Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f95e9d4b-bb26-4c76-b12e-d25e33013a47.roa
File:                     f95e9d4b-bb26-4c76-b12e-d25e33013a47.roa (raw, json)
Hash identifier:          7JraYvcSBAiWzAVJnW91CH5+TrBNwNltRvg632NIG1Q=
Subject key identifier:   21:B9:1C:E4:97:02:D8:D1:C7:64:3F:00:6A:E5:06:70:36:03:49:D3
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7DEDCE032C0F05AD48BCBB746CD8F0C38A784603
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f95e9d4b-bb26-4c76-b12e-d25e33013a47.roa
Signing time:             Sun 18 Dec 2022 00:00:00 +0000
ROA not before:           Sun 18 Dec 2022 00:00:00 +0000
ROA not after:            Wed 21 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ed:ce:03:2c:0f:05:ad:48:bc:bb:74:6c:d8:f0:c3:8a:78:46:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 18 00:00:00 2022 GMT
            Not After : Dec 21 23:59:59 2022 GMT
        Subject: serialNumber=e54720b5f5678a83563227fda12d9d217cb59b7e06423dee6e879b4a1ba1c119, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d9:ea:9d:d2:b3:b5:7c:0f:c1:1d:e8:ef:52:
                    d8:f1:8b:ae:23:93:cc:81:89:05:bd:46:4f:53:f4:
                    36:42:39:7e:51:94:24:e4:94:53:df:ab:c1:59:5d:
                    59:5a:a8:b2:e5:e4:fc:54:88:0d:d5:c4:cf:fe:8c:
                    24:39:b2:f2:d3:83:eb:31:1d:3c:44:3e:65:71:17:
                    33:6f:6f:68:cf:78:ae:8f:2d:3d:96:fe:a3:6f:9e:
                    65:5f:1a:8e:90:50:cb:ff:0b:94:75:17:75:bd:a0:
                    f2:54:94:d5:95:35:b1:f2:8e:21:3b:87:d8:f3:9d:
                    96:68:8e:a6:04:03:c3:4b:39:cf:fa:00:ca:f3:95:
                    53:d3:86:be:1b:88:64:9c:56:f6:cd:63:13:ff:fa:
                    e3:5d:12:a0:18:11:ff:7d:a7:4e:f7:29:68:74:0b:
                    55:cd:73:e9:b3:af:a8:82:ca:62:4f:2f:43:be:63:
                    7f:85:43:8b:20:66:dd:05:da:3d:7a:b0:a7:93:c4:
                    b7:61:4c:b9:3a:14:f3:81:a4:c5:ba:07:04:b2:af:
                    c5:6c:f1:1d:9a:e6:91:03:6b:6b:f3:b2:c5:89:a3:
                    6f:76:94:05:51:c8:0e:4a:f2:05:f5:7e:d5:a9:bf:
                    47:fe:7a:6b:3a:cf:ad:d4:96:24:3c:47:82:6d:53:
                    8c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B9:1C:E4:97:02:D8:D1:C7:64:3F:00:6A:E5:06:70:36:03:49:D3
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f95e9d4b-bb26-4c76-b12e-d25e33013a47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:39:eb:85:d8:54:0d:c6:b9:67:bc:eb:80:6b:3e:d2:0d:1f:
         61:65:e4:6a:03:c2:a4:9c:5a:4b:d2:f5:39:d0:5d:ec:84:48:
         5b:92:74:6b:3c:99:cb:71:4e:38:96:75:0e:b8:04:69:09:88:
         9d:ff:97:6f:df:be:b7:98:c8:52:7d:11:66:94:a5:cb:40:a6:
         00:1a:fe:16:0e:26:c7:ae:2d:39:50:88:0c:87:fe:d4:4a:aa:
         4d:c8:af:e1:43:8b:90:98:5e:15:9b:e4:8e:de:0a:6d:a2:45:
         db:d5:2e:70:a8:39:03:7e:66:74:93:ee:a5:5b:91:2e:8c:2d:
         89:e1:9f:eb:56:47:46:3f:49:d7:de:14:f8:6e:ea:ae:0b:e5:
         69:85:ff:96:ea:a2:46:c8:c4:fa:a7:e1:34:9b:2e:d2:1a:26:
         b5:55:c3:e7:2a:ba:86:22:4c:56:4e:87:52:7f:f4:fd:e3:ae:
         c6:2d:b3:66:5e:ed:15:4b:d0:da:e0:1e:bb:65:5c:4e:06:43:
         b0:85:5b:43:c9:62:c7:a5:2e:f1:d4:6b:d9:9c:de:53:07:6b:
         7a:80:f1:b7:70:ad:b5:57:26:95:5e:26:ba:17:a6:1e:dc:00:
         63:8c:99:ca:7c:16:dd:b0:94:c5:cf:59:ef:ec:0a:87:f4:63:
         33:18:2f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----