Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/83c22806-f33d-4c09-8427-1d07fd968fdc.roa
File:                     83c22806-f33d-4c09-8427-1d07fd968fdc.roa (raw, json)
Hash identifier:          76HgKv/bNecRmUJI6G8WalMmVVuzfSVci70L40lBBWo=
Subject key identifier:   EA:5F:DF:1B:31:71:82:5C:A0:81:96:97:0E:B9:1F:88:2B:BC:0D:20
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       18697C5071861AA4F04E3B6BE8E1DF61A7F9D10B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/83c22806-f33d-4c09-8427-1d07fd968fdc.roa
Signing time:             Mon 05 Sep 2022 00:00:00 +0000
ROA not before:           Mon 05 Sep 2022 00:00:00 +0000
ROA not after:            Thu 08 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:69:7c:50:71:86:1a:a4:f0:4e:3b:6b:e8:e1:df:61:a7:f9:d1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Sep  5 00:00:00 2022 GMT
            Not After : Sep  8 23:59:59 2022 GMT
        Subject: serialNumber=6da385e74a316f60652d1339ffe9932a1500a7de83afde80983f7e9067d4b2ab, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:94:cd:31:2e:5a:bd:6d:85:34:b1:ed:f6:60:
                    43:a1:18:6e:14:1d:4b:68:c7:3d:77:27:f9:d7:31:
                    25:6c:a3:35:fa:59:28:f0:98:ec:a3:3a:07:d9:3f:
                    75:90:90:a6:c3:eb:6b:cd:7d:c3:4f:4d:a9:58:37:
                    c3:dc:5d:15:78:c3:d2:28:c2:bc:f6:05:5d:9f:8b:
                    f1:c8:77:2b:43:11:27:f2:79:7e:c2:35:a5:66:16:
                    c4:49:97:9e:da:1c:b2:52:b4:1e:1b:e9:6d:ce:7d:
                    fd:57:28:38:aa:8c:49:86:a3:76:b2:60:1c:4a:4b:
                    06:f0:ee:85:e5:df:ce:f2:6d:34:ee:b5:48:0a:ca:
                    08:fe:55:f0:ed:95:7c:9e:d5:84:39:6e:93:68:38:
                    78:c2:85:71:b1:f5:02:01:97:35:96:fc:5d:4f:d2:
                    2b:3a:0f:60:be:77:c9:50:49:5c:9e:6f:f7:8a:87:
                    30:87:0a:4a:4f:1a:8b:57:85:eb:63:46:e3:9f:51:
                    59:5e:4c:65:cd:58:10:28:12:47:ab:24:77:95:44:
                    c7:e6:bc:02:99:9a:7c:fc:b6:b1:81:8e:28:7c:83:
                    17:cc:16:6c:9a:f1:a5:d1:9e:22:76:a4:f0:c0:c5:
                    62:99:b3:ba:91:26:68:a5:84:d1:ad:db:68:bd:af:
                    f1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5F:DF:1B:31:71:82:5C:A0:81:96:97:0E:B9:1F:88:2B:BC:0D:20
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/83c22806-f33d-4c09-8427-1d07fd968fdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:0c:7d:8e:7e:1c:1e:ec:1e:61:6c:7d:2e:07:8b:8e:e0:fe:
         31:4a:d8:fa:2a:46:0f:61:6c:71:05:f4:18:01:50:6a:04:63:
         a3:7b:7c:64:51:a0:33:f4:86:ad:10:27:98:e3:48:38:23:f7:
         8c:7f:b0:51:b3:ed:5a:1b:70:53:86:d5:37:a7:7f:b4:5e:24:
         5f:c9:fe:e8:43:2b:24:9d:86:78:60:b4:d3:b1:f4:aa:73:fa:
         a3:18:73:81:24:bb:fc:c4:17:53:02:b7:e0:7c:de:31:ba:0d:
         f5:87:f0:d7:a3:1a:12:c6:39:d7:80:b5:d8:4f:ef:a2:1c:b6:
         11:77:f9:ca:a0:cd:39:29:e1:59:5a:6e:47:8c:58:11:16:56:
         29:1e:8c:6f:81:d5:e6:d1:91:e0:bb:a2:9c:28:c0:78:b8:53:
         e6:bb:a4:f8:ab:5c:70:2b:9e:79:34:d4:d0:6d:ea:08:96:44:
         3f:50:e3:90:2a:fe:e1:48:40:f3:35:73:05:8a:fe:a0:96:df:
         0c:fa:ee:50:1d:13:a1:6e:cb:8d:59:17:f8:04:03:c0:b9:ed:
         a3:c3:14:bd:06:99:72:c0:f4:1e:bd:6c:f8:94:2b:fd:19:99:
         74:05:03:44:33:8a:b5:d1:95:7e:f2:a4:fb:3c:69:ae:ec:84:
         a0:90:bc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----