Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3b944eed-8cc8-46ab-88e6-87196f8521f4.roa
File:                     3b944eed-8cc8-46ab-88e6-87196f8521f4.roa (raw, json)
Hash identifier:          2mN1uV12SYVhn7maWjy6WfMYZb4rHo9UQ2IyBtRTqwA=
Subject key identifier:   72:02:90:1B:70:0A:8C:77:EC:54:39:75:2A:B1:A7:B6:5E:59:A9:CB
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       46DA18C12408290F95D2A962250DD294DA88C33C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3b944eed-8cc8-46ab-88e6-87196f8521f4.roa
Signing time:             Wed 31 Aug 2022 00:00:00 +0000
ROA not before:           Wed 31 Aug 2022 00:00:00 +0000
ROA not after:            Sat 03 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:da:18:c1:24:08:29:0f:95:d2:a9:62:25:0d:d2:94:da:88:c3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 31 00:00:00 2022 GMT
            Not After : Sep  3 23:59:59 2022 GMT
        Subject: serialNumber=6af217cf6eae6f67d8e2a9bcd0413573babdcd4b8ee8ef772d1d227b3e9e5db8, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:a0:0a:68:ef:03:91:15:5e:ac:b1:e2:24:
                    79:3b:b8:a5:d9:c4:f3:c0:bc:90:df:0e:94:33:97:
                    fe:b1:aa:07:da:c2:14:f5:67:51:de:26:96:82:0c:
                    01:17:30:43:fa:f1:a0:34:bc:d5:00:46:bb:32:fa:
                    60:5e:92:71:78:2c:65:b8:d4:85:7f:25:c6:ab:94:
                    86:ee:95:37:be:a9:f5:05:e7:1d:89:35:e5:af:fa:
                    45:5d:8a:be:07:00:55:ee:f8:0c:37:ad:bc:1c:e1:
                    a3:f1:d3:a3:f5:4c:64:30:67:7f:17:e3:8a:e1:47:
                    9f:a4:bf:48:92:5f:fd:d7:85:30:fb:8f:1b:96:c8:
                    e2:7f:a8:21:34:d0:f1:8a:9c:4d:9b:29:13:f0:50:
                    be:9d:84:e6:f5:7e:d6:d2:52:93:a9:67:bd:73:07:
                    d1:10:1d:dd:cd:b0:5a:a0:8e:83:06:2d:63:7b:da:
                    a5:43:a0:5e:b1:61:1a:0e:b3:93:7d:13:14:4d:73:
                    b1:cf:a5:a0:0c:9e:a0:4b:ca:db:e7:2d:80:23:a6:
                    23:41:68:c6:39:63:ee:92:9c:f9:9d:7e:2e:69:63:
                    e3:4c:0b:cf:9b:ff:be:2d:a3:8e:6f:89:02:a4:71:
                    dc:94:5c:be:fd:0c:52:df:ec:62:21:ab:45:1d:f2:
                    cd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:02:90:1B:70:0A:8C:77:EC:54:39:75:2A:B1:A7:B6:5E:59:A9:CB
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3b944eed-8cc8-46ab-88e6-87196f8521f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:c9:6e:e2:c9:ee:7b:e6:5e:af:9a:41:e0:53:fa:95:0d:19:
         3e:db:9d:5b:54:33:5b:9f:39:d3:0b:ef:d6:7b:ca:f0:cf:7c:
         5f:18:3e:7c:c1:30:50:74:b6:60:e3:1c:51:65:07:2e:40:f2:
         2d:0b:de:1a:30:09:b6:c8:50:bb:95:a3:f0:65:9b:49:5e:db:
         a6:06:b0:53:d6:a7:e0:89:28:d6:dc:db:d5:32:60:62:9b:28:
         aa:26:5b:51:1c:6b:6e:47:55:ef:c4:3f:e1:76:0d:f1:56:6a:
         41:9e:02:7e:8f:98:c7:08:23:a1:7a:17:1f:f6:ca:3a:dc:b8:
         30:be:37:5f:bb:46:40:7f:46:04:c1:1e:86:13:22:62:2a:ee:
         4f:48:4b:0e:5d:9e:86:30:4c:a4:e0:34:77:3a:8b:be:67:51:
         34:54:40:35:fe:ac:a7:24:af:98:38:5a:cd:91:f1:98:78:61:
         06:2d:4a:8b:3e:dc:75:49:4c:78:d5:94:f3:61:cd:32:27:24:
         6e:06:83:e6:fa:67:60:6c:ef:30:2b:da:31:3c:13:4c:85:9c:
         40:a0:ce:1e:52:f8:76:91:2d:cd:7f:3e:93:e6:79:76:2d:c7:
         a5:36:52:0a:7e:69:9a:50:b0:0e:97:82:cf:8e:5b:45:c6:11:
         0a:49:fa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----