Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/64b8491a-8254-48f8-8990-46dfa6f818e6.roa
File:                     64b8491a-8254-48f8-8990-46dfa6f818e6.roa (raw, json)
Hash identifier:          2AmcYt7UbFLVuiZkkpDobxHm61RZVUybAMH8CZVvyQ0=
Subject key identifier:   79:89:21:BF:5E:03:A4:8C:38:E7:66:7E:3F:30:E7:DF:A7:7B:F9:F4
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2349D6127E2AFF2E4CB8FEA53629CF6C43AF8567
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/64b8491a-8254-48f8-8990-46dfa6f818e6.roa
Signing time:             Mon 19 Dec 2022 00:00:00 +0000
ROA not before:           Mon 19 Dec 2022 00:00:00 +0000
ROA not after:            Thu 22 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:49:d6:12:7e:2a:ff:2e:4c:b8:fe:a5:36:29:cf:6c:43:af:85:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 19 00:00:00 2022 GMT
            Not After : Dec 22 23:59:59 2022 GMT
        Subject: serialNumber=f7512d4583647f869a59ee0208072c9da2bd0a589e0fc1d8af8405a21c0c6e83, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cf:6a:cb:97:33:09:ce:69:97:d2:bf:77:0c:
                    29:fc:d0:53:71:84:7a:36:bf:ac:76:15:9d:1d:51:
                    6e:89:f9:15:33:df:01:ea:4e:e8:99:06:2a:21:7a:
                    f0:58:3e:c5:e5:48:a5:22:b6:68:6c:e9:2a:a5:32:
                    f3:1c:8e:6e:19:ad:c7:57:5e:e2:37:80:14:09:69:
                    5b:c9:c1:0d:f1:ee:1f:56:ab:f8:58:ae:fb:ba:23:
                    4a:65:4a:a6:bb:6b:63:55:f6:44:7d:a8:6a:f5:ec:
                    75:91:3d:50:21:d9:27:df:4b:71:27:cc:b8:9d:1b:
                    16:90:31:ab:fc:28:2e:12:dc:33:f9:b5:a3:70:c2:
                    db:17:db:28:9b:2f:a3:ee:de:07:4c:ff:fa:ff:6d:
                    fc:73:dd:2a:ee:46:80:d5:32:b9:df:e3:1d:a4:3f:
                    be:a2:3d:f8:26:73:c0:30:45:02:82:7c:f6:d4:b2:
                    71:c0:15:13:8b:da:b6:65:35:d2:42:44:cc:84:73:
                    0c:db:ae:a3:56:3b:a9:08:d5:29:18:54:89:34:98:
                    a5:76:9d:c8:a9:f9:f5:95:7d:4d:08:a1:03:24:31:
                    0a:18:a6:e8:83:7f:77:5d:1e:01:6d:a1:32:d1:9f:
                    30:e6:c7:11:1f:b7:11:11:e8:3c:ea:20:18:de:46:
                    5a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:89:21:BF:5E:03:A4:8C:38:E7:66:7E:3F:30:E7:DF:A7:7B:F9:F4
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/64b8491a-8254-48f8-8990-46dfa6f818e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:35:86:01:85:c6:a1:2c:8e:16:fc:02:92:ff:a1:08:9d:88:
         75:e2:5c:5e:0c:5a:00:ec:b4:da:1d:e7:74:a9:24:19:01:0c:
         6b:f2:c9:59:a2:7c:6b:ce:37:79:e8:2d:91:f7:23:80:bf:fd:
         91:24:16:bd:af:6f:cd:d9:28:cd:b9:d7:5f:ca:c6:be:2b:3b:
         c2:f1:69:bd:ee:28:22:39:72:5f:ae:19:8f:07:08:f7:e2:7a:
         1b:69:75:2c:03:2d:b3:74:cc:5a:5e:ed:7e:6c:8b:e8:1c:f2:
         13:59:e2:a4:f1:cc:81:7d:8e:2d:04:e5:5d:c8:f5:0d:11:35:
         36:57:d1:91:9e:a3:c6:4a:d1:a5:fc:fa:d5:37:47:ca:98:4d:
         e5:36:87:6b:32:37:6f:38:94:43:3c:8e:d7:a2:82:f1:d6:6f:
         ef:89:1e:a1:60:33:a4:be:6a:f5:f6:0f:9b:bf:2f:d0:b3:54:
         83:03:68:71:34:d3:ab:b0:36:b6:cb:81:98:d0:86:a8:bb:ea:
         17:d3:4e:92:92:d7:86:cd:66:a5:38:d1:62:a2:5d:4b:5a:61:
         2b:64:83:fd:31:67:8b:e7:f1:07:de:d8:50:43:68:a6:f2:1e:
         b4:96:84:16:4f:35:27:7b:4e:41:40:2c:c6:33:ba:06:80:0c:
         39:6d:af:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----