Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9382746d-3237-4e2d-b4d8-ef32c2aab49b.roa
File:                     9382746d-3237-4e2d-b4d8-ef32c2aab49b.roa (raw, json)
Hash identifier:          UM8U8UohMXdG66sE31EEsAhmdatpbMP5OkLEy2qy/fA=
Subject key identifier:   10:CA:EC:DB:E6:B8:D1:5A:20:71:F9:BC:D8:8C:94:63:27:AD:44:88
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4C02D0A6143209BAAEC722EC247946D75CCCDE9F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9382746d-3237-4e2d-b4d8-ef32c2aab49b.roa
Signing time:             Sun 23 Oct 2022 00:00:00 +0000
ROA not before:           Sun 23 Oct 2022 00:00:00 +0000
ROA not after:            Wed 26 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:02:d0:a6:14:32:09:ba:ae:c7:22:ec:24:79:46:d7:5c:cc:de:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 23 00:00:00 2022 GMT
            Not After : Oct 26 23:59:59 2022 GMT
        Subject: serialNumber=38c4d1e5fa65efcb4f43e401a09ef4d5b09440a98abbe718a11f514b977fbc28, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a2:cc:82:9f:2b:75:56:8e:87:fc:93:36:45:
                    05:89:43:3e:83:dd:29:b7:03:73:f1:7e:6d:84:fc:
                    3e:22:6f:95:d9:78:50:e3:bb:6b:d0:f3:93:be:ed:
                    e4:bb:b2:9f:e9:4d:e8:ca:b1:5d:d7:cb:34:ad:3a:
                    a3:70:36:42:57:d7:2b:47:65:f5:79:e7:8b:55:0b:
                    e4:5d:58:9e:68:95:ab:ef:d7:ff:d7:80:97:f2:26:
                    e6:b1:1a:4e:ce:20:c1:38:39:c9:53:b0:db:97:d4:
                    c9:dc:07:36:c9:36:d7:31:9f:64:57:f3:5d:47:a4:
                    b8:1e:91:a1:73:e6:55:16:48:68:30:fd:5f:3a:aa:
                    f5:99:68:9a:56:a4:0c:91:ee:2d:d3:72:17:8e:f0:
                    3d:08:c6:ea:43:8e:be:f6:c7:0d:9a:c9:67:ad:7d:
                    cd:05:b3:75:f2:ec:64:c7:90:06:d0:b9:36:a9:48:
                    08:40:46:6f:79:5b:09:24:1e:d9:5b:38:85:0f:61:
                    d1:d9:28:74:f3:a5:07:c3:03:85:5d:d3:41:b3:34:
                    f9:01:11:9f:70:26:d4:1f:9c:ca:79:3c:8e:54:9a:
                    d5:b0:ec:d8:85:bc:63:ff:32:a9:3e:58:a1:c6:89:
                    cf:a6:65:97:45:d6:ac:ac:ca:5e:0e:e6:cc:a3:c8:
                    9d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CA:EC:DB:E6:B8:D1:5A:20:71:F9:BC:D8:8C:94:63:27:AD:44:88
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9382746d-3237-4e2d-b4d8-ef32c2aab49b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:71:4f:6c:92:28:44:bf:5a:ec:9a:21:1d:8d:eb:25:b9:fd:
         b6:a5:e0:db:64:a1:5b:69:24:96:10:bd:3d:c2:64:00:7c:97:
         55:06:c5:05:4b:3a:ca:82:84:da:b8:7a:96:c5:ab:04:3b:0b:
         48:28:31:38:7e:b2:cc:ae:80:91:b2:18:ca:99:ed:91:f1:a0:
         d6:a1:1b:0a:b7:ab:b0:a6:b3:09:27:c4:08:cd:8e:39:5e:39:
         f6:a1:23:11:91:0f:97:c7:1f:b3:c8:df:e1:70:3f:d6:dd:d0:
         1e:93:ae:34:6d:73:7e:c5:6f:ec:93:06:c2:f9:db:a1:e9:43:
         61:0f:15:4d:aa:a5:64:1a:69:2a:20:ef:7d:01:f5:86:a7:e1:
         fb:c2:df:f4:0d:a8:de:3d:54:99:be:3a:6f:80:c8:79:4d:64:
         b4:6f:a0:c5:f3:ec:21:c8:55:d7:ac:94:37:c7:c8:16:4e:37:
         a6:fc:9b:76:9d:64:6d:c1:c1:bf:e6:99:ff:b9:b7:84:e6:50:
         87:cb:98:f0:8d:64:13:b9:90:78:a0:b2:05:e9:5e:cc:2f:b7:
         45:a0:dd:5b:68:9f:61:25:83:59:0a:3d:db:e1:e5:9e:e1:40:
         a5:79:16:b5:28:43:04:a9:a4:26:96:e6:65:0e:75:9a:ef:7e:
         95:7e:18:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----