Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e7387fbd-7980-410b-9f84-920c5d0ca2dc.roa
File:                     e7387fbd-7980-410b-9f84-920c5d0ca2dc.roa (raw, json)
Hash identifier:          jVhliDnlof/PGuTUu2oxGfZ/fWdPwffkJ/nlN6RLNnQ=
Subject key identifier:   9F:22:CD:0E:7E:11:E4:AB:05:31:47:76:44:90:CE:44:28:9C:10:4F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       19E04012B1C5AD46F4D142E958379736E52F83F1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e7387fbd-7980-410b-9f84-920c5d0ca2dc.roa
Signing time:             Tue 20 Dec 2022 00:00:00 +0000
ROA not before:           Tue 20 Dec 2022 00:00:00 +0000
ROA not after:            Fri 23 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e0:40:12:b1:c5:ad:46:f4:d1:42:e9:58:37:97:36:e5:2f:83:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 20 00:00:00 2022 GMT
            Not After : Dec 23 23:59:59 2022 GMT
        Subject: serialNumber=eba5a747421f8c54da23e2d5982176a46674df099238ef0c9508a24d0ffab9e4, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:16:33:b2:84:c0:c6:4b:de:fc:16:f6:ef:f9:
                    b9:2b:1f:53:1e:9c:ae:96:91:95:e4:dd:d1:af:19:
                    60:fe:80:8c:f4:40:0f:f2:77:8f:4c:23:ff:8e:e9:
                    86:7d:9f:11:af:6f:70:5d:3c:9a:79:21:f6:77:be:
                    5a:2d:59:65:c0:71:46:f4:7d:0c:b2:de:31:24:92:
                    09:0e:6e:6c:5b:ac:46:41:8f:9c:ec:13:0a:c3:e3:
                    df:e1:e8:2e:80:02:5d:bf:b1:f2:15:3d:b3:f2:fd:
                    1d:9c:77:73:51:4c:ac:51:71:26:e5:d1:18:5a:55:
                    96:53:67:a1:ef:de:49:58:23:b2:32:62:eb:6d:88:
                    11:8a:c3:1a:53:04:63:d4:69:bc:c4:4a:51:81:27:
                    0c:01:44:ea:79:6c:36:14:b8:e0:a7:06:9e:de:01:
                    55:27:0c:d5:46:19:5c:56:d5:a6:9a:6c:1a:bd:c1:
                    54:84:56:9f:9d:3d:98:02:0e:06:df:d1:4d:2e:9c:
                    78:4e:19:a9:55:17:11:b8:15:61:c2:f2:df:ff:8a:
                    94:46:ef:35:9e:04:ff:7c:41:8d:3e:45:8f:3c:91:
                    4e:ee:d7:87:26:e9:95:0b:6c:ef:de:63:dd:5d:e6:
                    cd:1c:82:ff:fa:7e:a7:29:e1:12:da:ff:3e:c4:90:
                    21:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:22:CD:0E:7E:11:E4:AB:05:31:47:76:44:90:CE:44:28:9C:10:4F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e7387fbd-7980-410b-9f84-920c5d0ca2dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:e4:3c:35:37:34:c6:5b:dd:9d:a1:f6:44:6b:05:01:ab:b5:
         b8:00:95:1b:3b:a6:9a:80:6a:c5:e9:cb:92:1e:b9:7e:d5:77:
         24:d7:95:26:f5:a7:55:1e:8c:7f:e3:a5:a1:1f:11:ae:93:a5:
         95:7e:50:4c:06:8e:c4:b1:63:5c:44:12:15:3d:44:f3:c4:6d:
         c1:c1:60:44:a1:03:21:97:12:b1:ac:b2:cd:57:e8:d8:1f:fb:
         46:6c:0c:9d:c3:ac:d1:ab:35:15:69:57:f5:9a:f6:97:c6:fe:
         74:fb:68:9e:3d:fd:b8:6e:2b:06:22:4e:1d:49:71:a4:13:44:
         aa:47:91:07:e8:95:3c:79:9f:49:e7:e0:c3:ac:93:9b:1d:ed:
         40:91:75:2c:2e:51:bb:93:3c:c4:07:75:5f:45:f6:af:7c:d7:
         8b:ec:27:36:75:d7:95:eb:a4:1f:df:ec:4e:18:63:27:91:bd:
         9d:e2:00:f0:cb:e3:22:97:50:cc:62:ad:5a:af:74:1c:fe:e0:
         24:d5:c8:99:b1:f8:7f:36:ac:3c:16:ba:6d:b5:b0:c7:30:5e:
         e3:cc:00:b8:a5:50:92:66:8c:c2:aa:dd:26:bf:16:19:eb:09:
         fe:71:17:f0:3b:bd:a1:71:37:0e:43:b7:d0:a7:40:4f:c6:d9:
         c2:fa:d5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----