Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/49e93baa-760c-4660-a730-12a8e2fd4483.roa
File:                     49e93baa-760c-4660-a730-12a8e2fd4483.roa (raw, json)
Hash identifier:          X97KiGE39HawnT8fiP3JOjPVjjo7w3HzFEdixl5v+b4=
Subject key identifier:   FB:E3:52:27:B6:12:76:A4:A5:1C:2C:A7:B2:C8:92:0F:E8:E2:25:97
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       50C42DE87B7BDD5BD88FE19E21C1B1AF25FB26E0
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/49e93baa-760c-4660-a730-12a8e2fd4483.roa
Signing time:             Thu 15 Dec 2022 00:00:00 +0000
ROA not before:           Thu 15 Dec 2022 00:00:00 +0000
ROA not after:            Sun 18 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c4:2d:e8:7b:7b:dd:5b:d8:8f:e1:9e:21:c1:b1:af:25:fb:26:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 15 00:00:00 2022 GMT
            Not After : Dec 18 23:59:59 2022 GMT
        Subject: serialNumber=d1e3c347445d9e357f85fed837324608bfdce2f4914d0f5f773f2a5b667076ef, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d8:6f:20:74:18:3a:ab:35:91:cb:62:a1:1e:
                    c4:bf:42:50:fe:33:a3:9e:22:ab:21:4b:43:f8:63:
                    11:2a:61:9f:47:f1:e8:19:40:9d:14:8f:94:a2:00:
                    34:3f:f4:ee:2a:58:f8:3e:41:04:9e:3d:f4:9a:c8:
                    71:41:12:fd:10:ac:8e:e8:41:65:30:3f:18:fe:7b:
                    33:b0:81:34:ab:88:6b:5b:5c:7a:f2:8d:42:f5:41:
                    f2:84:29:b6:e9:af:a5:b3:93:c0:fa:eb:19:da:89:
                    d3:8c:3b:d3:07:eb:b3:36:9a:d6:79:56:ac:51:e0:
                    34:a3:34:25:8a:0c:13:35:2f:16:ee:2e:7a:aa:4e:
                    e2:d5:52:9e:f2:76:cd:84:87:8e:b5:3d:b2:69:9f:
                    c3:0b:30:27:ce:4f:ed:51:f9:c3:33:17:22:67:5b:
                    63:fb:69:8a:8a:54:8b:f0:d3:32:d4:cd:4c:86:ae:
                    84:69:70:c7:b5:30:76:0e:ea:47:07:f9:c6:15:4b:
                    a6:b1:92:2a:12:f5:29:6c:3b:31:05:7a:39:c7:3a:
                    72:cd:01:c8:92:25:20:06:76:36:3e:e6:f3:a4:d4:
                    0e:84:a7:53:70:c3:e1:d5:14:43:eb:86:ce:78:73:
                    06:ea:98:6f:3c:86:bf:4e:dc:b1:2d:1f:db:80:50:
                    a5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E3:52:27:B6:12:76:A4:A5:1C:2C:A7:B2:C8:92:0F:E8:E2:25:97
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/49e93baa-760c-4660-a730-12a8e2fd4483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:4f:98:49:95:1b:89:6c:18:f3:5a:5e:8b:11:65:ce:5c:3a:
         12:6d:3a:04:87:25:a1:7e:70:42:aa:30:5a:a7:f9:1e:3e:b4:
         2d:02:07:cd:a4:f5:eb:f6:86:dc:4a:88:51:70:f5:d9:a0:89:
         6a:ae:ac:06:ec:45:7e:48:49:9f:9c:ce:70:9f:ae:6b:b5:07:
         ca:01:24:74:89:cf:b9:34:7a:24:ca:60:b0:7a:a9:af:c3:c7:
         80:3f:8b:c9:06:5c:01:78:e7:d6:13:db:be:83:b6:81:07:b7:
         0a:8d:9a:b3:88:0f:eb:89:4b:82:6c:80:59:93:1f:6b:53:8a:
         b1:90:70:49:5b:5f:62:1e:4b:16:8f:4d:a7:73:ff:50:78:6b:
         07:c3:9a:cb:b2:b2:ab:91:29:89:35:a0:4a:6c:f3:fc:ee:0e:
         1f:68:0e:1d:9e:41:ac:81:95:f5:26:bd:bf:a6:03:e4:31:79:
         68:a5:84:96:6f:6b:11:b7:8b:7e:79:63:f6:cc:f9:41:6a:d4:
         f0:ff:87:dd:cc:22:17:b6:27:3d:3f:84:6e:1a:31:58:20:46:
         2a:a9:e0:cb:32:93:13:ab:24:22:a1:c3:fa:3e:e1:26:d8:76:
         02:aa:d9:7e:6c:ac:96:cf:02:fc:67:fe:69:6c:35:e7:d5:67:
         77:a3:e4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----