Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2e5cc22b-563f-440e-bd8e-bbdd4cec52b7.roa
File:                     2e5cc22b-563f-440e-bd8e-bbdd4cec52b7.roa (raw, json)
Hash identifier:          nFkDX+YHdzygD2jG2hWvU7bqO99FWraEMFoF1xSpSJI=
Subject key identifier:   DE:95:07:66:7B:24:5B:7C:E8:AE:B1:3D:C0:32:CD:21:F0:BB:AA:68
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       64B4FC259852936AB2697F24AAAC672EC48160A6
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2e5cc22b-563f-440e-bd8e-bbdd4cec52b7.roa
Signing time:             Mon 31 Oct 2022 00:00:00 +0000
ROA not before:           Mon 31 Oct 2022 00:00:00 +0000
ROA not after:            Thu 03 Nov 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b4:fc:25:98:52:93:6a:b2:69:7f:24:aa:ac:67:2e:c4:81:60:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 31 00:00:00 2022 GMT
            Not After : Nov  3 23:59:59 2022 GMT
        Subject: serialNumber=5c0abdf6f95a71cedb3afdd410c17544252fbbb3ddab37aa1881fb4125379fcd, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:67:7b:e9:18:ae:ce:4c:97:31:a7:c3:0e:
                    cb:25:b1:bc:18:76:5b:45:e9:36:27:ce:de:a8:8d:
                    a4:bd:79:7c:13:5f:bd:5b:ec:f4:1d:52:1a:8c:25:
                    bd:99:73:9a:a8:20:94:c1:f7:76:dd:bb:17:ec:50:
                    8f:c0:6b:a3:c5:11:c6:af:d2:9e:82:20:b4:ba:07:
                    da:27:5c:16:fc:03:48:f7:66:e3:83:92:09:d7:87:
                    f2:74:b4:6d:97:a7:54:43:46:17:d9:8a:30:c3:72:
                    85:6a:60:ce:0c:77:b3:0c:10:5d:e9:0c:00:13:ff:
                    c0:2c:d3:d4:6a:e6:92:13:df:4a:60:89:9d:67:a3:
                    14:d4:e4:86:ae:5c:f3:dc:0c:5f:23:33:af:66:5e:
                    04:41:e7:b2:54:09:ee:6b:fb:4f:15:a1:9b:8f:ea:
                    d4:d4:14:74:17:e0:03:da:68:b2:84:49:b4:29:c3:
                    73:95:df:83:73:4b:02:75:51:6c:7d:fa:ee:97:80:
                    e6:43:90:c8:39:45:eb:99:a0:22:d6:a8:00:d0:d8:
                    e2:3f:c7:fb:1c:99:5d:3c:85:84:fb:61:89:1b:97:
                    92:66:01:18:6f:bc:96:c9:e8:bb:f5:86:03:64:9b:
                    3d:af:4e:97:e6:c2:24:98:a1:19:3b:9e:dc:42:55:
                    04:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:95:07:66:7B:24:5B:7C:E8:AE:B1:3D:C0:32:CD:21:F0:BB:AA:68
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2e5cc22b-563f-440e-bd8e-bbdd4cec52b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:91:91:a3:d7:32:9a:3b:fe:c5:5a:c3:56:bc:e8:ef:53:7c:
         4f:78:26:9b:fc:b7:d3:09:03:4f:f5:90:ec:b1:ed:4b:e0:02:
         a8:bf:06:a5:99:ee:72:3e:88:be:6f:8a:8e:8c:41:cb:bd:c0:
         06:75:2e:a3:0b:1c:f7:d0:14:74:e1:28:cf:0b:5e:22:28:82:
         49:a2:ad:fa:c5:c6:13:6e:a1:11:49:65:ce:11:61:89:ed:7c:
         ec:04:77:aa:87:47:4c:1f:aa:a2:6f:ff:62:ad:f0:bf:55:a4:
         a3:59:e2:a6:8d:02:ec:bc:19:c9:6a:b3:98:5e:d6:4c:7d:f3:
         6c:95:02:2f:4b:62:fc:56:41:d8:d7:1b:8d:b4:94:72:43:4f:
         3c:cd:36:6e:0f:f9:72:39:9e:a1:6e:62:f2:2b:1a:cf:82:0a:
         0e:b5:5d:70:96:77:83:f0:94:f1:e9:77:d3:fe:9e:bf:5f:04:
         f3:02:4a:8f:3e:6b:f2:b7:c6:8a:a5:60:81:4b:bb:d3:43:24:
         3e:be:7b:a7:c4:fe:d3:a6:02:93:b0:ce:ac:bd:ed:fc:a4:11:
         ff:41:3c:64:77:25:42:18:8a:40:f5:ae:5d:c6:52:9e:2d:8c:
         cf:52:ac:4c:fa:95:18:b0:2c:71:b2:05:db:28:cc:fa:e0:6f:
         fd:6c:f8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----