Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a0cf2ef0-fd19-4339-b3a1-61aba8a43eb5.roa
File:                     a0cf2ef0-fd19-4339-b3a1-61aba8a43eb5.roa (raw, json)
Hash identifier:          IvzakvaekLOlTqUkW3zMBi1UI7/BuBS2VX6178wiEwM=
Subject key identifier:   82:25:B2:5C:6F:AB:A5:9A:23:9F:7C:E7:F7:87:D3:75:E2:1A:FA:73
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       09E89700C8EEEBBAE19B508A7141AE40B3BAF5F1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a0cf2ef0-fd19-4339-b3a1-61aba8a43eb5.roa
Signing time:             Wed 28 Dec 2022 00:00:00 +0000
ROA not before:           Wed 28 Dec 2022 00:00:00 +0000
ROA not after:            Sat 31 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e8:97:00:c8:ee:eb:ba:e1:9b:50:8a:71:41:ae:40:b3:ba:f5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 28 00:00:00 2022 GMT
            Not After : Dec 31 23:59:59 2022 GMT
        Subject: serialNumber=5751354663147dba3c1aae66fdd594fb1015ac8132be3fcc51c7e30b69585ff3, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5a:f9:3c:7e:6a:08:e7:da:a2:b9:8d:59:74:
                    69:b1:8d:00:e4:1d:f2:18:54:fe:06:93:5b:60:50:
                    7a:2c:31:fb:0f:cb:5a:80:40:b0:11:25:ad:2d:7b:
                    9e:f8:d5:0f:67:01:22:84:64:70:fa:fc:a9:eb:50:
                    b6:4a:6a:fe:69:56:94:a4:33:81:7e:75:c1:09:51:
                    d6:94:01:c3:e6:f9:89:3c:ce:92:5c:5e:04:6a:91:
                    d3:71:91:66:5f:5c:81:e2:c2:8b:3e:6c:12:f9:d1:
                    6d:3f:28:eb:5e:fa:4f:33:47:5c:11:ad:d7:1a:21:
                    b6:95:78:df:0f:7b:a5:b3:70:df:48:95:02:4b:4d:
                    02:8f:03:f5:ea:86:b9:d9:71:c5:6f:91:20:5d:bf:
                    0e:71:b9:d7:60:92:ba:cc:b1:ed:d3:b8:ce:e9:83:
                    13:0f:fa:c6:0d:b3:c7:18:94:f8:f9:94:e8:6d:1a:
                    99:74:19:09:8e:7e:a8:18:09:a2:d6:5b:ad:51:c6:
                    99:ca:dc:0e:2d:0f:a9:6a:da:c4:7e:77:4d:ad:63:
                    25:a2:d6:b2:29:2e:c6:5f:78:8e:e9:6a:8a:78:6f:
                    f6:9f:83:57:23:50:05:c7:4d:80:3d:e5:f4:f7:7c:
                    e0:bc:c5:fe:4b:51:2f:ad:a6:c5:8b:4d:6b:2e:b9:
                    c5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:25:B2:5C:6F:AB:A5:9A:23:9F:7C:E7:F7:87:D3:75:E2:1A:FA:73
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a0cf2ef0-fd19-4339-b3a1-61aba8a43eb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:69:6d:24:da:43:35:aa:58:d3:f2:77:0e:7a:68:e0:ff:11:
         41:6c:ba:6d:1a:78:0d:d2:bf:1d:5f:94:c6:b6:b1:21:45:0a:
         5a:44:d1:86:ae:71:f5:7e:e1:cb:8b:7b:f6:11:9c:b9:3d:03:
         eb:b9:bd:63:33:1c:83:7e:9c:43:fa:7d:66:08:c2:a0:30:fc:
         c9:43:00:3a:70:df:bc:31:43:05:34:07:3c:43:73:44:9e:20:
         50:64:25:6b:b7:0a:25:23:83:e8:7f:00:e1:66:21:f4:73:5a:
         50:bf:a2:59:27:c8:47:eb:7b:c1:e5:eb:15:b6:db:bd:9a:14:
         d4:e7:13:74:0f:af:da:d4:74:a4:20:99:32:5d:ab:21:69:a7:
         82:e5:f9:d6:2e:9d:ff:16:2f:5c:b0:5a:6d:2c:ec:35:e4:38:
         58:84:0f:88:b6:26:1a:e9:e3:de:b0:96:bb:87:d1:56:07:12:
         f9:c5:11:b2:1f:6e:cf:2b:be:a8:da:d5:67:3a:0a:7f:f7:f1:
         e4:fb:98:e1:42:21:11:55:74:1c:fb:a6:8b:13:2e:1c:f0:d9:
         e3:2f:6e:0e:81:a2:71:08:c3:ae:2e:37:da:64:b8:74:d1:56:
         2e:a3:93:6b:28:50:b4:27:c1:61:2f:36:c8:60:42:ac:79:83:
         f5:77:8a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----