Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/85852289-a10d-4b5c-b83f-41dc6fae78f8.roa
File:                     85852289-a10d-4b5c-b83f-41dc6fae78f8.roa (raw, json)
Hash identifier:          +TCI/y2/tPMeL5VwaKkgaVAZM5HcqbQl0DMjEHWJjzU=
Subject key identifier:   65:70:7A:11:53:80:B1:33:9B:E9:BA:BA:44:83:A9:40:46:A9:02:30
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2EA38C0CA8FBBBE11F397D1AF2C5564F637CFA3B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/85852289-a10d-4b5c-b83f-41dc6fae78f8.roa
Signing time:             Sun 09 Oct 2022 00:00:00 +0000
ROA not before:           Sun 09 Oct 2022 00:00:00 +0000
ROA not after:            Wed 12 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a3:8c:0c:a8:fb:bb:e1:1f:39:7d:1a:f2:c5:56:4f:63:7c:fa:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct  9 00:00:00 2022 GMT
            Not After : Oct 12 23:59:59 2022 GMT
        Subject: serialNumber=7d0ab72b08db0a9c4306a36a3d2ba0e6dd4da050ce61d36e4390be08172cd814, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:49:6e:a0:65:9e:64:d9:11:28:8d:9e:be:65:
                    33:08:04:78:65:9b:27:95:59:d5:ed:20:48:e9:9f:
                    f9:22:35:01:13:59:e7:e2:77:dd:80:0f:1a:bb:07:
                    82:1a:0c:6f:bd:89:7a:7c:4a:d1:71:43:86:b4:cd:
                    c7:d8:93:20:67:c4:eb:6d:65:a4:f3:ac:1c:eb:7d:
                    d3:80:ba:9a:34:f3:aa:23:55:b3:8e:7e:6a:55:91:
                    33:f1:27:fa:cc:42:fc:9d:91:48:56:de:cf:47:96:
                    f2:6d:c4:4e:c3:f8:9e:45:58:34:99:fc:2e:ff:38:
                    f3:bb:71:0d:41:81:c3:95:ff:63:82:6b:6f:9b:06:
                    7b:4e:7d:ef:6b:21:28:0c:3d:c0:7f:51:1b:a2:33:
                    29:f9:33:1b:c1:90:9d:ab:d9:84:40:47:2f:12:a6:
                    10:35:f2:c1:37:8f:0c:2d:31:b8:fc:de:67:6a:c4:
                    0a:c3:8b:24:e6:ba:3e:82:0b:5b:ef:66:b2:1a:e7:
                    e2:c6:27:5d:b4:e5:e9:72:7d:c3:2a:20:75:3c:82:
                    82:d0:ee:4f:d6:35:de:35:b1:9f:a4:0d:9d:88:85:
                    0e:22:13:56:35:57:dd:f8:d0:8e:f6:47:58:47:79:
                    b9:1b:ee:1c:3f:9e:01:6e:8c:57:49:eb:be:07:95:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:70:7A:11:53:80:B1:33:9B:E9:BA:BA:44:83:A9:40:46:A9:02:30
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/85852289-a10d-4b5c-b83f-41dc6fae78f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:db:f7:93:80:ad:3a:83:b0:ae:4b:6d:98:a4:03:2f:7f:5d:
         09:b5:68:a3:09:97:d7:2a:22:a8:98:f4:8a:43:af:8a:e3:05:
         4b:55:86:63:c9:d0:d6:25:19:77:cc:40:75:97:ab:68:41:60:
         08:a4:3d:b7:0d:66:32:1f:73:c9:37:a3:32:22:55:1a:b0:e1:
         b4:48:57:9e:25:a5:6f:0f:61:89:da:bb:50:61:eb:8c:7c:20:
         a1:3f:62:e9:d7:00:70:1c:03:21:c6:7e:48:9f:92:07:1e:0a:
         6b:56:ea:a5:17:76:18:c3:81:3c:fd:51:3e:5a:9b:db:d9:cf:
         45:3b:ed:d0:39:0b:69:9d:87:be:78:44:44:ea:cf:75:48:83:
         17:7d:db:72:df:bb:82:54:6b:f6:eb:1a:f8:2f:15:1c:62:80:
         48:54:70:d3:59:b0:ad:18:4a:47:5f:2d:ef:49:cb:df:a3:71:
         e7:a1:58:c0:1e:22:71:0a:c8:76:65:63:36:8c:5f:97:38:3b:
         37:d0:64:3a:c5:69:ea:ba:16:58:05:8e:74:5c:62:44:50:96:
         52:3b:00:c2:00:2d:11:b2:3b:87:7d:df:7e:41:d2:49:04:7e:
         a5:77:3f:dd:f7:f0:e3:fa:a9:95:6c:ea:dd:f9:93:49:c9:9b:
         33:86:ab:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----