Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2e2c1e7f-4ddc-49ed-bb0e-d8efbbb499af.roa
File:                     2e2c1e7f-4ddc-49ed-bb0e-d8efbbb499af.roa (raw, json)
Hash identifier:          hZeIVlNXCEWGOKoLMeDuLwV9M6BUKuO6jja15cqDcsA=
Subject key identifier:   AB:8C:17:BF:D7:0F:BA:2A:C8:E5:2A:3E:16:F3:2B:50:4E:94:E4:98
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       77E4F38C5AA91EC79B6624E65ADAFF49ED20DDDB
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2e2c1e7f-4ddc-49ed-bb0e-d8efbbb499af.roa
Signing time:             Mon 17 Oct 2022 00:00:00 +0000
ROA not before:           Mon 17 Oct 2022 00:00:00 +0000
ROA not after:            Thu 20 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e4:f3:8c:5a:a9:1e:c7:9b:66:24:e6:5a:da:ff:49:ed:20:dd:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 17 00:00:00 2022 GMT
            Not After : Oct 20 23:59:59 2022 GMT
        Subject: serialNumber=c53509e0e025d7744a04235f79e971051afe3595c61a12305cf52750a63615e0, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:76:d8:f8:dd:f1:b8:0c:cb:10:a2:3d:19:b6:
                    78:07:12:f5:ad:37:b0:24:02:d8:e5:17:8e:f6:45:
                    42:a4:5f:17:86:1a:17:72:d5:55:7f:68:e1:a0:26:
                    d9:d2:e1:82:a5:70:62:55:0e:62:ce:a0:0a:f0:db:
                    2b:3d:36:50:13:ae:05:95:0d:b7:8c:7c:cd:28:f9:
                    0d:a2:bc:7b:5c:17:fc:3e:45:f4:c6:ce:1d:d1:78:
                    75:cb:39:6a:48:e5:96:06:13:92:26:29:f9:e6:13:
                    58:3b:31:0d:17:5b:09:f2:37:7b:82:d7:30:58:39:
                    d5:c1:6b:f9:dc:35:48:e7:25:5d:a3:a7:5b:16:1e:
                    69:97:8d:4a:64:f2:5b:f7:8b:39:b5:78:3e:d7:ed:
                    66:c7:f6:94:ee:48:24:de:85:f9:be:04:8c:44:a1:
                    a1:da:aa:0c:85:6d:89:b1:17:9e:b9:81:9b:e6:88:
                    94:bf:15:29:0e:29:1b:e8:a7:d9:33:f6:13:42:79:
                    74:62:fd:fd:5c:d5:ec:41:7b:06:ff:d3:4f:7a:94:
                    e2:00:d2:3f:61:c9:ae:eb:75:96:f8:85:3e:fb:01:
                    b5:f2:54:11:23:f1:2c:5a:c8:8f:5b:fb:f5:c0:29:
                    24:54:62:49:45:1b:e3:12:a1:c6:34:3c:a9:23:b0:
                    43:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8C:17:BF:D7:0F:BA:2A:C8:E5:2A:3E:16:F3:2B:50:4E:94:E4:98
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2e2c1e7f-4ddc-49ed-bb0e-d8efbbb499af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:16:94:37:4b:0a:95:53:46:87:1e:d1:d2:bc:99:25:6f:b3:
         cb:0e:53:29:26:84:42:c8:f4:f4:76:8a:b9:91:d7:52:db:a9:
         fc:a2:07:ca:aa:a2:9d:49:91:1d:8a:ac:53:5a:cf:6c:c1:1d:
         e3:73:86:7b:94:6e:7d:d4:b8:fd:8f:1f:74:1c:2a:99:22:06:
         35:bc:92:30:15:3e:82:ca:90:b1:40:6b:dd:77:15:28:e8:f7:
         71:90:4e:3d:75:2c:9a:e3:74:7e:e0:98:0e:d0:42:6f:31:fe:
         de:0f:16:6b:89:bd:8c:92:d5:02:1e:4e:53:69:09:10:8c:1b:
         8b:53:79:1c:4d:8f:ae:97:64:bc:c1:16:4e:6a:06:94:bb:2d:
         a3:95:ba:33:3b:49:25:a0:ba:97:cd:5a:f3:38:a7:7c:cf:44:
         7c:a4:38:9e:4a:73:92:e4:12:90:d6:d0:05:bf:d2:2e:23:35:
         07:2f:8f:c4:52:f0:d7:ca:a3:18:44:33:65:93:5e:94:d1:52:
         38:86:1a:77:63:16:11:4f:f6:d0:26:bb:e6:52:6c:d0:cf:f4:
         bc:f5:65:67:9c:ff:ea:a7:67:46:64:b2:98:b2:cd:82:d9:31:
         60:b0:c5:00:32:49:51:f2:89:9e:7c:85:bf:b8:4e:b5:db:c1:
         78:e4:9d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----