Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b1c5303d-3085-4546-ac36-f0b368a6cfc0.roa
File:                     b1c5303d-3085-4546-ac36-f0b368a6cfc0.roa (raw, json)
Hash identifier:          /e8Eg5idE9fIWINItun6fdpqgcjFsH/tEOI21lXyX08=
Subject key identifier:   9F:9D:86:E4:80:A2:F2:AB:B9:71:22:9B:D1:56:FA:E3:91:3B:C9:E4
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       11A756C4F26CF23F20CB1F118022BC95C871409D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b1c5303d-3085-4546-ac36-f0b368a6cfc0.roa
Signing time:             Mon 19 Dec 2022 00:00:00 +0000
ROA not before:           Mon 19 Dec 2022 00:00:00 +0000
ROA not after:            Thu 22 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a7:56:c4:f2:6c:f2:3f:20:cb:1f:11:80:22:bc:95:c8:71:40:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 19 00:00:00 2022 GMT
            Not After : Dec 22 23:59:59 2022 GMT
        Subject: serialNumber=0fb63bc5263e777935cc03f8a9a3bb69deee2d4598d1021f60eeef6e5a332bf5, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:75:cb:89:c5:cd:d0:98:9a:ff:71:7e:81:
                    72:5a:9d:7e:6d:82:b3:65:6a:00:32:ab:f8:ec:90:
                    25:14:00:51:5e:bd:55:fa:26:a7:30:ea:f9:ea:43:
                    30:9b:0a:e0:ed:16:eb:20:dd:9f:da:55:e6:13:1d:
                    b1:6b:c3:98:0c:d9:23:d2:65:b5:13:e1:ca:7d:08:
                    75:ed:0c:fd:f4:39:11:16:9f:f4:37:75:7b:87:7e:
                    5c:17:b5:17:03:1c:87:80:14:35:30:75:fc:eb:b1:
                    f6:9b:0e:8f:9a:ec:57:20:1d:3a:e3:fb:fe:2a:71:
                    25:38:26:27:10:a3:88:f3:e9:b4:82:2f:34:bf:26:
                    e3:ac:17:88:16:e1:10:01:16:d2:d3:de:7b:a2:be:
                    4c:f3:71:c5:7b:8d:76:bf:1e:1b:72:fe:bd:de:1e:
                    7a:5f:d3:8b:e5:f2:9f:06:b7:26:8d:33:63:0f:29:
                    a7:c8:ea:75:7a:2c:9e:86:c4:b6:a0:c0:ec:4f:d6:
                    7d:67:e7:9e:1b:62:24:65:dd:78:7c:55:18:24:0b:
                    56:de:c3:be:6e:ed:0d:78:92:98:f6:50:d2:64:72:
                    9e:67:38:01:6e:2a:aa:28:78:e4:d2:a3:9f:d7:67:
                    e8:70:4e:fc:03:52:3a:2c:dc:f1:6e:56:2e:48:2b:
                    71:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9D:86:E4:80:A2:F2:AB:B9:71:22:9B:D1:56:FA:E3:91:3B:C9:E4
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b1c5303d-3085-4546-ac36-f0b368a6cfc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:36:af:d5:61:17:b5:e4:9d:b0:18:15:f6:c1:3f:21:36:84:
         c9:60:97:55:3b:1a:ba:b7:c4:a1:ca:07:cc:68:13:36:55:c8:
         7d:c2:89:eb:98:6b:4f:95:52:4e:f6:74:bc:1a:bf:31:df:fc:
         58:c5:55:f7:59:62:62:ef:2d:24:e3:be:aa:e3:9c:60:71:4b:
         05:d8:42:cc:8d:3c:df:ab:c2:2d:15:44:f2:e6:fd:7e:ca:d9:
         75:11:c4:2d:7b:27:5a:09:2a:dd:d4:bd:6b:01:a3:8a:55:67:
         d5:c1:18:e2:1e:1b:51:ae:b3:5a:65:ed:a5:35:cf:a7:d5:12:
         a4:80:d4:fc:aa:2e:27:f6:29:96:34:5a:b2:cc:a0:a5:6a:4e:
         6a:58:3e:45:3e:f8:c3:bb:16:16:d4:a0:a2:48:b8:06:11:30:
         80:56:00:fb:b9:89:fc:34:f5:ba:24:9e:cc:c8:03:89:94:6a:
         07:f0:a3:53:a3:ba:69:0c:5b:7a:35:07:42:2d:27:c7:2e:de:
         d1:ae:6f:29:e7:9e:71:03:48:c3:e5:27:63:e5:99:fe:8c:d1:
         3c:78:95:14:50:49:0c:c5:bb:98:2e:18:bd:53:7d:f0:6c:03:
         5b:f5:7b:ec:17:dc:f2:c3:cf:53:05:05:05:b7:80:38:b5:51:
         b9:96:f2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----