Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7378f31c-0293-4c1b-867d-11ab1a349ee4.roa
File:                     7378f31c-0293-4c1b-867d-11ab1a349ee4.roa (raw, json)
Hash identifier:          fBh4JMOiVdh26OchXTGtaXrVoMCH0Y800ruoCt5WJCg=
Subject key identifier:   75:43:A5:8B:17:0E:BE:D2:5C:F9:BB:8D:96:1D:27:FA:1B:BD:28:06
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       67A0963839B67076345238EB292923F75BD02DE4
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7378f31c-0293-4c1b-867d-11ab1a349ee4.roa
Signing time:             Thu 08 Dec 2022 00:00:00 +0000
ROA not before:           Thu 08 Dec 2022 00:00:00 +0000
ROA not after:            Sun 11 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a0:96:38:39:b6:70:76:34:52:38:eb:29:29:23:f7:5b:d0:2d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  8 00:00:00 2022 GMT
            Not After : Dec 11 23:59:59 2022 GMT
        Subject: serialNumber=b66f2784f31c6fb1806c792e642e0f9646a2fa09a552b959de73b54146807893, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:64:cf:16:46:8d:1a:e5:98:a8:09:fe:42:71:
                    93:3f:9a:61:12:a2:83:e2:16:03:69:35:16:24:4b:
                    65:e8:85:bd:c1:a7:a0:78:f7:16:a7:6b:f2:cf:0a:
                    f8:74:2d:e7:d7:9b:2b:57:0a:de:d3:5c:97:d3:07:
                    e6:ad:bb:ae:50:1e:e5:d6:08:ed:f7:da:1b:74:50:
                    6c:e7:6d:7d:a9:2c:57:64:a0:b7:20:b8:4b:f8:3a:
                    45:63:1c:4d:b6:54:95:5c:85:e7:80:78:f6:04:50:
                    a4:1d:ec:f2:1d:ac:8f:29:25:87:f5:e0:b8:eb:92:
                    2b:5b:67:cc:e1:25:b1:0b:18:48:bf:c5:a7:c3:01:
                    e9:c9:77:77:27:62:61:9d:94:c6:1b:91:89:a5:51:
                    fe:7b:c5:60:9e:79:11:1d:c6:a2:91:9c:0a:71:3f:
                    d8:27:b0:b9:b1:ec:86:b9:ee:e7:7b:50:34:64:4a:
                    a2:8c:9e:e8:90:34:2d:73:0c:c6:57:ae:eb:4f:ba:
                    8c:73:a3:13:5d:31:7e:d4:f8:53:46:f9:9a:29:a5:
                    57:87:45:b3:be:2f:13:61:8f:f5:2f:42:5d:02:9f:
                    83:b0:63:e3:3d:c9:b2:88:77:af:7d:f9:44:ed:67:
                    40:a2:a7:75:e3:50:f7:cc:9b:50:5a:59:f4:fe:f1:
                    60:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:43:A5:8B:17:0E:BE:D2:5C:F9:BB:8D:96:1D:27:FA:1B:BD:28:06
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7378f31c-0293-4c1b-867d-11ab1a349ee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:53:2b:44:a9:03:48:fa:a5:cf:e6:28:42:a7:00:58:22:fe:
         f7:bb:8e:62:b1:41:45:01:9d:c1:70:01:bb:40:18:dd:eb:bd:
         f0:6c:f1:25:94:4b:9b:12:08:e6:4b:85:1e:2b:da:4d:e1:59:
         91:7e:4c:eb:70:00:d3:34:da:ac:de:38:a1:c5:8b:d0:cf:29:
         b9:55:1b:07:20:88:b7:85:1d:d5:52:f5:3c:9b:1c:3f:f7:b0:
         c1:09:52:4f:42:c6:23:4b:e8:90:00:f6:19:96:c9:fa:e5:4d:
         be:46:56:ed:52:fe:bf:74:9e:94:e8:d1:01:5e:6b:5c:65:09:
         95:e9:89:20:1b:ed:cd:8e:47:cc:bd:53:a4:a7:40:b2:a2:7f:
         6b:3c:25:82:09:49:46:24:62:8b:6a:44:30:0d:d1:4e:42:3b:
         c8:7d:e0:a7:14:c0:e6:0b:be:e5:ea:aa:1f:2c:1f:71:f2:d5:
         9b:10:6d:fd:93:96:03:ec:28:1b:46:df:ce:f6:c0:38:b4:7b:
         1d:81:04:5f:0e:bf:94:92:9d:15:ed:54:a9:e2:8a:8b:58:4e:
         f5:58:9a:07:cd:09:ab:a5:4a:40:3e:2c:61:31:58:e2:a8:8f:
         e8:a7:47:52:68:fb:8f:54:ee:55:0d:72:d5:eb:a4:74:bc:2f:
         14:c5:43:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----