Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/75f672a1-a344-4d82-a9ab-d225cc274e95.roa
File:                     75f672a1-a344-4d82-a9ab-d225cc274e95.roa (raw, json)
Hash identifier:          M+koyGbC6WSB4GiBRdCO1mkcwTOQAyvoFqQ8uTCPKrk=
Subject key identifier:   AB:A5:80:FE:E3:71:FC:AB:21:E8:F1:BC:9B:C2:3F:98:C2:C4:72:C4
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6FA13AC8E19EB11B3B16E7C6ABFD2635C7900991
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/75f672a1-a344-4d82-a9ab-d225cc274e95.roa
Signing time:             Fri 25 Nov 2022 00:00:00 +0000
ROA not before:           Fri 25 Nov 2022 00:00:00 +0000
ROA not after:            Mon 28 Nov 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a1:3a:c8:e1:9e:b1:1b:3b:16:e7:c6:ab:fd:26:35:c7:90:09:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Nov 25 00:00:00 2022 GMT
            Not After : Nov 28 23:59:59 2022 GMT
        Subject: serialNumber=3a9ca025086afedeebff3031a9f6954c8f8ef4403f4bd6415294533982c03da2, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:17:7c:af:60:02:53:82:38:6d:d4:c5:19:dd:
                    14:00:4e:04:c9:65:1f:aa:a9:60:bc:fc:f2:71:99:
                    9d:a7:68:b0:ed:b2:68:8e:4f:be:9a:c2:ec:f7:11:
                    39:bd:ae:18:db:02:e5:d9:4f:f2:69:87:ec:f1:75:
                    d7:11:b2:b8:8b:1d:05:6b:c7:58:9c:dd:3e:4c:4b:
                    53:70:84:4d:6b:32:90:c9:79:66:78:57:cc:a1:e0:
                    72:30:7d:96:ec:d9:bb:82:b1:1e:cb:4e:12:11:e1:
                    0f:41:c2:c6:20:0c:77:9f:d7:b3:93:0e:ab:c0:2c:
                    9a:06:e8:79:69:b8:92:c6:70:32:ed:88:ef:91:ed:
                    25:14:36:a2:07:84:df:b9:31:73:78:fa:4f:4f:b6:
                    f7:81:bd:56:db:51:ee:27:81:6f:30:74:f9:b4:a9:
                    f8:70:98:34:24:55:4a:e5:c8:e2:62:3b:3f:66:f1:
                    26:d6:3c:94:12:df:d0:88:71:05:da:03:4e:2a:08:
                    d8:a0:e4:27:30:9d:d8:53:a0:d4:92:b1:16:b9:bf:
                    79:36:d9:22:7e:31:72:13:09:9a:7a:b9:a4:cb:cb:
                    13:67:7d:84:95:65:06:d6:2a:e2:46:20:01:a9:fc:
                    7b:fa:f0:84:73:7c:6a:a8:78:71:70:ad:d7:5e:41:
                    59:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A5:80:FE:E3:71:FC:AB:21:E8:F1:BC:9B:C2:3F:98:C2:C4:72:C4
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/75f672a1-a344-4d82-a9ab-d225cc274e95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:6b:12:0e:6b:41:55:b1:3e:fa:e8:6f:a1:bf:8a:ba:b9:f6:
         ea:72:c9:ae:9a:da:f7:d2:46:53:91:0f:ac:b2:f3:1e:19:b9:
         9c:07:cd:f6:5f:91:55:7d:78:30:92:d6:f8:ad:f6:f7:10:a4:
         aa:db:a4:86:02:ba:c1:36:31:48:b9:c8:e3:01:72:2f:a0:63:
         8d:9d:a5:f2:97:7a:82:35:88:92:31:d2:91:1a:d2:9c:ae:8b:
         cc:49:35:e5:45:7f:9b:ff:d3:70:84:b1:51:81:88:72:77:77:
         d4:d8:1a:64:f0:f0:ad:cd:6d:b1:7c:0d:64:02:d8:dd:83:14:
         88:95:25:c8:64:a3:82:f1:c4:a3:c4:bb:0b:af:c7:58:c0:9d:
         a8:53:ef:d7:40:4d:a6:9d:d8:a8:c5:be:55:81:ac:f8:c1:9a:
         b9:f0:49:4c:e5:fd:9c:ca:0e:fb:8a:5d:e5:c9:58:41:14:aa:
         4a:58:6a:18:2c:54:37:9f:c4:85:95:7d:83:cf:c6:5e:33:e1:
         9d:2f:e7:2b:90:f0:fe:b0:55:2b:e3:ef:4b:80:83:1a:17:10:
         cf:5d:bd:71:53:c3:fa:5e:81:40:a6:2b:5d:4e:d2:5d:46:3b:
         d5:be:b3:a9:60:ae:d5:84:c9:9d:f9:8c:f6:9d:9e:6f:ff:af:
         e9:34:53:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----