b6:2e:
         6e:a1:8e:2b:18:e2:71:85:22:04:7b:13:bf:50:71:60:a1:8f:
         76:bd:be:ee:bf:2e:8f:ca:ba:98:cb:cd:7e:9a:7d:e9:30:de:
         66:79:02:53:a5:48:be:0f:bd:e9:58:f2:7d:46:cd:8b:f8:a9:
         75:aa:c1:3f:8c:02:36:c1:76:af:41:ce:69:45:f1:60:23:5f:
         5f:42:c7:48:b1:02:df:ad:0d:41:64:77:93:3f:52:4a:c8:b4:
         1a:c8:a5:b7:36:db:99:64:04:9a:c2:e2:26:ce:72:39:7a:1e:
         a9:2e:06:df:69:1f:2c:c3:69:77:89:eb:26:1d:c4:ec:0f:87:
         c5:a2:d1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----