Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/99124c5c-241a-4a28-a632-b7202162a763.roa
File:                     99124c5c-241a-4a28-a632-b7202162a763.roa (raw, json)
Hash identifier:          w/O1nSQurpBG1L7RPWDLO8ZxWsZAp67rSwMBJ7gR13A=
Subject key identifier:   75:E1:B4:4C:13:03:37:78:E5:4E:53:07:71:03:2F:D9:A7:A0:7A:BF
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       E62A360C4E54E1F67DF3292AD059A38035BCA5
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/99124c5c-241a-4a28-a632-b7202162a763.roa
Signing time:             Wed 21 Dec 2022 00:00:00 +0000
ROA not before:           Wed 21 Dec 2022 00:00:00 +0000
ROA not after:            Sat 24 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e6:2a:36:0c:4e:54:e1:f6:7d:f3:29:2a:d0:59:a3:80:35:bc:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 21 00:00:00 2022 GMT
            Not After : Dec 24 23:59:59 2022 GMT
        Subject: serialNumber=e75fff7fba44a95d03eba294639e63ecce8d4935570dd7accd3d695cff5614a6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7f:22:30:41:0e:62:56:56:90:c0:84:d6:23:
                    6e:dc:29:ba:1a:5f:bf:86:76:79:21:b1:d1:ce:45:
                    ec:ea:ff:40:73:ca:2c:d2:58:fe:e2:18:62:be:1f:
                    d4:ef:30:a6:68:5e:f7:44:10:c7:b4:33:b6:c7:11:
                    e2:53:e1:e3:4a:6b:c1:89:b7:4a:70:32:e6:5b:ec:
                    76:af:41:f3:60:35:28:11:57:9a:f1:a8:2a:c4:7c:
                    70:7f:0f:bc:b1:ea:a5:2c:f3:50:e4:87:64:fb:06:
                    fa:8d:0c:29:07:bb:e1:5e:46:2f:f6:eb:43:5a:64:
                    de:24:17:77:16:ea:f2:c3:dc:76:45:e4:23:c6:98:
                    26:79:b5:50:69:af:63:a0:3f:82:2c:57:3f:d3:47:
                    3e:1b:f3:32:9e:5d:66:6a:ac:81:11:01:24:0e:1c:
                    75:0c:e0:7a:a1:ba:e4:bb:02:fb:86:5a:8b:71:64:
                    23:ae:67:ac:72:c5:b1:f9:43:fe:f2:f5:bf:2f:76:
                    53:36:d1:04:ca:39:dd:07:a3:44:b9:d3:ed:df:28:
                    61:c7:64:83:2e:d9:87:fd:07:d4:d9:db:e9:6f:fc:
                    ec:90:ff:c9:65:2c:25:86:f8:ef:75:b7:ef:eb:4e:
                    3c:a6:52:1d:ed:6c:ba:89:0f:94:32:94:1d:47:1e:
                    36:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E1:B4:4C:13:03:37:78:E5:4E:53:07:71:03:2F:D9:A7:A0:7A:BF
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/99124c5c-241a-4a28-a632-b7202162a763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:cb:71:30:a0:5b:11:59:51:79:f8:ce:15:50:2f:98:60:4f:
         98:32:90:3d:95:2c:36:c3:6d:ef:48:4d:ac:02:6d:1a:38:94:
         2f:26:e9:ea:3c:a9:64:55:b4:15:26:ef:d6:47:da:ef:48:92:
         b2:4d:54:c0:df:01:66:31:7d:95:64:22:5c:87:9f:d7:40:bd:
         50:f8:19:95:a1:4f:9a:ee:8a:4e:06:c6:e6:3a:8c:f0:24:e2:
         61:d1:bc:6a:3c:91:56:02:27:07:6b:34:26:57:c6:d0:a6:e3:
         16:28:0a:95:15:5c:c9:95:39:3d:d7:36:f9:02:34:6f:63:3c:
         0b:ac:52:11:78:c4:69:f2:e6:9e:fe:41:48:aa:c3:66:d5:09:
         29:7b:4c:65:de:ae:7a:5d:4b:26:de:94:57:78:17:9e:98:77:
         1f:94:4a:85:72:82:54:68:21:b1:17:f8:58:f0:15:a9:b2:6e:
         48:26:10:51:4e:e1:8f:af:af:9e:31:bc:4c:81:a3:64:ed:f1:
         7c:bc:81:16:dc:c7:ad:ce:0c:41:ae:46:8f:36:2b:e7:83:41:
         38:0a:cb:16:cf:3f:59:ab:5d:06:78:6b:b9:33:0b:ed:3b:35:
         ee:90:49:11:f3:2a:3c:30:23:7c:ee:83:cf:19:f3:ca:bb:35:
         6b:15:ca:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----