Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2c8f25f6-0302-4e29-b0c1-a9332ea45b82.roa
File:                     2c8f25f6-0302-4e29-b0c1-a9332ea45b82.roa (raw, json)
Hash identifier:          8XIFAS6iAAaO00HCCYLc2jtrnDgUBJm93iRibFGQ1sA=
Subject key identifier:   A6:2A:33:40:37:8F:94:F9:97:A2:72:56:19:DD:A1:C8:0E:E2:98:75
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       247DF738CE48F494C0568487EB97BE1ADA5E8EFA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2c8f25f6-0302-4e29-b0c1-a9332ea45b82.roa
Signing time:             Fri 09 Dec 2022 00:00:00 +0000
ROA not before:           Fri 09 Dec 2022 00:00:00 +0000
ROA not after:            Mon 12 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7d:f7:38:ce:48:f4:94:c0:56:84:87:eb:97:be:1a:da:5e:8e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  9 00:00:00 2022 GMT
            Not After : Dec 12 23:59:59 2022 GMT
        Subject: serialNumber=db030e999e00a01d4718cb9125c1232182ca519ea0ad1a58797dcd289511dde1, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f7:77:33:0c:9c:1c:40:9c:53:50:7d:bf:8a:
                    90:98:08:a2:a5:23:bb:b0:5f:06:73:9a:76:3f:b4:
                    13:07:6a:c1:c1:42:dc:5f:83:de:1b:71:b2:93:d3:
                    38:ea:16:ba:a0:04:52:b0:aa:fb:3b:e9:68:e1:bf:
                    cf:fc:23:57:8f:d1:9f:d2:d9:9f:8f:af:7c:3b:50:
                    40:77:f3:b3:6f:0e:90:43:5c:d5:6f:37:71:52:78:
                    71:ce:10:23:0f:68:da:d0:52:13:b7:21:e5:43:b2:
                    c9:15:3b:2a:f3:33:47:38:0f:2b:4c:ba:16:69:25:
                    3b:4d:e9:a0:eb:7c:55:eb:d5:87:43:0f:b1:d0:a4:
                    cf:e3:0c:41:3a:14:34:88:1c:2a:c7:dd:b0:b6:bb:
                    6b:21:01:f7:5f:21:17:c8:19:16:75:42:82:38:f9:
                    b9:f1:b3:c6:7e:ae:9f:2e:fa:26:8b:fb:32:f7:53:
                    6e:25:7b:f2:e2:68:6f:de:1b:5d:ef:db:05:f8:47:
                    4f:81:e9:bd:85:49:95:14:1f:32:0e:3b:cb:d4:10:
                    93:53:c4:25:1c:b8:49:33:d2:e0:79:20:b9:b8:a5:
                    b2:34:17:11:51:1f:de:a5:44:5e:ba:cc:92:02:e7:
                    45:34:cf:f5:fa:8b:4e:15:2d:cc:09:41:00:aa:e9:
                    8e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2A:33:40:37:8F:94:F9:97:A2:72:56:19:DD:A1:C8:0E:E2:98:75
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2c8f25f6-0302-4e29-b0c1-a9332ea45b82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:f2:5d:08:b9:b5:e3:22:e7:6c:50:48:7a:6f:38:eb:04:89:
         90:40:57:33:79:da:1b:b2:ca:33:67:e5:1a:d1:be:dc:0d:1e:
         92:8f:ac:30:4d:5e:57:29:6b:83:b2:35:cc:9f:ee:10:7a:df:
         70:68:0b:f7:0c:60:58:3d:01:b7:f1:57:76:0c:d4:71:89:29:
         52:86:b4:f7:bc:ca:2f:73:64:11:3f:16:2c:3b:e0:62:cd:a8:
         64:3c:05:49:d3:f6:30:72:f1:ad:ae:b3:1a:60:96:9e:03:f8:
         99:af:a7:1f:93:9c:89:65:c1:d5:ed:2a:04:d3:a0:e8:32:9b:
         3b:72:8f:31:14:24:7d:00:55:82:66:b0:33:1e:61:56:e9:19:
         f4:ce:da:c6:ca:c8:87:70:f3:b9:d4:61:aa:49:ad:80:08:15:
         c4:09:ca:3f:fe:04:3e:2e:64:02:57:69:1c:29:ce:d4:57:24:
         ad:7d:8e:9f:53:bf:58:f2:83:42:b3:05:4a:fb:b9:80:26:2a:
         0e:dd:29:81:9d:83:12:fc:ee:10:40:b8:8b:8f:c6:40:22:bb:
         c9:48:76:5b:04:26:33:83:e4:30:20:1c:fa:9f:dd:80:c7:43:
         b9:e1:b4:f4:82:fd:b8:81:ff:ba:db:42:24:a3:3c:d7:33:1f:
         58:4e:c9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----