Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7358fc65-3293-43ab-9847-99a78aadb77c.roa
File:                     7358fc65-3293-43ab-9847-99a78aadb77c.roa (raw, json)
Hash identifier:          ety8Ka3O83Ymat4ZQZoL8KlysV6GkC7MfnS+siXLN04=
Subject key identifier:   0A:FA:A9:F8:EF:91:B8:56:97:F5:69:2F:15:75:7C:7B:C0:5C:A0:A6
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5CAB10D0E4565EEF1B44108D9B62261138817B7B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7358fc65-3293-43ab-9847-99a78aadb77c.roa
Signing time:             Sat 03 Dec 2022 00:00:00 +0000
ROA not before:           Sat 03 Dec 2022 00:00:00 +0000
ROA not after:            Tue 06 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ab:10:d0:e4:56:5e:ef:1b:44:10:8d:9b:62:26:11:38:81:7b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  3 00:00:00 2022 GMT
            Not After : Dec  6 23:59:59 2022 GMT
        Subject: serialNumber=a4f5528c5f15e39eecd177b2678bbfa8c07fb8930521dc588d61c46b490c3874, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9b:6f:19:17:15:79:39:e5:91:b5:6e:73:e7:
                    03:9f:68:3e:f4:81:4b:dd:b1:ce:80:1f:bb:4b:fb:
                    22:e6:20:a9:e3:8f:dc:d0:32:79:a8:43:02:92:69:
                    fc:8e:c4:7a:17:18:11:ca:d3:2a:bc:8b:8e:b8:df:
                    2e:1c:48:9b:71:56:b9:68:dc:2c:8f:9f:af:55:30:
                    08:95:2c:29:91:97:e8:2d:4b:14:c5:35:23:3b:72:
                    fe:ab:ea:2a:64:a7:db:3d:42:b7:62:55:fb:2a:23:
                    16:67:3e:43:93:de:df:7f:b7:7d:6e:04:0e:6e:f3:
                    ba:46:e5:0a:bf:0a:42:83:67:c2:ae:e2:59:42:e2:
                    33:25:67:4f:fb:78:15:0a:cd:67:97:d5:77:d3:fc:
                    ce:0e:ec:65:fb:be:bf:1f:59:c8:2b:30:61:3d:9e:
                    e2:40:ef:cc:0a:7b:fd:16:11:e3:70:70:0c:43:51:
                    47:92:59:a6:ad:cf:d8:51:ad:3e:ca:e7:5f:ad:73:
                    d4:96:99:e1:7e:1e:54:67:f6:b2:2e:d0:db:df:56:
                    e8:bf:98:97:76:8c:63:dd:e8:f4:27:c2:01:d1:de:
                    42:ea:28:b8:61:34:f1:10:50:9f:62:95:63:91:61:
                    7d:9f:25:0a:a3:88:44:6a:69:e1:90:53:42:e2:62:
                    49:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FA:A9:F8:EF:91:B8:56:97:F5:69:2F:15:75:7C:7B:C0:5C:A0:A6
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7358fc65-3293-43ab-9847-99a78aadb77c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:73:11:df:f9:40:0b:2f:75:c7:db:20:90:17:3d:46:2d:e7:
         b2:1f:63:13:e4:a6:0e:57:c1:d8:0c:5a:99:d4:9b:3a:77:44:
         29:d1:69:fe:7f:37:7a:70:c4:9e:72:13:c3:f0:90:99:32:72:
         72:23:45:3e:18:64:49:1d:e6:b0:f7:5e:de:6c:d9:93:48:95:
         1d:16:e9:ce:fe:24:c9:43:2d:c3:0e:4a:77:16:e0:4c:06:62:
         63:23:76:52:b4:ca:bb:37:6f:2f:b2:da:36:af:99:ce:1d:26:
         63:c8:50:cb:62:27:02:f4:ab:ed:98:e8:d5:96:a9:45:8b:7e:
         33:b4:39:a6:ef:8c:08:10:3a:cd:3f:31:cf:4c:de:31:4f:0a:
         2f:99:d0:09:44:ae:46:8d:3c:72:6c:56:ea:d1:c9:88:f3:a6:
         85:59:90:80:da:96:74:33:a9:c4:1c:36:60:25:38:91:6c:8b:
         d7:4f:ca:83:6d:4a:67:6f:54:1a:86:0f:eb:cd:18:b3:31:3c:
         d6:b3:6d:ef:31:39:b6:b4:80:04:63:3a:64:1a:09:e6:7f:25:
         f1:09:cc:6a:a9:e8:eb:3c:82:73:ed:3a:e9:01:12:79:66:eb:
         88:be:8d:c6:9b:b0:86:eb:68:03:69:00:48:13:7a:96:4a:c2:
         5a:81:43:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----