Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/32fa3d2e-59ed-45d4-88f2-245ab1a59bc8.roa
File:                     32fa3d2e-59ed-45d4-88f2-245ab1a59bc8.roa (raw, json)
Hash identifier:          FVrOI9e21nN6zshJh5kM4dLw9sW/TT4Du39uqJd2T8A=
Subject key identifier:   08:EB:1D:FF:39:49:6D:17:81:66:7F:BD:9D:7C:A6:73:84:5C:A2:CF
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3ED8228398E7DCDB2705CC9C0E5E6BBA363B60A0
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/32fa3d2e-59ed-45d4-88f2-245ab1a59bc8.roa
Signing time:             Fri 14 Oct 2022 00:00:00 +0000
ROA not before:           Fri 14 Oct 2022 00:00:00 +0000
ROA not after:            Mon 17 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d8:22:83:98:e7:dc:db:27:05:cc:9c:0e:5e:6b:ba:36:3b:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 14 00:00:00 2022 GMT
            Not After : Oct 17 23:59:59 2022 GMT
        Subject: serialNumber=9fffb6f757f6ad6b0439dbe4a2ac3d3a009304c30ffaddc515d34d110d7c651f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:3b:56:fc:52:43:28:60:dc:60:17:65:70:
                    8e:40:69:bf:ed:d9:76:cb:81:50:53:92:4c:aa:7b:
                    5e:25:b2:85:d0:2e:46:1f:c5:a8:56:58:ea:15:85:
                    7b:4c:fa:d8:f5:df:30:12:af:0f:57:98:98:a8:29:
                    3e:2a:6a:7b:7a:46:14:59:03:35:6e:09:2c:63:e6:
                    4d:ce:82:8a:4a:fe:1c:59:c7:43:7d:dd:40:53:43:
                    ca:1a:84:30:7e:b7:58:6e:ca:d5:38:ce:85:6b:6a:
                    25:33:d2:fc:96:80:96:12:97:36:19:58:58:be:c7:
                    cc:df:38:5c:52:d4:bd:3c:ab:4d:3b:ad:72:d0:a1:
                    b6:2f:57:78:ab:5b:dc:02:4e:5d:4b:7f:55:48:29:
                    ca:85:1e:1f:dd:32:95:5f:cb:1d:3d:3b:ea:fb:1c:
                    a2:dc:df:fd:5f:cc:6b:77:28:6d:42:eb:38:2e:29:
                    16:35:79:96:7e:0a:3c:02:e6:6c:fa:02:2d:39:ae:
                    7a:79:d5:79:04:f9:07:39:1e:47:ac:98:47:fa:58:
                    8a:a5:4b:6a:97:53:b9:04:e3:9b:9c:a2:e1:32:ac:
                    c6:d1:97:ee:38:fa:9b:38:5e:91:e6:3e:93:d2:e3:
                    a0:09:0e:f1:cc:01:67:d1:0d:ae:88:44:62:42:fd:
                    ce:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EB:1D:FF:39:49:6D:17:81:66:7F:BD:9D:7C:A6:73:84:5C:A2:CF
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/32fa3d2e-59ed-45d4-88f2-245ab1a59bc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:c8:33:b1:36:50:c3:25:f5:93:cf:97:d5:d9:00:22:85:2e:
         93:5b:29:3d:72:aa:74:a0:9c:36:ea:8d:92:11:f8:58:81:58:
         3c:ff:ff:c5:51:2a:8c:38:b9:2b:66:c9:5f:0c:62:20:47:97:
         5f:91:54:79:2e:70:82:e3:47:76:7b:ad:74:c0:39:02:b3:d4:
         8b:7f:71:c9:a7:10:9b:07:a1:2f:54:37:66:08:8e:ff:f5:1b:
         8d:ec:49:19:c1:7b:ab:c2:d6:5f:88:a9:27:ec:c9:3a:c5:d8:
         03:50:e3:53:c1:84:b5:8e:c1:a5:78:94:7a:d4:4d:17:34:bd:
         e8:47:49:ff:5a:3e:4b:4d:74:11:8e:fa:bf:8e:03:85:7c:99:
         eb:72:32:86:ca:46:87:0f:be:21:78:63:49:3c:d7:e3:a7:79:
         bb:20:89:41:18:d3:6c:36:da:e2:01:ec:bc:56:e9:1a:61:d9:
         6c:7b:f4:a5:8d:46:ab:53:0c:62:17:a4:aa:00:ad:d8:70:de:
         d7:41:4a:af:26:2f:4b:bb:7e:e8:1f:45:b6:c3:b7:f4:68:51:
         65:5b:88:70:e1:cb:d7:18:02:3d:ee:7c:36:93:e8:56:eb:92:
         69:22:f3:d7:1d:6a:3e:db:6f:29:c7:80:7b:dc:54:9a:d6:b6:
         59:ae:8b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----