Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e3d020d1-0ddb-400b-9767-7c062830e836.roa
File:                     e3d020d1-0ddb-400b-9767-7c062830e836.roa (raw, json)
Hash identifier:          g8V/FLV9wQ6s5NjdWh1kPqDUM8GGghvSOs7zVqFSQzA=
Subject key identifier:   2A:6F:BA:08:67:F8:49:1D:6A:1B:4C:7B:36:A2:AB:29:DE:55:11:A6
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       15DC001E81C6B8C05B7373E0161C72C5054F6CF5
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e3d020d1-0ddb-400b-9767-7c062830e836.roa
Signing time:             Wed 14 Dec 2022 00:00:00 +0000
ROA not before:           Wed 14 Dec 2022 00:00:00 +0000
ROA not after:            Sat 17 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:dc:00:1e:81:c6:b8:c0:5b:73:73:e0:16:1c:72:c5:05:4f:6c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 14 00:00:00 2022 GMT
            Not After : Dec 17 23:59:59 2022 GMT
        Subject: serialNumber=b617b141896511300388bae1d7e39649a705c1daa328e68b39c55a7563150811, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a9:35:f9:9d:ea:db:85:88:36:b0:31:c9:78:
                    a7:17:5a:f0:a5:e7:0d:27:8e:d7:d4:cc:3e:ba:5c:
                    3f:84:2b:eb:0b:fa:4a:1d:88:4e:56:9b:38:70:a7:
                    26:31:9d:c3:02:6d:53:11:9a:6b:94:47:30:ef:e9:
                    4f:7b:ca:58:39:5a:e2:75:6c:4a:a9:6e:56:8a:8e:
                    ec:7e:7c:f8:7a:83:0b:a6:b4:df:6a:88:ea:0a:42:
                    b8:71:32:28:f1:86:a5:e5:3b:e1:a4:aa:8b:0d:6a:
                    46:a2:be:5a:b8:65:87:24:d6:de:2a:68:ff:cd:73:
                    a7:cb:50:30:85:e7:6c:4f:26:a2:64:86:0e:7d:18:
                    32:22:40:7c:de:0e:1b:cd:58:d3:b0:78:6b:ab:5e:
                    65:74:04:79:02:62:cf:6b:f6:01:9f:68:22:e9:f3:
                    cc:da:82:bb:4e:3c:30:a2:58:5e:b3:52:19:f2:11:
                    22:92:7d:a8:99:0b:cf:0d:38:54:f4:70:ef:26:c6:
                    30:2b:dc:12:26:00:10:36:e7:a6:18:07:d9:e3:81:
                    88:32:39:68:d6:d7:3a:51:a5:1a:b6:e9:8e:1f:eb:
                    af:d2:81:4d:f8:ee:19:2b:5b:1b:0b:30:15:a2:5b:
                    ff:24:a4:69:6c:bd:2c:72:cd:b2:06:f5:64:23:0c:
                    ec:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6F:BA:08:67:F8:49:1D:6A:1B:4C:7B:36:A2:AB:29:DE:55:11:A6
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e3d020d1-0ddb-400b-9767-7c062830e836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:c9:80:16:86:33:8b:a0:31:70:31:d3:d1:36:5e:c2:6d:b3:
         de:86:49:c9:f8:39:6e:95:19:49:1f:c7:e8:93:3a:3d:a1:ae:
         37:70:db:54:3f:c3:57:1a:b2:66:6f:37:17:75:8d:c1:ad:af:
         00:e5:52:54:90:6b:c5:e5:18:22:71:e7:f1:d3:16:07:bb:01:
         5a:5c:fb:96:77:3a:04:34:b5:f3:42:2a:6b:01:85:c4:b6:e7:
         17:4d:50:1a:29:2c:9e:27:ab:4d:45:43:eb:8b:1a:10:0f:fe:
         d5:f0:d8:f7:7e:ad:8a:02:94:be:a0:37:d8:90:d5:24:1a:8e:
         cb:9c:b1:80:ee:c0:cc:07:52:25:cd:53:a5:e0:f5:25:c4:c0:
         20:fa:3c:06:43:9a:7d:01:24:6c:f9:bd:1b:53:fa:fa:ff:aa:
         78:df:1c:d6:59:4b:46:84:7f:1a:26:37:bd:9d:41:6b:3e:c8:
         45:62:e5:fe:f0:7c:da:33:d9:cc:ae:a6:3b:24:13:71:f5:c2:
         29:2c:79:95:85:2f:8a:8c:42:70:dc:04:02:f1:ef:48:82:20:
         ff:35:4f:35:a7:42:cc:2b:e4:00:6c:4f:04:31:7b:a3:6c:a5:
         55:f2:3d:a1:c7:38:23:4c:b1:e1:85:fb:ed:01:3c:6c:5e:16:
         74:da:57:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----