Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fe31b1bc-24f7-4485-b4a5-ff4945d60285.roa
File:                     fe31b1bc-24f7-4485-b4a5-ff4945d60285.roa (raw, json)
Hash identifier:          STMj8qOJiLHwLNJsZVNzuz82E/KY7uma7C0HfQDwNT8=
Subject key identifier:   F2:C6:AF:3C:BC:8E:53:5C:4E:2F:61:A8:CC:6A:48:83:E7:AB:1D:60
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4EE6FF5AB87A082327799D7B97DAD502AA7E6550
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fe31b1bc-24f7-4485-b4a5-ff4945d60285.roa
Signing time:             Sat 17 Dec 2022 00:00:00 +0000
ROA not before:           Sat 17 Dec 2022 00:00:00 +0000
ROA not after:            Tue 20 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e6:ff:5a:b8:7a:08:23:27:79:9d:7b:97:da:d5:02:aa:7e:65:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 17 00:00:00 2022 GMT
            Not After : Dec 20 23:59:59 2022 GMT
        Subject: serialNumber=75dfc828d5b09c4b8a8e000ed0c2dcb244413f3777fe0618f142feacb6f8e3b2, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5e:b2:2f:42:6f:c9:b1:52:17:46:5a:db:76:
                    ad:2b:f7:80:0c:7e:1c:ee:5f:dc:5c:9d:7f:27:46:
                    58:89:71:1c:dd:89:64:f4:83:ad:fa:51:c4:62:63:
                    20:58:60:be:99:98:28:59:ba:85:1a:4b:ba:0e:d9:
                    89:f4:d5:a2:8c:40:4c:84:ab:3d:31:16:9d:0b:48:
                    36:1c:22:44:10:3d:b0:2f:f4:a8:fc:50:86:52:19:
                    10:f0:a5:51:19:a1:fa:de:59:23:05:dd:7f:5c:e2:
                    eb:28:33:a4:e2:21:61:1f:48:b5:9c:00:00:94:78:
                    82:70:15:0d:88:d6:cf:02:f7:db:e6:f9:3b:fe:b5:
                    17:6a:18:6f:04:e9:a7:4d:c1:ba:c9:aa:af:f8:e1:
                    c7:22:3b:c2:ce:37:0f:78:69:7f:af:84:5c:51:59:
                    87:36:68:c0:9e:4f:b4:90:c8:24:b6:fa:06:d7:b2:
                    9e:98:81:a4:e3:10:58:9e:b8:47:03:6d:bd:03:36:
                    ef:01:63:b7:4d:76:85:7e:f0:4f:f6:d0:c0:e2:cf:
                    b5:fb:06:15:8e:c3:c7:22:69:4d:5a:45:8c:16:44:
                    dc:96:95:a1:8a:57:4a:6b:f9:77:c2:68:c2:f2:3a:
                    fa:dd:82:39:53:f3:2c:e1:f1:c1:1c:b7:79:b1:45:
                    1a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C6:AF:3C:BC:8E:53:5C:4E:2F:61:A8:CC:6A:48:83:E7:AB:1D:60
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fe31b1bc-24f7-4485-b4a5-ff4945d60285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:49:a6:b7:f4:69:04:1d:ce:67:ef:ff:c5:34:98:98:31:a1:
         bb:0e:69:e1:6e:75:58:cb:0e:01:b4:24:79:f1:34:3b:29:28:
         48:0e:65:7d:c0:45:27:fb:bd:0e:a8:bd:fc:55:6b:0b:51:f3:
         42:7d:bb:1f:41:c1:8b:39:af:fd:f5:5e:7d:76:10:56:61:5c:
         0d:fa:4d:bc:5b:82:52:79:18:67:63:98:47:80:ad:a8:bf:98:
         2d:dd:59:bf:59:d3:58:2a:61:49:7d:49:4e:6c:78:e2:0a:b6:
         93:bb:6c:67:e3:77:b1:8d:6f:dc:7c:c1:6a:a3:f9:ea:3e:f9:
         49:9f:8d:0e:91:98:b0:40:f0:95:2d:8d:0e:17:86:7a:ab:31:
         02:12:eb:a1:37:d0:5f:dd:36:38:0c:8f:4a:fa:49:3e:16:11:
         56:2f:83:d7:ee:a0:67:f6:e6:5f:e3:37:b3:ac:47:7e:6c:98:
         37:00:5d:49:5a:53:62:4f:a2:b6:1f:2e:10:1d:fd:3b:e0:43:
         42:26:1f:51:d5:0c:b5:0f:9a:4a:b5:e6:83:2d:e4:15:ef:da:
         bd:0c:3b:0e:44:d7:95:5d:7d:e5:c0:d2:53:39:ac:32:2a:09:
         65:66:24:de:25:d4:b2:d0:25:a1:03:7a:ec:d1:37:c5:80:4c:
         a8:df:a2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----