Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9a9ad749-51d8-466e-8bd3-80e24951c8f7.roa
File:                     9a9ad749-51d8-466e-8bd3-80e24951c8f7.roa (raw, json)
Hash identifier:          XimT9HOWzwPUEIoD4gI43cuy+Q1f8GxohJCbx6ttass=
Subject key identifier:   45:2B:8F:35:11:A5:2F:DF:D1:41:7A:4C:0A:8F:3D:14:65:00:85:49
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6C69BC0EBEFAD08F58103F2CBA5D00C5A0ABE2A7
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9a9ad749-51d8-466e-8bd3-80e24951c8f7.roa
Signing time:             Sat 03 Dec 2022 00:00:00 +0000
ROA not before:           Sat 03 Dec 2022 00:00:00 +0000
ROA not after:            Tue 06 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:69:bc:0e:be:fa:d0:8f:58:10:3f:2c:ba:5d:00:c5:a0:ab:e2:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  3 00:00:00 2022 GMT
            Not After : Dec  6 23:59:59 2022 GMT
        Subject: serialNumber=2b3c7c60222122b4cb8eb50ea7f7cf0aace5dbc23c723e05d173fa659add5d85, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:01:4a:54:09:94:d9:c4:7c:ec:8d:cc:6d:55:
                    b9:36:cf:75:a6:1c:52:8b:c3:38:04:40:a8:48:8f:
                    91:75:f3:15:f4:f1:c0:32:6a:f1:a6:a4:ef:0f:40:
                    9c:3d:60:90:0a:73:58:e3:c3:45:ff:0e:fd:12:d2:
                    49:c7:37:a1:29:84:c2:b3:03:76:2a:e4:a5:c1:39:
                    4d:ec:92:58:d7:5b:be:be:d3:f6:cf:df:8f:85:a3:
                    3a:6b:64:42:4f:a1:52:ae:e2:c8:f6:49:2b:79:be:
                    9d:b2:d5:31:c6:b2:97:60:55:2c:f6:03:aa:b7:bc:
                    c2:6a:b4:b6:d1:17:82:c8:1e:de:3a:89:28:c4:37:
                    49:9e:da:f6:ca:9f:ae:bb:01:4a:fa:7d:80:fa:fb:
                    b5:f7:9a:63:5b:ad:2d:a6:30:c3:22:bf:e8:55:61:
                    33:84:94:00:af:c1:80:67:9f:6c:bf:c8:ae:4f:e0:
                    e9:33:01:b4:0f:43:c2:ac:ca:58:e4:c0:c3:cd:ce:
                    a6:ff:1f:25:82:72:84:4b:50:81:cb:7b:07:cc:5e:
                    db:67:1e:73:1a:95:ab:92:ba:c2:e5:74:6b:5a:57:
                    3e:42:c3:c9:2c:a7:30:9b:c9:53:12:59:6e:72:9d:
                    37:b5:10:43:45:4b:23:96:07:fe:77:33:fe:b5:c4:
                    68:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2B:8F:35:11:A5:2F:DF:D1:41:7A:4C:0A:8F:3D:14:65:00:85:49
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9a9ad749-51d8-466e-8bd3-80e24951c8f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:c3:d9:a7:84:e3:13:7d:17:01:26:ab:31:42:65:8a:37:4c:
         ef:d7:7d:a7:09:30:3a:ca:65:37:4b:de:c8:79:5f:2c:91:ca:
         42:46:b1:a6:a2:96:cb:f3:ab:29:17:f6:93:e2:bb:20:5f:3a:
         18:56:40:9e:0b:62:13:ad:93:6d:71:2e:01:3f:0e:ec:ff:b4:
         5a:3d:14:ee:1e:4a:14:fc:b3:7a:b9:74:00:2d:50:8f:07:c9:
         3c:6c:3a:15:d6:2f:bb:c9:86:68:d9:c7:c5:1c:37:88:64:04:
         c2:83:bb:f5:bc:92:69:44:ae:dc:dd:c8:c8:f7:1d:1e:9f:38:
         b4:ad:9b:35:79:2d:48:a9:a0:8c:e8:4e:82:7b:7b:45:2f:7d:
         d7:ba:be:f3:3f:24:b4:3a:4b:0e:7b:4b:ff:b5:75:4d:5a:6b:
         1f:97:52:2d:55:de:5e:8c:57:94:7e:44:63:12:49:90:80:36:
         64:55:7c:39:ef:72:74:02:35:fe:d7:c3:c9:86:ac:38:de:b8:
         ef:33:88:d9:59:bf:70:7b:91:46:ce:44:61:2c:15:cd:0e:90:
         0f:3f:a1:30:68:7f:24:19:11:23:e4:f9:2e:e7:49:60:54:a0:
         7f:d9:a4:6b:cf:be:f3:8d:13:e2:e2:20:4a:fd:4c:4b:6f:31:
         48:e2:e4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----