Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/336c7559-625f-4bed-93b0-4f98ad6eba07.roa
File:                     336c7559-625f-4bed-93b0-4f98ad6eba07.roa (raw, json)
Hash identifier:          8Zmu72An+co9xWGiEAwEi6S43HF7JQEWyL0YbZylWzM=
Subject key identifier:   FF:14:93:E8:CC:BE:6D:71:51:ED:1A:AF:8F:62:63:51:3B:9A:87:81
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6EDCDD8CFC53E6C747040C8D2814AE9937C5B4D4
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/336c7559-625f-4bed-93b0-4f98ad6eba07.roa
Signing time:             Wed 07 Dec 2022 00:00:00 +0000
ROA not before:           Wed 07 Dec 2022 00:00:00 +0000
ROA not after:            Sat 10 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:dc:dd:8c:fc:53:e6:c7:47:04:0c:8d:28:14:ae:99:37:c5:b4:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  7 00:00:00 2022 GMT
            Not After : Dec 10 23:59:59 2022 GMT
        Subject: serialNumber=590cf0c2be2964109995662b0055451f5bda2ed75f3c89ebd5271b3e01ea000f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:94:5c:21:7b:cc:36:e9:e3:3d:9d:86:1b:
                    a8:dc:28:32:3d:f9:39:c2:1f:b4:a8:3d:bb:18:c3:
                    1c:38:26:81:64:8b:af:da:55:16:31:f6:44:1f:59:
                    06:ff:de:c7:7f:e3:41:e3:2d:b7:48:ca:f7:7b:fd:
                    14:de:a0:1d:b3:e9:5b:11:b1:e9:e3:ae:31:b0:b2:
                    47:a0:16:06:d0:b2:84:c0:82:d1:d1:45:c3:79:23:
                    59:bb:f9:1b:50:44:f1:eb:04:77:14:df:97:33:f7:
                    8b:4a:7c:77:a1:24:22:10:2f:a2:dd:13:ad:d1:3b:
                    a9:b9:4c:b9:56:88:43:5f:ca:e6:58:7a:83:1a:e0:
                    ac:b5:c4:2c:da:71:8c:92:64:ff:17:1d:b3:ee:f4:
                    ce:d5:58:5b:39:7d:49:24:1a:3c:d0:a1:62:0a:11:
                    48:53:9d:e9:c7:78:6b:9a:2c:21:18:08:82:33:0d:
                    fc:40:c9:54:51:4c:c7:be:b7:58:6d:04:98:96:e7:
                    13:47:6b:0a:ea:80:11:37:26:86:f1:57:03:f1:f0:
                    5e:c2:69:a6:39:7a:8b:ec:9e:2a:77:c2:87:35:c9:
                    ec:9e:4f:36:f4:35:dd:4e:6e:f0:c4:b4:f8:a8:2f:
                    74:26:7c:62:db:d6:01:4c:35:1c:e7:df:3a:f5:0e:
                    06:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:14:93:E8:CC:BE:6D:71:51:ED:1A:AF:8F:62:63:51:3B:9A:87:81
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/336c7559-625f-4bed-93b0-4f98ad6eba07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:15:5a:10:06:02:c0:65:9f:77:1a:3a:05:6f:a1:d1:a6:fc:
         a3:e1:07:c4:57:91:c8:40:1b:00:01:13:29:43:16:17:6c:f8:
         72:23:fd:88:45:b9:34:06:eb:14:d2:1d:bd:25:56:87:08:f8:
         e6:8c:29:b0:62:c8:66:0f:98:c1:09:c3:2b:11:07:b9:03:18:
         5d:41:a1:22:c9:47:fd:5a:e8:b0:6d:5b:84:21:0b:c9:8e:84:
         98:3a:44:fa:4c:15:cc:c4:e6:34:62:f8:6e:b4:e1:de:2b:6e:
         cb:48:aa:5d:c7:18:5c:4a:9e:10:65:71:e9:31:2a:de:49:34:
         e9:37:a6:cd:3c:c7:e1:46:31:de:bb:76:88:c9:d9:54:17:71:
         79:1a:c9:95:27:84:c5:b4:54:8d:a3:d8:d2:85:cb:d0:26:e0:
         51:28:e1:1e:34:8f:13:46:98:a1:3b:c5:fd:39:9b:7f:7a:3f:
         cf:7d:74:29:3f:b4:65:d3:0d:55:6c:c8:5d:cc:d6:6d:94:6e:
         e9:2a:89:f5:be:6a:d6:4a:c0:97:56:2a:54:05:52:b0:59:3d:
         51:f3:3e:0d:d8:7b:0e:79:93:48:9a:14:b6:e0:11:47:51:71:
         4d:cb:9b:9d:ea:01:2f:72:a9:bc:47:68:01:65:9f:31:02:85:
         e0:7e:c4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----