Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/29d22a0b-3837-4d16-9c4d-cf41a6a11a7b.roa
File:                     29d22a0b-3837-4d16-9c4d-cf41a6a11a7b.roa (raw, json)
Hash identifier:          vQTwztE9+agRQG092x0gaUYXtt9ovTNdjGF1BFJYZvg=
Subject key identifier:   C0:09:D0:F0:AF:1E:9A:7E:A7:CF:5B:49:1D:D2:4A:E5:5E:F5:B0:08
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       389160964D5D7D4E7D3EDC1E890B23739BA6B319
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/29d22a0b-3837-4d16-9c4d-cf41a6a11a7b.roa
Signing time:             Tue 27 Dec 2022 00:00:00 +0000
ROA not before:           Tue 27 Dec 2022 00:00:00 +0000
ROA not after:            Fri 30 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:91:60:96:4d:5d:7d:4e:7d:3e:dc:1e:89:0b:23:73:9b:a6:b3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 27 00:00:00 2022 GMT
            Not After : Dec 30 23:59:59 2022 GMT
        Subject: serialNumber=50e7dad254d6a987aeb5cfe9a914d6250bb9ed0034628e004c564747d9344ae8, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c1:8d:bd:5c:90:d4:69:1d:fa:a7:87:68:46:
                    d2:8f:4d:a4:47:1a:8b:05:ee:4f:ee:a9:20:97:fc:
                    85:86:cd:05:00:4f:cf:20:fa:cc:31:79:9b:ee:0a:
                    da:cb:e7:75:ee:f9:d8:72:49:2f:10:4c:e8:b1:45:
                    86:15:0f:60:d6:5a:41:86:ce:b8:91:3a:f5:d2:9a:
                    33:7f:54:2b:c4:03:68:a6:b0:16:90:22:ea:ef:49:
                    5b:01:7c:03:20:ea:5d:55:39:28:c2:91:01:7f:77:
                    e5:31:ab:1a:10:68:a8:90:be:aa:24:79:e3:2e:b5:
                    a2:73:0c:e0:00:26:a3:3c:ed:e2:74:b4:7e:5e:30:
                    33:c9:8f:3c:36:dd:40:7f:24:05:e9:5b:6b:52:da:
                    e5:5b:d0:ac:68:99:20:32:db:da:c0:a9:0e:c0:25:
                    95:e9:0e:14:c0:aa:94:c3:37:3d:fc:d7:18:c3:2a:
                    a7:e9:4d:24:73:c7:d6:f4:a6:04:fd:24:7a:28:35:
                    c6:ba:76:30:3a:5b:7f:dd:2b:cc:df:9e:7c:ce:c6:
                    e1:d6:3f:24:0e:24:79:45:39:bd:76:09:4d:84:38:
                    9e:a3:66:bf:4b:d6:95:a6:73:86:f2:b6:4f:45:ed:
                    d5:dc:fa:98:f9:a9:cd:a5:fe:23:19:20:64:e9:2c:
                    83:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:09:D0:F0:AF:1E:9A:7E:A7:CF:5B:49:1D:D2:4A:E5:5E:F5:B0:08
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/29d22a0b-3837-4d16-9c4d-cf41a6a11a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:40:61:37:7e:6a:56:36:87:c7:ad:6a:a1:fc:96:d4:b7:09:
         1e:e9:42:70:22:97:f7:be:14:e4:8c:09:56:cc:e2:ab:0b:73:
         e2:d5:40:8f:ae:29:76:58:cb:4c:ce:5a:04:17:4b:e0:77:48:
         9c:ac:76:a2:6b:ea:25:d0:75:5a:a8:83:6b:12:88:46:4b:0d:
         44:02:e4:ea:0b:2b:73:b2:76:ed:71:3c:18:d0:43:e3:d8:50:
         a2:42:0b:44:03:87:3a:41:7d:88:91:e1:98:0f:e4:0e:7f:8f:
         f9:ef:cb:de:e9:e7:80:49:0b:3c:c2:6b:83:a3:8a:1b:1c:30:
         ac:2d:6a:1f:34:0b:97:28:6d:08:ac:95:25:f2:bf:41:76:13:
         37:f1:be:d8:78:18:fe:9d:0e:9d:01:98:de:3c:e8:e6:34:d5:
         43:b2:02:05:cc:1f:75:8e:7f:6e:3d:92:58:e4:0e:f6:9a:cd:
         3c:2a:f2:39:fb:79:11:c1:ae:1c:1f:ad:a0:66:24:2f:3a:74:
         9f:fd:ce:5d:71:79:b0:df:50:8a:b8:fb:b7:3f:65:08:f4:13:
         2c:34:1c:fc:cc:67:1b:02:97:ff:7b:9a:83:91:4e:0c:a3:fd:
         0a:9e:d8:af:6d:88:73:47:b5:ba:f6:69:cd:fc:db:84:3d:15:
         94:4e:be:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----