Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3ee8cb9a-e594-4335-883f-8d70b6f7a606.roa
File:                     3ee8cb9a-e594-4335-883f-8d70b6f7a606.roa (raw, json)
Hash identifier:          X40wD35Gw3DkM5Bgp1Ei5CizYsrJ/ttvaMHKp+/PM24=
Subject key identifier:   E0:91:77:E8:60:69:F4:51:DC:12:8C:9B:5A:6D:8C:1C:2E:48:E2:51
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       47696CD81C92EF4B6B075DDB4866A85133AE428B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3ee8cb9a-e594-4335-883f-8d70b6f7a606.roa
Signing time:             Sun 16 Oct 2022 00:00:00 +0000
ROA not before:           Sun 16 Oct 2022 00:00:00 +0000
ROA not after:            Wed 19 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:69:6c:d8:1c:92:ef:4b:6b:07:5d:db:48:66:a8:51:33:ae:42:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 16 00:00:00 2022 GMT
            Not After : Oct 19 23:59:59 2022 GMT
        Subject: serialNumber=9a065c85c6700eae1ca756df6af6c4a032bb551049f1e6a8ede83366fec11b83, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:f8:cf:7b:39:cd:b6:a9:d0:3a:e1:14:b4:
                    c7:d7:18:74:af:fa:7e:12:c2:78:57:61:68:c4:05:
                    ff:0c:ee:42:5f:b1:5d:81:16:ce:3b:92:46:7e:d6:
                    57:c6:ba:3a:25:4d:86:5d:3f:26:7f:3a:6d:10:db:
                    c4:d6:1f:89:6d:e0:46:95:cb:53:ad:62:46:06:e0:
                    38:c2:7a:be:4e:c6:37:b0:85:27:e1:17:e7:69:f1:
                    7c:70:8f:ef:f8:68:38:34:65:01:cb:b1:14:78:6d:
                    8a:13:13:d0:2a:da:87:3b:57:6b:62:88:be:29:8f:
                    d3:12:ae:e9:fa:1f:27:72:3d:f2:ee:87:d7:34:8f:
                    b3:c4:ce:2d:0e:05:3a:ee:04:1b:f4:cb:4e:c9:2a:
                    53:ba:b0:8e:c1:85:21:95:8d:b8:b2:fd:ea:e7:8e:
                    c6:01:09:6e:de:d0:d6:07:88:7e:f8:e3:4f:14:70:
                    b4:5a:18:a4:43:c7:e3:19:4a:10:85:07:fb:a2:21:
                    d7:af:48:02:55:bf:a5:21:c8:ad:cf:fb:6e:df:be:
                    fe:63:75:80:a8:ff:15:fb:95:48:d0:1f:88:fd:f3:
                    c0:46:f6:ac:9c:e5:51:a1:42:b3:59:8d:33:79:f3:
                    c6:62:a5:d5:bd:0b:65:25:e0:ca:7e:44:8f:90:a6:
                    5f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:91:77:E8:60:69:F4:51:DC:12:8C:9B:5A:6D:8C:1C:2E:48:E2:51
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3ee8cb9a-e594-4335-883f-8d70b6f7a606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:54:5c:a7:3a:3e:3a:83:39:01:35:c9:cf:84:06:90:07:e8:
         45:f7:d5:cf:e6:91:fb:50:88:43:07:2b:3a:24:52:80:cf:56:
         6d:61:4d:7d:51:a4:23:99:ad:d8:0a:ea:36:a5:c6:c8:15:c9:
         27:f4:63:0e:8e:e7:ef:e2:3f:82:1f:54:c9:f0:74:8d:ec:f1:
         d0:35:30:b0:30:4b:16:ac:77:45:c2:e5:a1:71:93:93:22:8d:
         05:6b:97:20:90:54:e4:a5:8e:f7:97:46:3a:00:45:54:cb:a1:
         bb:22:0e:e2:9e:cd:c0:57:1f:63:53:c3:85:51:fe:ed:d2:7b:
         dc:70:3a:46:88:c7:e4:85:a7:c6:3d:4a:09:d4:d6:21:af:a3:
         8a:b0:98:bf:17:b6:6e:b1:3e:f6:f7:21:6f:29:4a:fb:3d:a5:
         61:a1:21:92:c6:44:15:fb:d4:37:41:50:5c:02:4f:aa:ca:a4:
         b3:f0:da:0b:97:bd:f5:00:21:ad:25:a0:76:da:7f:a8:28:e7:
         6d:60:48:a7:f0:98:b8:75:eb:f1:c6:16:cb:b3:66:5c:5d:bd:
         1c:96:22:d8:4f:aa:e0:b9:16:5e:98:ce:0c:47:d7:94:87:09:
         80:86:22:29:e7:32:a0:11:c8:34:89:6d:3a:09:e0:70:70:fd:
         6e:73:f3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----