Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/33004ac6-3981-4ba2-8388-8e7335e8cb0b.roa
File:                     33004ac6-3981-4ba2-8388-8e7335e8cb0b.roa (raw, json)
Hash identifier:          zkMgRHD70faLq+KsBJgKuvFRiDsZsY3Yw1gp/lQRYI0=
Subject key identifier:   F4:34:13:BA:DB:0A:38:F6:81:19:4C:74:B7:42:4B:E1:19:ED:26:61
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       60E8C6FF431BC3AFE09F3D5A1CA23CB317C6B926
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/33004ac6-3981-4ba2-8388-8e7335e8cb0b.roa
Signing time:             Wed 07 Dec 2022 00:00:00 +0000
ROA not before:           Wed 07 Dec 2022 00:00:00 +0000
ROA not after:            Sat 10 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e8:c6:ff:43:1b:c3:af:e0:9f:3d:5a:1c:a2:3c:b3:17:c6:b9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  7 00:00:00 2022 GMT
            Not After : Dec 10 23:59:59 2022 GMT
        Subject: serialNumber=12a9a5f0018b598b8c8d3680f292066c7daaaa36c9ae4ece00d7c3829d9b1fd7, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:81:cc:cc:11:b5:36:ea:a4:68:a0:d7:29:26:
                    63:ce:83:11:36:b3:b0:4f:d0:54:89:80:81:e8:78:
                    64:0c:77:93:c6:55:81:1f:05:db:02:d9:a7:1b:e4:
                    47:d1:ee:ec:bd:02:93:61:1a:98:5e:1d:29:08:17:
                    d0:38:e1:84:97:5d:b5:53:7a:e9:38:a6:d4:d6:e8:
                    a5:f2:d9:4c:ca:55:d5:a1:98:4d:f5:0b:e5:a3:f1:
                    45:fc:ec:d8:4a:50:2a:6a:aa:32:5e:64:d8:f3:f8:
                    11:c4:be:1b:c6:7a:6e:f5:9c:7f:7a:3f:d9:5b:e0:
                    76:69:ca:2b:52:dc:da:aa:1e:34:c6:6e:92:2f:87:
                    9d:3a:fd:70:3f:bf:52:a6:b9:18:29:ec:65:1c:af:
                    af:9f:86:15:77:95:5a:44:f1:31:3f:2b:df:7f:75:
                    e4:4f:0d:4b:f3:79:3b:85:9b:23:7e:78:d0:df:ce:
                    f5:d3:bc:0a:f4:41:b8:9c:82:5f:28:d8:37:9f:ff:
                    63:0e:84:eb:b6:1a:f7:62:ee:ba:fc:fc:54:b9:1d:
                    64:6e:20:8e:ef:c8:f2:4b:3a:af:ea:f9:9a:a3:5d:
                    79:d6:70:3f:f4:9a:5e:8d:40:c7:d5:05:d2:78:c4:
                    bb:88:5c:31:ef:b8:89:58:ed:44:85:4f:49:41:23:
                    11:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:34:13:BA:DB:0A:38:F6:81:19:4C:74:B7:42:4B:E1:19:ED:26:61
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/33004ac6-3981-4ba2-8388-8e7335e8cb0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:61:88:27:f0:d3:e5:99:fc:f2:2e:4d:c9:6e:38:26:e5:c6:
         18:d5:c3:01:86:04:47:a3:5c:17:84:c5:77:db:1b:36:b8:e9:
         ad:72:33:12:13:ee:5b:9e:e0:e7:21:32:9b:fb:35:07:f7:d3:
         aa:7f:c0:de:16:fc:4d:75:93:6a:0e:4f:c8:14:20:f4:d1:80:
         52:cd:9a:7f:85:af:24:7e:3d:0d:67:61:25:af:44:09:ae:17:
         9c:be:20:ad:23:0a:91:b5:bd:22:22:4b:b0:49:f7:1b:dd:f9:
         f4:b0:67:89:11:eb:02:ca:ac:14:65:26:8f:e1:8a:87:4d:66:
         17:14:84:88:06:50:4b:1a:8a:63:01:91:26:2a:e4:92:b5:60:
         7a:4b:08:82:2a:e4:5c:95:82:8a:dc:f2:c5:79:97:f2:7a:55:
         ea:f1:94:e4:8e:95:3d:e0:33:98:23:16:86:3c:51:35:72:36:
         0a:09:97:6f:b1:2c:61:8d:a9:37:38:7a:17:43:25:37:63:fe:
         01:dd:62:ec:26:6c:cf:f6:f2:de:9f:c8:81:4e:2b:1c:0c:cf:
         89:2d:be:43:bb:d7:88:11:35:67:b5:69:f5:f7:32:bf:b4:79:
         98:d2:6f:7b:de:a2:6a:7a:5c:5a:5c:e5:42:bf:bd:bc:7a:23:
         c7:e0:b9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----