Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/17ce028b-b51a-4add-ba65-0725e36c8595.roa
File:                     17ce028b-b51a-4add-ba65-0725e36c8595.roa (raw, json)
Hash identifier:          PLf9D5cJu5smZurv13PS47weq34FKDZRK8l23ADL7LY=
Subject key identifier:   03:EB:30:2E:52:A4:22:04:50:CC:9C:97:60:72:7B:49:BC:3C:19:E0
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6EC387FC42AB7099254953890E9CBA8F144AB8EF
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/17ce028b-b51a-4add-ba65-0725e36c8595.roa
Signing time:             Mon 12 Sep 2022 00:00:00 +0000
ROA not before:           Mon 12 Sep 2022 00:00:00 +0000
ROA not after:            Thu 15 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c3:87:fc:42:ab:70:99:25:49:53:89:0e:9c:ba:8f:14:4a:b8:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Sep 12 00:00:00 2022 GMT
            Not After : Sep 15 23:59:59 2022 GMT
        Subject: serialNumber=f4fc00b6cef59b12abda58f9f98c04b3f565876ae73fcbfa8c97fa770b2e76da, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2f:79:8c:3f:ef:d1:5a:54:0f:22:83:67:68:
                    5b:a0:89:bb:90:69:b8:20:1d:e6:17:ba:4b:40:16:
                    40:85:53:ac:f7:19:31:98:0c:7e:e6:4a:b3:05:90:
                    2a:95:92:94:0a:2c:09:0b:05:e7:e9:62:e9:1f:01:
                    ab:b2:9f:11:e1:8c:83:0f:e7:51:8e:fd:a0:be:42:
                    47:b3:fa:28:1b:c9:7a:d1:21:a0:7a:50:93:0a:59:
                    5f:10:23:e7:8b:3c:78:74:fc:29:33:c8:f3:88:5e:
                    01:4e:6f:69:e9:39:35:53:62:d1:79:c0:eb:9d:dd:
                    42:b7:14:ce:11:52:c8:1c:de:b0:84:61:a6:57:0c:
                    36:df:eb:c3:0a:1c:a6:0d:52:da:22:c2:fd:53:60:
                    3a:80:be:ef:52:e4:6e:6c:2e:d4:bf:93:b8:e8:a3:
                    7d:b8:84:14:17:b7:0a:a0:de:01:21:b6:5d:b6:4a:
                    37:e5:a3:e4:fe:33:9d:e9:62:60:27:a1:07:cb:fc:
                    4c:dd:e0:8f:0c:76:6c:58:36:9e:6d:70:e9:99:b3:
                    a9:b5:7b:5c:2b:7f:a3:ef:39:9e:eb:fd:09:64:22:
                    7d:c9:f4:f9:94:29:54:25:1d:e3:6a:2d:36:d3:9a:
                    f0:32:2c:d4:5d:96:6f:0c:14:8f:7d:7c:fa:5f:3c:
                    5b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EB:30:2E:52:A4:22:04:50:CC:9C:97:60:72:7B:49:BC:3C:19:E0
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/17ce028b-b51a-4add-ba65-0725e36c8595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:fb:6d:66:d5:c0:c7:04:65:48:7b:88:a4:76:cc:c5:08:3a:
         93:1b:2e:72:68:d5:27:d3:9e:89:75:32:9e:84:5b:2f:1d:b8:
         99:da:64:74:b7:5b:bd:58:ba:0a:2a:3f:7f:3f:ab:68:53:7a:
         0e:5f:47:09:58:5b:77:a4:7d:3b:fd:3c:50:e1:ae:89:3d:00:
         31:4f:3e:2e:31:36:2a:36:0a:6e:2b:f5:b3:4e:fd:d4:30:79:
         18:10:e4:68:9d:e6:4d:c3:48:9e:ab:9a:44:e8:5a:f3:96:e7:
         5f:7f:07:8c:6a:50:b9:fa:91:a1:6f:5e:10:16:a8:4b:b7:8b:
         79:72:33:ae:75:38:3f:b7:90:b1:39:25:7e:09:08:c4:ff:5f:
         d7:85:9f:0a:d4:93:47:71:75:56:72:1e:a5:f7:cf:f2:03:c7:
         a7:ab:ca:6d:80:30:3b:69:5b:21:f9:5c:ac:c5:3a:be:1b:06:
         ff:c0:32:09:fe:37:f5:23:63:57:88:a0:cb:4f:f2:e0:f4:d3:
         2e:35:58:aa:ca:b0:a6:be:e1:bb:14:1b:82:1f:ef:a6:2b:0b:
         e9:00:d6:5e:19:4e:5c:70:f8:94:84:e9:a3:4e:3d:08:0f:ec:
         16:0e:b1:2c:59:69:cf:fb:ef:7f:62:57:73:65:cd:52:fb:19:
         0e:48:ad:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----