Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b951f726-d832-4511-aea9-500a340e48d7.roa
File:                     b951f726-d832-4511-aea9-500a340e48d7.roa (raw, json)
Hash identifier:          1ZUCjF1+ZjiczbKXHZKBQrR0dYXxwD6gvJM60z0LwS4=
Subject key identifier:   02:24:85:87:1F:E4:77:54:D0:FB:D6:59:51:AF:85:9C:79:B4:AE:46
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7682538BA81F75FF7C6912371976CB5FB0D10DD2
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b951f726-d832-4511-aea9-500a340e48d7.roa
Signing time:             Wed 28 Dec 2022 00:00:00 +0000
ROA not before:           Wed 28 Dec 2022 00:00:00 +0000
ROA not after:            Sat 31 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:82:53:8b:a8:1f:75:ff:7c:69:12:37:19:76:cb:5f:b0:d1:0d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 28 00:00:00 2022 GMT
            Not After : Dec 31 23:59:59 2022 GMT
        Subject: serialNumber=ba724b8eb59ae05ef99129a1bc4282cd5a3ffec26b3d843263df58c985960705, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:80:04:c2:12:d2:ec:f6:5e:36:05:5c:05:ee:
                    35:46:9f:23:2d:55:77:cb:ea:19:ac:02:f1:2e:bd:
                    ed:60:44:21:38:90:76:8b:2d:4f:98:f6:67:10:b8:
                    dc:1b:7c:0a:36:0c:c3:03:29:1c:43:18:35:f4:d9:
                    90:0a:f8:d2:c0:85:ea:63:bf:11:16:35:7a:a5:41:
                    4b:67:f1:fd:ed:4b:35:b4:2f:4c:b6:01:c3:c7:52:
                    4b:64:4b:81:d6:d2:1a:72:ee:a6:b6:60:3d:1a:87:
                    6f:eb:b5:06:2e:93:7b:74:95:08:5e:a0:75:d3:bd:
                    36:a8:a4:88:9d:13:ab:19:3d:ab:1e:b3:03:04:f5:
                    3c:94:ca:90:fa:88:92:5a:72:db:9d:f3:6d:db:b6:
                    4d:69:a5:f1:a2:67:79:c1:34:a1:da:4f:ca:fa:e2:
                    87:eb:e2:82:48:97:51:36:f0:57:2a:38:90:65:fd:
                    21:c9:6d:4e:43:a4:c3:7b:07:cc:8d:08:fa:99:5c:
                    87:34:38:54:34:a5:f0:c3:de:1d:9c:c1:a8:23:c8:
                    7c:d6:29:5d:da:04:2a:c4:b0:85:c0:5e:aa:94:84:
                    f6:5f:18:bd:9c:ab:1a:ff:70:ab:d9:22:93:15:70:
                    f5:96:73:8c:43:92:24:f9:9b:1c:e4:00:ba:b2:fd:
                    ec:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:24:85:87:1F:E4:77:54:D0:FB:D6:59:51:AF:85:9C:79:B4:AE:46
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b951f726-d832-4511-aea9-500a340e48d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:64:37:c8:ea:c9:78:15:55:8a:f1:fb:aa:22:aa:d1:be:2f:
         5e:b5:96:b4:00:c9:f2:d8:55:13:ae:63:7c:62:80:22:5f:35:
         2e:da:8d:5a:bc:df:a9:45:c9:1f:16:4f:e7:b6:48:eb:d2:49:
         95:01:a5:3e:e5:c4:af:d0:53:6e:68:46:9a:10:4d:30:29:54:
         30:c0:e4:32:a8:ab:ac:60:14:68:4d:65:e7:5c:4a:60:bf:89:
         50:f5:c1:dc:a0:b6:3b:42:3b:69:f4:2e:5c:f0:06:e3:e6:dc:
         d0:5d:68:26:31:3b:02:fc:66:eb:ce:0e:b5:1f:c4:d1:8f:8d:
         cb:5c:15:a9:09:03:cb:4f:1b:77:b4:1f:dd:0b:1e:10:6b:8e:
         0f:63:58:1d:a3:91:c4:43:89:ea:2b:6d:70:80:0d:98:30:c6:
         d5:58:05:a6:9f:cf:59:a9:6c:b0:ff:30:2f:da:7f:45:86:08:
         a2:48:47:a5:89:4d:cb:ef:5e:b8:35:27:fd:c2:77:45:2d:57:
         3a:d4:fd:47:79:2b:6f:af:af:b8:23:cc:df:d0:02:79:e4:7c:
         c1:c7:a3:5e:86:11:66:17:d1:6e:8a:4c:e7:dd:92:6d:5f:b4:
         7f:15:9c:11:fa:a0:e5:34:3d:27:bc:a7:18:30:2b:8e:68:dc:
         9d:4b:40:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----