Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6262fe50-1aff-4d81-815b-cabd20a133f7.roa
File:                     6262fe50-1aff-4d81-815b-cabd20a133f7.roa (raw, json)
Hash identifier:          6G9h0WwKhZy+x8wCvIcegrjJPRQXmxwpE5NLiUraBIw=
Subject key identifier:   2E:72:80:0C:D7:3E:C9:7A:0D:6A:D5:8C:73:70:28:5B:24:82:D0:88
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3EA7349E26D53F3F63E0910B5F8FA9109C6BA9F3
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6262fe50-1aff-4d81-815b-cabd20a133f7.roa
Signing time:             Fri 02 Sep 2022 00:00:00 +0000
ROA not before:           Fri 02 Sep 2022 00:00:00 +0000
ROA not after:            Mon 05 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a7:34:9e:26:d5:3f:3f:63:e0:91:0b:5f:8f:a9:10:9c:6b:a9:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Sep  2 00:00:00 2022 GMT
            Not After : Sep  5 23:59:59 2022 GMT
        Subject: serialNumber=7e17cfea96fac06274de5c2506473c247f6d1e5662fd9e2dc0cff0c6b5f943fa, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:b6:76:30:20:0c:5f:c6:43:d9:6c:6d:82:
                    ed:64:e7:92:22:a2:11:af:3e:61:77:b0:a4:17:6f:
                    06:b4:42:83:2a:7a:cc:a7:0a:78:4e:14:41:43:62:
                    14:48:19:32:6a:54:42:e6:86:1b:92:86:07:69:4f:
                    cd:49:48:59:06:e2:ed:ca:7b:29:cc:cd:cd:b2:88:
                    5d:a7:19:c0:d6:2c:8f:d6:20:c3:74:aa:1f:34:45:
                    f9:70:39:9b:38:9f:a0:3c:15:b8:20:93:5a:fe:fe:
                    5e:4d:1c:5a:b6:de:08:ee:53:8c:98:a4:c8:20:cf:
                    e0:1e:ae:03:2b:98:09:15:f7:29:18:a7:f1:84:ff:
                    b1:1b:ba:59:74:c7:05:73:26:07:f8:a9:5f:51:a9:
                    7f:3a:c3:7b:b4:b1:9e:19:86:5c:76:93:52:43:75:
                    80:f7:18:d1:b0:00:a0:c7:0c:20:5e:ed:7b:31:05:
                    f4:ab:bd:c6:53:3d:a6:df:46:c6:e1:f1:9a:ed:3b:
                    d9:2e:ac:16:8c:5e:e8:b4:d1:3b:6b:20:81:37:68:
                    69:46:6e:ff:6e:f1:31:fa:a0:f6:f1:84:0c:71:b9:
                    59:9b:01:7d:ff:12:69:d0:2b:59:46:20:e1:3a:e7:
                    5b:db:b7:4b:12:1a:27:a4:ff:7a:c3:5f:af:1a:9e:
                    32:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:72:80:0C:D7:3E:C9:7A:0D:6A:D5:8C:73:70:28:5B:24:82:D0:88
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6262fe50-1aff-4d81-815b-cabd20a133f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:bf:e5:92:b3:26:77:cf:4a:31:15:6a:bf:63:a7:14:29:bd:
         30:c1:48:1c:d3:59:37:7d:ae:c9:fb:0b:ed:8c:ae:98:09:ab:
         e0:81:0f:c8:5f:23:64:f8:cf:fb:dc:d5:85:b9:4e:c6:e7:b1:
         06:07:41:01:8a:ee:ed:70:c3:6b:a5:13:08:2e:d5:ac:38:0e:
         c1:a4:fa:2b:e6:5e:60:dd:a1:55:17:ae:08:e4:80:e1:5a:ba:
         e0:2a:1a:df:e3:53:18:4b:26:a9:6f:c8:e5:38:6c:4d:94:b3:
         40:c5:f3:21:52:75:0e:06:23:20:9e:8d:2f:3d:16:bd:93:20:
         16:68:df:bf:dc:c4:64:2f:4e:73:cb:5d:e4:34:c0:ab:13:b0:
         f5:04:91:0a:f7:ab:c3:58:7e:8e:c1:03:3b:58:19:b5:dd:f1:
         04:7b:38:f7:cd:71:88:7e:22:99:2e:3b:81:4c:6c:55:b1:a1:
         5c:e0:11:63:07:23:63:7a:ac:e2:d9:51:24:77:9d:1b:75:9b:
         45:81:a7:f6:11:de:06:a9:95:ce:6a:c3:aa:74:7d:5f:7e:77:
         a8:41:d3:fc:e2:f9:67:45:d8:71:21:c4:c4:c6:c7:ac:a5:9d:
         0c:48:c3:a5:4f:04:d2:9e:d9:bd:c0:68:89:ca:81:58:69:79:
         0d:71:c8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----