Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/090f5d2c-28b8-424d-85b7-8aba53152ac4.roa
File:                     090f5d2c-28b8-424d-85b7-8aba53152ac4.roa (raw, json)
Hash identifier:          Rk/Ydq1PcivJm3y5yrDpmN4ugtSu38ksP6kphv//EKI=
Subject key identifier:   86:35:45:A7:BF:5D:58:D0:99:C0:A9:6E:A9:3A:02:DD:B6:E3:13:73
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       267CD06CCCBBA6D0EDFDB7002268F7D6064DEC4C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/090f5d2c-28b8-424d-85b7-8aba53152ac4.roa
Signing time:             Tue 29 Nov 2022 00:00:00 +0000
ROA not before:           Tue 29 Nov 2022 00:00:00 +0000
ROA not after:            Fri 02 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:7c:d0:6c:cc:bb:a6:d0:ed:fd:b7:00:22:68:f7:d6:06:4d:ec:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Nov 29 00:00:00 2022 GMT
            Not After : Dec  2 23:59:59 2022 GMT
        Subject: serialNumber=1601f5417122604c511001a251da2dae936019d9af800b205864828b52940034, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:88:14:3d:1f:ed:e4:23:fd:d4:f2:1f:7e:80:
                    e8:54:ab:2b:90:2d:89:26:a0:3b:df:29:c6:a1:4c:
                    32:9e:b8:fd:e5:15:cf:19:40:fb:54:c6:28:fe:d6:
                    05:b5:34:6e:a5:fb:7a:9d:f8:92:a3:4b:40:50:0d:
                    b8:87:ec:6a:05:1a:e4:1d:ae:41:ee:bd:34:72:0a:
                    1a:77:21:79:36:c2:8e:92:b3:e2:f8:c9:7b:5e:1a:
                    bc:18:82:e0:c0:a0:32:31:26:93:3d:59:23:25:19:
                    e6:70:5f:b3:35:97:eb:3b:cc:14:64:3b:4e:4f:23:
                    59:ae:d3:f2:b2:a5:c7:3c:29:8d:53:c9:09:e7:87:
                    ad:54:e3:fa:7f:d3:eb:83:37:54:fc:10:37:74:93:
                    fa:dc:06:e1:98:52:50:1d:73:cc:39:72:4c:d7:df:
                    fc:06:ec:77:ce:8c:57:f9:2c:90:da:aa:03:bc:c2:
                    10:fd:d0:ca:5d:0d:ff:03:29:21:94:4b:10:b3:6d:
                    7d:12:b4:54:53:ed:66:77:8e:8a:33:48:1b:5d:6a:
                    21:d1:84:3a:84:2a:f2:77:fc:c8:cc:92:26:ad:c7:
                    d2:c4:46:28:62:a4:14:03:0a:8c:83:8c:45:d0:c3:
                    c7:f2:7d:57:b4:e9:9b:91:01:0c:49:bb:a0:db:71:
                    c7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:35:45:A7:BF:5D:58:D0:99:C0:A9:6E:A9:3A:02:DD:B6:E3:13:73
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/090f5d2c-28b8-424d-85b7-8aba53152ac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:09:e2:9e:34:52:10:e0:8b:16:b8:c1:ec:ba:dc:4a:99:d5:
         c2:18:c7:4b:ab:0b:4e:b6:8f:28:11:df:82:16:a5:51:93:1c:
         dd:85:ef:f7:fc:3b:bf:91:5a:73:c6:45:11:3f:63:ae:ad:b6:
         a6:cd:db:09:ef:34:55:75:8f:77:fc:7a:62:c2:56:65:a4:fb:
         f3:50:4e:f0:a6:aa:9c:f6:75:30:ad:70:5d:bf:67:da:f1:1a:
         ab:5f:b7:ba:ae:05:52:5c:80:f1:21:6a:b0:8a:d1:f9:bb:59:
         0d:2e:f0:68:4f:a6:8b:29:5d:b6:a3:02:a0:ac:cf:94:cd:b1:
         db:61:d1:f1:57:0c:b8:4a:52:58:10:c8:cf:43:ec:4b:4c:b9:
         5c:a5:99:f3:8a:39:8b:20:8f:dd:3d:e9:98:9f:5e:4f:13:bc:
         f1:e4:58:68:b7:f7:67:21:59:cd:5e:e0:c3:38:f4:35:30:d8:
         43:90:f4:ca:67:43:f6:94:a0:ce:64:94:be:d0:89:ab:a6:fa:
         a9:56:a3:33:62:e0:43:b9:f5:6b:fe:b8:08:63:f0:52:f1:7d:
         31:ba:8a:61:0a:74:43:4e:8b:99:ec:74:91:a4:40:84:84:fd:
         57:5b:e7:05:0a:01:20:18:61:63:89:9a:a2:c3:8a:ad:a8:bb:
         fc:be:98:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----