Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e4970740-1022-4ae8-9d58-80a3dcdcb91b.roa
File:                     e4970740-1022-4ae8-9d58-80a3dcdcb91b.roa (raw, json)
Hash identifier:          Gw6+VFlBN2sP1ACYfWap7MQxPZDgXw60nvdm7wn5ICg=
Subject key identifier:   21:F0:96:D8:F4:5A:0A:C5:1D:5E:B2:40:9D:73:F3:EF:78:88:93:11
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       76CAB0E2B8C1BCBFB825751EFFC7AF37113EF5B8
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e4970740-1022-4ae8-9d58-80a3dcdcb91b.roa
Signing time:             Fri 30 Dec 2022 00:00:00 +0000
ROA not before:           Fri 30 Dec 2022 00:00:00 +0000
ROA not after:            Mon 02 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ca:b0:e2:b8:c1:bc:bf:b8:25:75:1e:ff:c7:af:37:11:3e:f5:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 30 00:00:00 2022 GMT
            Not After : Jan  2 23:59:59 2023 GMT
        Subject: serialNumber=779049a6310c87a96b02f428188922c92d2e814b8b1d111743592a22f7d672c5, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:00:2f:5e:70:e0:de:8c:ad:d5:dc:c1:9f:c9:
                    7f:14:9d:05:9d:66:38:1e:45:aa:dd:19:0f:a8:4d:
                    70:ef:ca:f1:01:3b:ad:6c:f5:d7:fb:f4:f5:e2:9d:
                    50:f9:8d:82:ba:65:a4:3a:5a:51:4f:2c:b4:4f:4d:
                    24:2b:92:b9:f5:2e:71:33:c7:4a:00:35:2b:39:5a:
                    76:34:cb:73:0e:33:6f:fc:32:68:72:6f:84:c4:46:
                    2d:36:56:58:db:ee:73:ca:4a:87:f9:07:a5:26:eb:
                    47:79:47:dc:53:7c:04:20:9c:08:57:f5:29:43:3e:
                    87:69:37:d3:bc:8b:2b:b1:f2:00:84:48:b8:97:cb:
                    39:29:fc:1e:dc:4c:60:c8:6e:6f:f3:96:0c:f8:e0:
                    f9:fb:98:c8:4c:e4:36:43:55:b9:d9:e9:c3:5d:33:
                    48:2c:1e:b5:43:35:f3:7d:7c:52:c5:41:4e:7e:45:
                    07:a3:5a:95:ca:f9:f8:da:21:6f:89:bb:c7:74:35:
                    56:f0:13:f0:29:4d:59:be:86:19:6a:db:74:7f:7a:
                    1b:2d:06:bc:24:dc:2c:1f:a9:da:67:50:d0:fa:9b:
                    42:a8:15:bf:6d:35:b2:71:c1:f0:9b:04:81:e5:cc:
                    36:6e:6f:ec:08:cf:41:c8:f2:75:a9:1c:12:4b:1f:
                    c2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F0:96:D8:F4:5A:0A:C5:1D:5E:B2:40:9D:73:F3:EF:78:88:93:11
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e4970740-1022-4ae8-9d58-80a3dcdcb91b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:0b:bb:94:f9:3f:24:a1:59:ca:6e:74:28:8d:51:3f:d8:71:
         e1:ee:68:23:5d:06:9f:92:aa:66:8e:96:1b:37:ea:3e:d8:5b:
         9a:65:b6:66:b5:fa:f1:cb:65:87:3e:84:40:90:d5:8e:84:82:
         c3:ac:cf:88:49:82:9d:f3:d3:87:87:e8:cf:4a:80:6d:c5:01:
         07:56:9a:48:d7:95:c1:dd:69:76:67:87:77:73:06:ea:8b:f6:
         0b:79:32:82:63:de:dc:e1:4a:40:df:4b:b2:9e:45:3f:aa:e8:
         2b:6c:22:b8:ef:14:99:f3:b8:bb:7b:4b:30:a7:46:c2:53:6b:
         ba:60:41:de:35:a6:f6:76:ab:c2:f9:22:76:98:5f:49:17:80:
         02:f7:46:c5:45:20:bb:96:a2:74:a0:94:e4:e5:78:b9:bb:64:
         25:71:69:3e:da:42:a0:77:48:7e:88:ce:ac:fa:a6:0a:55:06:
         29:a4:01:b8:17:53:1a:8e:05:92:a1:1f:34:76:5f:ed:4e:1c:
         f0:dc:b7:c8:ca:94:f0:77:d5:09:8d:3f:6a:e7:ef:3c:76:e9:
         6c:59:dc:7b:58:b8:83:6a:cc:40:04:06:36:08:73:15:af:a9:
         6c:63:49:da:02:37:e0:31:79:99:98:07:8a:16:0d:83:cb:d8:
         2d:4f:2b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----