Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9cc00e3f-e12b-4e38-817a-fffb668cf217.roa
File:                     9cc00e3f-e12b-4e38-817a-fffb668cf217.roa (raw, json)
Hash identifier:          T3+FGsw1xh5S7NyzA+c5a1iGMGFbGbNIVnpO5I0/WBk=
Subject key identifier:   F9:9A:82:1F:EA:78:44:75:61:3A:46:84:09:36:2C:F7:F7:AD:77:F6
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       018ABF8F3767484D0CDD88F85BA7F89E3FAA90F3
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9cc00e3f-e12b-4e38-817a-fffb668cf217.roa
Signing time:             Fri 11 Nov 2022 00:00:00 +0000
ROA not before:           Fri 11 Nov 2022 00:00:00 +0000
ROA not after:            Mon 14 Nov 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:bf:8f:37:67:48:4d:0c:dd:88:f8:5b:a7:f8:9e:3f:aa:90:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Nov 11 00:00:00 2022 GMT
            Not After : Nov 14 23:59:59 2022 GMT
        Subject: serialNumber=760ef27426c5d14168dae38ed58876f802ac3047cae262b90f7661b998b38e00, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dc:e3:ab:83:ab:53:84:4b:99:c4:50:72:5f:
                    a6:77:2e:6e:cc:53:0d:95:aa:8e:8b:0f:1a:35:ee:
                    c2:c2:60:ca:92:1e:5c:1c:85:64:86:a6:cc:77:c1:
                    dc:07:06:df:26:e8:74:06:31:cd:43:03:46:d8:75:
                    91:b0:fe:0e:16:64:24:21:00:e0:40:3e:7a:15:e2:
                    8d:06:f9:8f:7e:42:06:49:da:83:77:c5:91:43:47:
                    6f:33:01:f6:eb:21:a8:0f:3f:f1:00:47:7c:bb:5d:
                    b3:ac:a7:ec:37:77:fd:dd:ef:b1:4f:b9:07:46:93:
                    57:2f:07:99:93:e4:4e:41:46:03:c3:18:21:bf:70:
                    cf:fe:28:bf:db:14:e2:2b:79:d4:8b:fd:d8:7f:85:
                    e9:79:f2:a7:fb:8d:09:27:9b:1c:7f:a0:c6:a6:8a:
                    e0:41:c5:83:1f:44:a8:e1:b2:1d:30:b7:79:e9:0a:
                    c0:23:98:e5:18:a6:04:a1:de:a5:b6:e5:7b:1e:8e:
                    f2:07:f5:27:bc:13:d8:1b:8f:39:fa:14:2e:ec:10:
                    45:fa:86:26:ef:28:7a:50:d4:8a:70:48:25:1b:65:
                    4f:4a:0b:4a:3c:0c:95:4c:04:89:f7:70:67:ac:a6:
                    74:7b:3e:7e:3b:80:92:e4:df:78:a0:a9:3f:f9:60:
                    05:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9A:82:1F:EA:78:44:75:61:3A:46:84:09:36:2C:F7:F7:AD:77:F6
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9cc00e3f-e12b-4e38-817a-fffb668cf217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:cd:fc:80:9f:e8:72:9e:6c:db:f5:b2:6b:83:d6:c2:11:eb:
         13:d1:93:77:d8:40:7a:cc:5c:7c:77:8d:99:54:33:02:44:f2:
         50:fa:3e:0d:00:df:a3:72:fa:78:5a:3d:9b:c6:1d:73:88:3a:
         52:21:77:24:4b:d9:00:f8:0c:96:80:74:88:e4:6f:7c:4e:95:
         e2:b6:53:cf:3c:4e:1d:82:06:8c:da:48:aa:e6:14:59:2d:d4:
         18:56:ea:b7:7a:1c:0b:33:87:20:2b:b9:bb:dc:5e:b4:76:a2:
         a2:17:83:d7:25:9b:53:a8:23:4d:d6:2c:93:7f:ca:28:13:44:
         6a:2f:d7:2c:55:0f:24:25:f5:23:4a:cc:2b:64:63:d7:37:88:
         9c:e1:5a:81:a1:47:14:12:d4:3d:88:77:2a:fd:52:97:b3:19:
         41:da:79:1a:75:ea:a0:34:33:e8:6c:af:d2:90:04:29:9a:ea:
         9e:62:7f:fe:41:71:c0:9a:8d:be:c7:8a:b2:95:60:38:42:1a:
         9e:38:f3:84:af:b8:74:87:d5:f3:dc:15:f3:23:60:12:c2:6f:
         c2:dc:8b:50:db:47:47:70:59:46:e9:11:e1:bc:24:fd:52:68:
         79:7c:46:fc:78:d2:7e:44:c6:38:11:17:8d:ab:2f:af:93:a7:
         09:79:e3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----