Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d95467b2-22cb-421c-8b23-be7da18aa0ef.roa
File:                     d95467b2-22cb-421c-8b23-be7da18aa0ef.roa (raw, json)
Hash identifier:          5YvwD29u+/9vd/F7glN0h9lYYs857KChjxnS7oS6miI=
Subject key identifier:   AC:37:95:E3:B3:1B:AA:E3:B9:01:A6:1A:82:B2:E5:7B:D8:30:0D:80
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       30F6C223540FF8BFC164600EF8314C7F4A12A223
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d95467b2-22cb-421c-8b23-be7da18aa0ef.roa
Signing time:             Wed 11 Jan 2023 00:00:00 +0000
ROA not before:           Wed 11 Jan 2023 00:00:00 +0000
ROA not after:            Sat 14 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f6:c2:23:54:0f:f8:bf:c1:64:60:0e:f8:31:4c:7f:4a:12:a2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 11 00:00:00 2023 GMT
            Not After : Jan 14 23:59:59 2023 GMT
        Subject: serialNumber=6c4f7999465a33151147060f6f39e49c8cb41da3faeafdb7457bd01759399bce, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7b:d0:c3:e2:1e:ac:a9:29:5b:e4:f1:c1:68:
                    45:af:1f:45:a5:f0:32:b7:56:ec:a8:4f:3d:e1:67:
                    22:11:e5:ed:0e:00:6c:59:f3:b9:94:19:7e:1b:56:
                    cc:d5:5f:8a:5c:db:bb:cd:8f:a1:67:ed:7c:f9:cf:
                    8f:9a:da:c3:22:02:b8:5c:2b:f4:e6:72:b1:1b:5c:
                    4d:a6:c8:8c:0c:7d:fd:20:02:e5:c0:e4:4b:f6:d1:
                    fc:cf:69:17:9f:21:7b:ca:2e:70:80:be:93:6e:1e:
                    f7:0e:03:61:29:77:92:6a:2e:1b:78:e6:33:1b:d9:
                    3c:06:ff:cb:b7:79:50:d0:3b:a1:3c:2c:2c:d7:56:
                    80:b7:a3:30:f6:2b:d7:38:bb:62:be:90:53:67:43:
                    eb:17:3c:1a:74:d8:9a:9f:ab:01:85:9e:ce:b8:c0:
                    f4:24:0d:7c:3e:dc:64:eb:03:01:07:d2:2f:c3:00:
                    f3:e3:2c:42:67:e8:ed:17:a8:09:15:58:2a:59:03:
                    44:c7:78:59:0a:9a:3c:01:07:ad:52:85:b3:09:ca:
                    aa:6a:cf:fd:aa:70:fc:05:83:83:fd:ad:e4:8e:b3:
                    9a:1c:31:ee:76:55:34:80:42:16:0a:e3:25:bd:85:
                    45:5e:32:87:71:9d:a4:18:66:6a:1e:19:02:c1:a6:
                    d0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:37:95:E3:B3:1B:AA:E3:B9:01:A6:1A:82:B2:E5:7B:D8:30:0D:80
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d95467b2-22cb-421c-8b23-be7da18aa0ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:36:d0:d9:56:9e:c8:e1:8c:a4:f2:36:3a:d2:ec:97:b2:10:
         64:07:00:e7:47:7c:94:0e:20:3d:45:f9:36:a3:b2:ef:a4:ac:
         be:4a:d7:fb:4a:b6:fc:15:02:c7:ca:bf:7c:97:0c:45:7e:29:
         e2:37:26:89:c6:19:dd:ae:07:7f:0a:08:d1:a7:80:7f:97:f5:
         1e:bc:aa:76:00:98:1a:1c:3f:9c:8c:45:5c:0b:95:37:97:3b:
         51:75:a6:4c:da:1b:d1:b1:15:2c:75:fd:08:7b:22:a2:8d:f1:
         31:c8:58:0d:ee:91:1c:71:5e:1f:3d:ee:90:ba:a2:9f:e5:87:
         65:3c:1b:1b:77:2c:1f:c0:70:6d:7d:1f:70:88:45:4d:e6:0d:
         51:ed:70:be:d3:88:93:54:5c:3a:b5:9f:31:c7:0b:b6:80:84:
         51:f0:b8:51:bd:35:d8:6c:07:1e:60:b4:25:e9:7f:3c:84:30:
         af:40:27:84:88:24:53:5c:44:ea:09:a2:61:40:8d:a3:1c:2e:
         0b:5f:1b:07:c1:d4:76:bb:09:b8:2b:d1:03:54:fe:c6:74:6f:
         7a:6c:09:21:f2:15:ab:cb:bb:eb:d0:83:7c:82:0f:9a:2a:a9:
         7f:a5:1f:10:ce:bd:a7:64:b4:d0:b4:ef:95:f7:5b:4f:ba:67:
         40:23:d2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----