Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3b9a97cf-8e24-44bd-b281-54b6c2fa0004.roa
File:                     3b9a97cf-8e24-44bd-b281-54b6c2fa0004.roa (raw, json)
Hash identifier:          bQiA+EiEqwv0Bvv97w5+cY1cL72Tuqu99unlNGqakpw=
Subject key identifier:   5E:DE:58:F8:F3:55:90:54:57:B9:E9:4C:0F:64:7F:33:13:54:1B:EE
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       478EBB22F928CE6A7132DA2A1D1EF1ECDD20249B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3b9a97cf-8e24-44bd-b281-54b6c2fa0004.roa
Signing time:             Thu 27 Oct 2022 00:00:00 +0000
ROA not before:           Thu 27 Oct 2022 00:00:00 +0000
ROA not after:            Sun 30 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8e:bb:22:f9:28:ce:6a:71:32:da:2a:1d:1e:f1:ec:dd:20:24:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 27 00:00:00 2022 GMT
            Not After : Oct 30 23:59:59 2022 GMT
        Subject: serialNumber=96be5e7fbec6bb1ad80af631ca3013b444be4eff2f804f6a4aae05ab0d8f0ef4, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:c9:76:c6:99:34:fd:90:da:f8:36:3b:3f:
                    ac:32:77:49:0b:02:9b:32:1c:22:8e:b2:67:b9:33:
                    12:9b:39:15:8d:b9:73:da:82:ef:40:32:25:3f:f7:
                    73:ad:41:db:52:84:06:bf:e7:d4:08:61:61:9a:3a:
                    d5:b5:4b:86:32:8c:38:74:e3:51:25:a8:53:79:2f:
                    f8:66:e5:42:60:a6:01:db:0d:be:32:d3:48:2a:24:
                    1b:dd:57:3a:fc:ed:3d:82:94:6a:f8:30:e3:e3:18:
                    5f:ff:dd:d1:3e:7d:34:c4:91:13:16:27:e4:dd:0d:
                    d5:90:f8:d1:ab:38:d8:1b:ce:2a:e3:4e:21:c3:2d:
                    b0:07:16:21:a8:2a:be:58:47:9f:5c:ee:6f:34:6f:
                    42:14:7f:fc:3a:64:38:07:8f:c4:35:2e:39:8f:01:
                    22:a0:9a:b0:ea:89:ca:fb:e2:0a:24:c2:ff:c9:74:
                    f4:c5:29:70:21:b2:3b:a1:e6:80:2e:81:b0:9f:ef:
                    df:5a:cc:11:de:a9:7b:0d:18:0a:30:0c:ea:01:f7:
                    a4:bb:87:53:a0:8a:b9:ab:d7:f3:0b:63:a2:9a:8a:
                    17:f2:c4:fe:14:e9:63:45:e6:a0:35:b2:70:f6:23:
                    ac:41:77:09:67:5e:43:df:73:17:7c:a4:34:84:e6:
                    40:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DE:58:F8:F3:55:90:54:57:B9:E9:4C:0F:64:7F:33:13:54:1B:EE
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3b9a97cf-8e24-44bd-b281-54b6c2fa0004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:a1:20:4f:dd:c9:49:6b:e5:e4:3a:c0:f0:4b:c6:f1:75:bd:
         99:61:6d:61:0a:5c:30:3a:19:14:ad:ba:b4:bb:bb:34:e1:d3:
         d8:61:54:7f:cb:44:33:7a:ad:af:41:e0:ef:1d:e0:30:c2:e9:
         b4:03:41:77:4c:97:71:cc:e3:6a:9d:a6:5f:e3:9a:3b:51:80:
         f0:99:df:b0:2d:2c:2f:89:42:dd:18:6e:2b:80:a6:7c:f8:98:
         ec:b2:37:7b:2d:c4:6c:e8:b7:b6:91:2c:4e:2e:42:ea:52:5c:
         64:ba:8d:c1:69:bb:3c:b3:87:8c:f3:8d:3b:72:96:5f:53:b6:
         38:2e:b2:67:42:82:e4:b7:32:ed:3b:68:8d:e4:48:50:ee:ce:
         f6:70:d1:f6:1d:7b:54:4f:6d:38:4e:a6:91:e3:96:f5:c9:16:
         e9:db:fd:bc:85:1f:db:63:6b:ac:e7:8a:6e:96:14:dd:63:6c:
         da:8e:8d:3f:47:8e:ef:9d:53:7b:4a:d9:aa:f2:a2:aa:91:d5:
         18:da:4e:a1:84:89:f8:4e:c6:65:52:20:1b:e5:5f:31:17:bb:
         60:4c:79:52:0a:c1:20:2a:82:96:0b:82:87:90:70:6a:4f:43:
         5e:70:c5:ee:12:b9:f0:e4:f4:94:23:63:6c:2d:74:6c:4e:7c:
         5d:3e:8f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----