Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6a8b6072-3282-4226-acf0-3b57bbcbb907.roa
File:                     6a8b6072-3282-4226-acf0-3b57bbcbb907.roa (raw, json)
Hash identifier:          7NQskobMBuLGGDXqjhSQW1EHGxVILWoxWvCEh1aj47A=
Subject key identifier:   69:99:6B:57:EB:0E:0F:8A:6A:0B:F4:CE:22:95:0D:6F:27:A7:EE:21
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       75F44F49A49C3D9D7CD055FAC1BEFE6EB0518B99
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6a8b6072-3282-4226-acf0-3b57bbcbb907.roa
Signing time:             Sun 04 Dec 2022 00:00:00 +0000
ROA not before:           Sun 04 Dec 2022 00:00:00 +0000
ROA not after:            Wed 07 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f4:4f:49:a4:9c:3d:9d:7c:d0:55:fa:c1:be:fe:6e:b0:51:8b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  4 00:00:00 2022 GMT
            Not After : Dec  7 23:59:59 2022 GMT
        Subject: serialNumber=96c574985de1fc96e15d475b6bcbfa2f8dc52756c3c14f7411d158a01f51ea61, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:03:e7:5e:bc:2f:1d:53:99:3a:f6:03:cf:f1:
                    c7:15:16:b2:43:50:4e:98:c6:eb:17:ab:b1:bc:4b:
                    bf:8a:f8:2c:be:fb:1f:43:84:e3:d9:72:8e:ce:63:
                    8e:f5:ec:24:d0:2e:0c:36:90:60:ce:8d:6a:2c:5f:
                    2e:e2:7d:4a:c9:e3:09:33:94:95:65:29:96:d0:bf:
                    8a:78:c2:37:b8:4d:9d:96:d3:d2:d7:bf:29:42:6c:
                    13:86:0f:ec:54:c9:28:cc:7c:60:db:17:fa:85:d8:
                    1a:de:36:06:9c:c1:7f:90:b5:66:a5:90:f2:c7:83:
                    e7:9c:31:a0:f2:d7:93:c6:f0:4b:f7:2b:2e:e3:f6:
                    72:d0:84:04:8a:d8:c2:3e:02:cb:9d:e9:ad:c4:b2:
                    98:d6:54:15:6a:d7:74:a8:4a:e5:d7:e7:d6:f2:3d:
                    ab:ee:2a:3d:6f:a6:4f:53:ba:80:55:72:5c:86:8e:
                    51:a0:1f:51:84:ea:d0:c4:e1:14:1c:ac:12:7c:48:
                    54:2b:68:cf:06:ab:96:45:91:6e:54:8f:e3:05:60:
                    64:a5:9b:0e:e0:db:13:30:2e:6a:e0:ea:16:76:82:
                    5c:86:fa:0c:03:9a:cb:e3:62:88:8a:cd:a5:f5:91:
                    2c:98:73:90:f5:c7:47:aa:59:7f:2b:ad:29:06:f8:
                    d0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:99:6B:57:EB:0E:0F:8A:6A:0B:F4:CE:22:95:0D:6F:27:A7:EE:21
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6a8b6072-3282-4226-acf0-3b57bbcbb907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:0e:23:8e:e1:59:9a:d0:ed:84:ff:aa:8d:ec:6d:b5:26:74:
         3c:c5:98:7e:61:b1:42:29:49:2f:f3:29:aa:d2:61:49:d9:b8:
         fb:7d:6e:06:49:58:fc:7e:c7:20:c5:ca:9c:c8:b2:b5:36:99:
         2a:01:60:b1:37:99:02:eb:df:d6:3b:aa:7e:56:7e:3c:ae:bf:
         52:b0:b5:cf:0d:7c:57:e9:ad:b8:54:8c:92:33:34:50:0d:eb:
         8a:b5:40:bb:9a:e4:30:5f:5e:9a:0d:b2:e8:cf:d3:09:a4:0d:
         f7:c3:8d:54:8d:23:81:9b:4f:0e:fd:28:11:40:f4:f8:55:ef:
         26:e0:e5:a2:74:72:0f:f6:21:cf:00:65:d1:2f:f4:f2:14:d6:
         0b:a8:2b:71:7a:c0:3d:d8:7d:ca:08:bb:9b:14:15:5d:ac:e4:
         36:3b:a5:79:dd:9f:48:a0:3a:69:4f:40:2e:26:a1:24:69:85:
         5c:f1:8e:2a:4d:19:fc:30:29:f2:e8:10:31:56:ad:79:48:f2:
         8d:0b:fd:42:da:d8:0e:56:23:d5:fe:32:f6:50:d3:ea:7a:1c:
         e8:4e:fb:70:48:c0:83:1c:f5:d0:3a:a8:df:a3:df:b6:86:51:
         e7:7f:6e:93:d1:e4:bc:ff:49:14:ff:5a:9b:b8:49:5d:96:1c:
         18:e4:15:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----