Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/77c03791-da1b-463b-b91d-8663e766b49e.roa
File:                     77c03791-da1b-463b-b91d-8663e766b49e.roa (raw, json)
Hash identifier:          6y74drxEKZbxebYKDBqR/41SKTFV8wpfmV5VpY9L0LQ=
Subject key identifier:   54:5E:F5:97:DA:DC:4B:11:A9:14:D0:74:3E:13:F3:A0:01:54:A6:A4
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       78B28023EF1434EBF09A8A2802AD5C608798A9F3
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/77c03791-da1b-463b-b91d-8663e766b49e.roa
Signing time:             Sun 04 Dec 2022 00:00:00 +0000
ROA not before:           Sun 04 Dec 2022 00:00:00 +0000
ROA not after:            Wed 07 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b2:80:23:ef:14:34:eb:f0:9a:8a:28:02:ad:5c:60:87:98:a9:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  4 00:00:00 2022 GMT
            Not After : Dec  7 23:59:59 2022 GMT
        Subject: serialNumber=d374847c808771f73ad5f4b8c8838baffc15570365b188a9a80b27d08a572e95, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bf:81:3d:bd:d3:7f:d7:1f:c1:f6:c4:6b:18:
                    82:0f:44:ef:7a:3c:c2:c6:f9:f2:20:e2:3e:a5:90:
                    2a:e3:d9:33:14:36:b0:b8:59:98:64:d8:fe:f9:ac:
                    1e:13:5e:f0:31:8c:26:0e:26:7c:96:c1:c3:ea:23:
                    2d:9e:60:ca:ea:cd:bb:67:e7:47:37:7d:21:51:b6:
                    90:1f:1d:c2:da:91:7b:e7:42:32:1b:73:dd:d7:1e:
                    08:ea:4f:c7:c2:56:63:01:6b:c5:81:47:9f:5f:ca:
                    98:4d:ec:ef:48:06:f7:56:9c:01:d1:7f:5f:66:dd:
                    60:aa:ae:c8:09:a3:1d:a8:0d:a8:d5:60:d2:62:4b:
                    ce:f2:26:fd:95:59:0f:8d:09:8c:30:e1:b1:4d:83:
                    bd:cd:2d:12:d5:38:ce:89:c3:07:00:60:47:f5:47:
                    c3:88:83:b0:0b:0b:7f:dc:2c:8a:d5:bb:5c:63:57:
                    81:50:1f:49:b0:c2:29:24:4d:43:c9:d3:a1:4d:8c:
                    57:7d:7f:72:82:b8:1e:06:e8:4e:2f:59:1c:90:98:
                    b7:6a:24:e3:78:c3:be:31:ca:26:b3:a2:9b:38:6f:
                    a1:6d:e3:62:1e:c2:03:47:90:bf:4d:8b:b9:db:09:
                    ec:5c:cf:86:76:89:23:78:8b:25:2a:97:94:75:56:
                    1c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5E:F5:97:DA:DC:4B:11:A9:14:D0:74:3E:13:F3:A0:01:54:A6:A4
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/77c03791-da1b-463b-b91d-8663e766b49e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:b5:9c:ba:90:18:c0:d1:71:f4:12:10:62:ad:b5:09:b8:8d:
         75:48:a7:4d:45:44:6e:04:16:73:52:76:c9:80:84:01:39:b5:
         a4:5c:b1:e7:c7:44:57:24:7f:81:61:d5:bd:ae:68:2d:76:7d:
         d2:02:31:0a:5f:de:c9:ff:bb:b2:2f:31:8e:54:ae:b6:7f:3f:
         ad:7e:24:e8:07:f2:51:1c:48:77:45:fa:d3:2c:06:93:99:67:
         ad:e6:a9:cf:3e:3b:18:1c:83:74:c8:7b:a4:6d:bf:cd:da:61:
         60:38:8c:90:fe:48:f1:7d:de:42:8a:f9:7d:d9:89:d6:49:d3:
         e2:05:69:ee:e3:00:4e:43:32:b1:2f:fd:26:e6:d5:60:40:8b:
         ef:ec:b9:db:c1:6c:4a:1a:66:22:f7:c6:96:32:30:f0:23:e6:
         69:61:a5:62:27:18:6c:ea:75:c2:8d:fb:b4:1b:9c:61:f7:d6:
         cb:e2:48:08:a5:58:ab:72:12:b8:69:3e:10:93:3a:a2:a1:8b:
         26:c1:b7:78:f5:f4:f3:f1:64:69:e6:13:2f:fc:62:29:5b:60:
         cc:14:85:87:3d:ea:6d:6a:29:4d:0a:a9:fa:cf:3c:78:31:ed:
         9d:26:f5:56:90:19:4b:b9:8d:a0:fd:8f:23:a2:e9:46:c9:e0:
         e2:a0:95:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----