Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3c24a26c-2ec0-4af4-ab16-69028a32e868.roa
File:                     3c24a26c-2ec0-4af4-ab16-69028a32e868.roa (raw, json)
Hash identifier:          jozUYwtIHC57NdrOyw5T4IHHNP6KupxQc9vYIreeV4M=
Subject key identifier:   59:F7:7D:B0:57:3E:BC:7F:10:3F:34:77:E9:D8:52:28:1C:1A:CA:20
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6322DAE0B43DB49E27862D74B1D861E3D19A1617
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3c24a26c-2ec0-4af4-ab16-69028a32e868.roa
Signing time:             Wed 19 Oct 2022 00:00:00 +0000
ROA not before:           Wed 19 Oct 2022 00:00:00 +0000
ROA not after:            Sat 22 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:22:da:e0:b4:3d:b4:9e:27:86:2d:74:b1:d8:61:e3:d1:9a:16:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 19 00:00:00 2022 GMT
            Not After : Oct 22 23:59:59 2022 GMT
        Subject: serialNumber=123dc888f7134a75dc89ad7dc9f30c9b8f653b88bc552968e6b53acb8e136e35, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:6e:85:0e:bc:27:e5:6b:88:3f:33:d2:7e:
                    82:a4:69:b0:1b:a9:13:a0:59:bd:cb:52:11:45:44:
                    6b:c4:f6:3f:e0:b6:ea:47:4f:83:0f:e0:07:5a:4e:
                    14:24:e1:84:84:09:ae:9d:ae:b3:71:82:e0:50:64:
                    05:31:bd:47:2f:de:af:68:4c:c2:fa:60:13:86:db:
                    9b:c6:63:30:23:24:ac:5d:29:70:7e:79:d7:27:55:
                    9f:58:e0:19:52:d4:48:19:2e:d5:9c:02:32:7d:cb:
                    94:e1:b0:03:93:08:a7:62:b4:e3:79:29:ce:fe:1e:
                    82:ec:74:27:dc:76:24:02:73:cf:a0:98:33:c1:00:
                    17:1d:9f:8d:f9:7a:02:e7:6a:6d:e7:4f:52:06:a1:
                    53:5b:d0:3c:63:ef:a1:9d:c5:3b:5e:75:45:5c:bc:
                    6b:f1:a9:83:83:a9:30:88:12:49:67:51:de:f5:38:
                    2b:d4:07:c3:85:33:5c:6b:7b:f0:09:8e:25:09:2b:
                    26:6d:7d:f9:96:2a:6b:c2:77:6c:17:8c:b2:99:23:
                    cb:eb:98:c7:78:79:cc:90:35:b7:64:94:0c:8f:96:
                    f8:f1:0a:b0:87:e3:b7:8d:82:97:85:c9:ef:94:2a:
                    84:b2:72:32:f0:dd:37:70:52:20:7b:cc:57:24:ad:
                    b6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F7:7D:B0:57:3E:BC:7F:10:3F:34:77:E9:D8:52:28:1C:1A:CA:20
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3c24a26c-2ec0-4af4-ab16-69028a32e868.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:7e:49:0f:6c:2b:1a:64:a7:cd:75:90:f6:00:0b:2f:e6:2c:
         70:f0:10:27:fe:5a:81:18:7b:94:b6:9a:98:b6:ab:be:1a:ab:
         64:f1:b8:24:07:a0:88:39:a0:66:73:da:90:de:8f:9b:6d:b8:
         c8:98:a6:24:6f:62:33:54:20:00:96:ab:b8:3e:f2:1e:ac:04:
         37:85:8c:c4:b1:a6:87:3a:ee:87:ba:82:9a:56:9b:20:4e:70:
         65:0f:78:62:c4:19:ec:e2:33:f8:48:2b:df:88:b6:1a:f4:0d:
         fd:b9:73:96:73:c3:f5:0f:20:40:92:80:71:3c:f1:a2:c0:ee:
         c5:01:15:81:2e:be:ff:1a:92:60:88:37:f3:34:fb:92:1d:72:
         be:06:0a:fa:66:33:b5:9e:95:40:50:02:cb:a0:7b:a2:5d:d3:
         13:cb:fd:24:5a:bf:f1:b1:49:8e:d0:03:f6:52:87:0e:59:ad:
         cb:fc:bf:7a:b4:ff:05:8f:94:5a:67:62:c1:9b:0b:57:d3:43:
         14:ca:a6:eb:9c:6b:5c:c5:df:ff:c7:79:0e:bc:1e:d2:b7:68:
         b4:38:00:f0:90:d6:2d:b7:09:88:1c:49:28:9c:e1:9b:e7:af:
         43:e4:50:0e:17:de:c3:ea:4d:1b:3e:89:04:84:21:ad:a3:54:
         a7:49:1d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----