Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3f4b7ea7-d9b5-4d3a-b49c-3d2715b5e952.roa
File:                     3f4b7ea7-d9b5-4d3a-b49c-3d2715b5e952.roa (raw, json)
Hash identifier:          OuMw1PA1r/+/qcEfrCVZ38d9FlAdI6WG2m53TvuHCdA=
Subject key identifier:   D4:80:97:E6:A3:93:AF:CA:53:20:63:5C:B8:4C:7E:6B:E3:F1:5F:BF
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2D196973031B885C1B4C9A5FBF8117299A3A8D81
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3f4b7ea7-d9b5-4d3a-b49c-3d2715b5e952.roa
Signing time:             Tue 06 Dec 2022 00:00:00 +0000
ROA not before:           Tue 06 Dec 2022 00:00:00 +0000
ROA not after:            Fri 09 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:19:69:73:03:1b:88:5c:1b:4c:9a:5f:bf:81:17:29:9a:3a:8d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  6 00:00:00 2022 GMT
            Not After : Dec  9 23:59:59 2022 GMT
        Subject: serialNumber=50f196a701aa9a3e1ca7115d04da1b72c4c2934b0e46504492a4307824d60322, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6d:d8:1c:72:eb:e9:1d:22:a6:82:ba:15:82:
                    33:a7:cf:07:21:ff:bf:33:55:8e:3e:49:66:d4:fd:
                    0f:ee:ad:99:00:7f:e8:33:4f:bb:fd:f7:19:81:6e:
                    bd:d2:86:80:ef:61:04:83:b9:cc:ca:65:5b:13:8c:
                    cc:5c:01:02:9e:76:07:ea:42:6c:6e:c3:43:c4:fa:
                    bd:00:55:95:f3:fe:82:d7:65:56:a5:10:7c:49:59:
                    ab:9b:bc:8b:0e:9e:bc:8a:ca:64:9c:53:6f:d1:00:
                    83:0f:d3:c5:00:cb:6a:00:1e:95:41:36:d3:71:43:
                    9f:9a:ad:c0:d7:03:e0:83:8b:dd:4c:f6:f2:ac:6e:
                    7e:f3:5f:7b:89:1b:d5:9d:26:e8:eb:6f:04:24:ad:
                    df:3c:a3:45:09:44:09:b8:bd:c0:fa:44:1a:84:39:
                    09:5d:d4:94:29:4e:3c:f0:e8:a4:f9:cb:06:33:e1:
                    b5:82:b5:db:a2:c3:0a:5e:b9:be:9f:73:7a:ac:80:
                    46:97:a0:6d:21:58:ff:0d:1a:74:3f:64:68:ca:0e:
                    1a:66:86:8b:06:6f:ab:77:bd:6f:c0:2b:8e:12:2e:
                    40:af:2a:49:c5:a8:d0:65:57:e4:39:96:a5:f0:06:
                    c9:a4:db:bf:12:bc:a6:dc:f3:5b:cd:e9:d7:ed:95:
                    2a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:80:97:E6:A3:93:AF:CA:53:20:63:5C:B8:4C:7E:6B:E3:F1:5F:BF
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3f4b7ea7-d9b5-4d3a-b49c-3d2715b5e952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:c0:fe:39:32:36:3d:cb:7c:86:be:d3:4d:05:cb:ff:c4:6d:
         ba:4f:ff:1a:8a:b0:7d:46:b1:0b:dc:6a:c5:80:26:c0:42:ab:
         da:2d:63:38:c0:79:21:c2:c1:38:09:b0:cd:3a:d2:2f:96:7a:
         b6:93:e7:4e:91:34:26:f2:e3:29:18:50:2f:79:3a:85:7d:96:
         42:55:83:f8:1f:1d:7b:58:69:04:16:a8:44:d4:54:cb:4c:94:
         e2:b6:3a:8b:79:a3:ca:f6:99:07:05:12:a9:ad:ae:80:e5:3a:
         f2:47:0c:cc:1d:da:98:c1:e3:3e:a0:86:4c:4b:d6:c4:ec:22:
         e8:d1:05:fc:38:57:d5:b3:44:f8:a0:c7:f0:9e:32:24:bf:cc:
         0e:77:1c:16:93:61:34:0b:16:f6:a5:ef:60:19:2b:b6:0e:e7:
         c3:eb:39:bf:73:de:82:27:91:74:67:32:1f:93:57:63:cf:6b:
         dc:31:9b:da:f0:35:e6:13:1a:92:b5:75:8a:f6:21:82:8c:5d:
         15:f1:9f:e6:e0:d2:c0:b6:43:c5:62:b2:78:9c:a9:82:aa:50:
         6d:36:2a:f1:b5:4e:96:3b:89:d1:47:d3:84:1f:e6:2d:31:77:
         63:e1:17:53:f8:82:5b:f9:bc:b5:ee:83:0a:76:ee:33:95:ef:
         36:87:66:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----