Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/38c9f9f4-a0ee-442a-9646-3b12b6a472e9.roa
File:                     38c9f9f4-a0ee-442a-9646-3b12b6a472e9.roa (raw, json)
Hash identifier:          EYWPyrLpsmKZVnCXtdxd7esFt4dKpsVyQ7qCHLGtr0U=
Subject key identifier:   40:49:41:C6:79:0E:DF:19:B6:27:32:CD:DE:B6:87:FE:94:C8:48:49
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       61577717277D1300E4C06680C768FF39DA9175CE
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/38c9f9f4-a0ee-442a-9646-3b12b6a472e9.roa
Signing time:             Sun 11 Sep 2022 00:00:00 +0000
ROA not before:           Sun 11 Sep 2022 00:00:00 +0000
ROA not after:            Wed 14 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:57:77:17:27:7d:13:00:e4:c0:66:80:c7:68:ff:39:da:91:75:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Sep 11 00:00:00 2022 GMT
            Not After : Sep 14 23:59:59 2022 GMT
        Subject: serialNumber=13d1a547fe170c4aaf888e5fd202b8898e2f63ecad7d088d7018dfac94666305, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a1:33:32:0a:aa:04:0f:6b:ca:c3:2e:44:a2:
                    3d:d8:93:fc:32:a2:87:2f:26:d9:43:cf:cd:8c:06:
                    a8:68:11:d7:98:75:be:7e:95:e6:b2:34:18:e4:6f:
                    26:05:c8:15:99:a1:d6:64:31:9c:be:06:2d:a6:af:
                    1e:11:fd:8b:c6:8e:ec:2c:c3:48:31:78:9f:9c:16:
                    c0:26:15:e9:0a:bc:a8:d7:eb:e6:f0:52:7d:40:13:
                    fe:25:91:f2:f2:45:3f:fc:b5:eb:51:22:69:4c:0e:
                    fd:d3:24:30:cc:6e:d6:d4:b1:ba:1f:2b:7c:1b:f2:
                    6b:a5:92:32:a0:a2:4e:49:fa:33:6d:89:6b:7e:44:
                    79:4e:0f:43:0a:ae:4f:5b:92:22:71:e1:86:2d:c8:
                    e1:8f:af:8a:94:f0:c4:aa:ce:8f:d5:8b:12:ae:06:
                    b0:08:2c:ff:a7:00:19:15:a0:0d:b0:f6:42:b7:b5:
                    97:ec:7d:70:9c:cf:01:92:d2:d7:7f:d6:10:0a:29:
                    18:aa:3b:c2:cb:1b:01:30:72:70:85:e3:29:d9:25:
                    57:0d:c3:2c:91:40:d9:cc:2a:8e:bc:23:e7:d9:e4:
                    9f:1b:75:cf:31:12:f5:97:9a:b0:33:a8:69:f2:28:
                    e8:fd:3a:8e:52:11:9e:54:8c:77:c4:5d:fb:56:66:
                    a5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:49:41:C6:79:0E:DF:19:B6:27:32:CD:DE:B6:87:FE:94:C8:48:49
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/38c9f9f4-a0ee-442a-9646-3b12b6a472e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:b3:04:5e:a1:f7:97:3b:5d:06:c5:ee:22:9a:ed:e1:7f:42:
         06:5c:0a:c6:69:3b:b6:96:98:03:1d:8f:30:f3:54:d9:a1:28:
         70:01:75:b3:29:ed:ea:d2:ab:ab:9e:74:d2:7b:46:5b:bf:5b:
         57:9d:a4:56:c7:55:d3:2f:60:bb:ab:ad:29:0f:c4:11:e9:cf:
         d1:c1:83:75:3d:c8:05:2e:56:20:1c:f4:9b:70:41:d2:a0:64:
         0e:d7:cc:89:29:22:dd:71:ab:8b:47:10:29:55:fd:45:a0:6d:
         14:1f:10:55:be:95:64:4a:3e:a2:91:5d:64:36:a4:4d:9c:42:
         5e:52:d5:d3:3e:24:c5:d4:6c:09:f3:8b:49:a4:73:1a:17:0e:
         3a:ad:2f:1d:d8:05:b4:1f:6f:17:ad:7a:5c:80:8f:ba:61:3c:
         5a:a5:2a:aa:d9:f8:24:57:9c:61:ea:43:ba:05:74:99:5a:3f:
         45:09:b0:37:90:c2:31:05:e4:24:e3:09:11:33:78:5e:6b:c6:
         00:f3:5d:3d:00:be:6b:66:6f:b8:fe:55:2f:7f:95:74:46:2e:
         db:17:48:75:a2:a4:88:87:82:1c:98:4d:e2:a2:91:b0:46:21:
         a7:a2:e0:70:eb:94:2b:16:0a:0c:c8:95:f4:55:05:18:53:14:
         09:5e:21:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----