Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a2c1200a-155c-4c6a-a672-109f6b95933c.roa
File:                     a2c1200a-155c-4c6a-a672-109f6b95933c.roa (raw, json)
Hash identifier:          tvoozuM0ZCKS/S01TatYGFi9kW1sUAm8ZMABndUot+A=
Subject key identifier:   A5:80:29:7B:B6:1B:49:E7:06:23:88:F7:97:0F:EC:16:A0:A4:E6:17
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       65DC486C4BD2C81A86CBE2451D85D4104312CF4C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a2c1200a-155c-4c6a-a672-109f6b95933c.roa
Signing time:             Thu 13 Oct 2022 00:00:00 +0000
ROA not before:           Thu 13 Oct 2022 00:00:00 +0000
ROA not after:            Sun 16 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:dc:48:6c:4b:d2:c8:1a:86:cb:e2:45:1d:85:d4:10:43:12:cf:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 13 00:00:00 2022 GMT
            Not After : Oct 16 23:59:59 2022 GMT
        Subject: serialNumber=b56c2c11b9cb25ef0e194bbf5cdda722773099854a298ec0c1830e6ca8ea2ace, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:24:b8:52:7d:72:21:dd:d9:94:8e:77:26:b5:
                    f9:80:8d:f8:0c:ee:b8:f9:58:c4:79:41:05:ec:97:
                    97:62:0a:d5:89:6e:7f:8d:e1:72:ca:51:4e:8b:84:
                    75:42:a2:b7:07:a3:de:f3:34:f8:6d:81:05:c8:18:
                    1b:d3:9a:5f:34:42:dc:ad:25:2b:17:51:dd:d8:15:
                    01:8a:a3:75:32:cb:c4:78:70:50:7b:5d:a5:97:fd:
                    50:bb:1c:6e:60:4d:21:e1:d2:e5:1e:fd:31:3a:e2:
                    c6:70:99:f0:23:35:bb:6b:37:f1:11:1e:9b:e4:ec:
                    85:ab:f8:e2:5b:88:da:fe:a8:c1:8f:15:5a:a1:e0:
                    c8:4c:ad:d3:1d:c7:ef:b6:c7:d2:04:2f:bb:88:2a:
                    47:01:54:ee:f6:7e:5d:96:b2:01:a5:fa:e9:dc:f0:
                    4c:26:fe:24:14:51:d6:a9:6b:67:d9:21:4d:12:78:
                    90:db:01:85:17:a3:87:a5:4a:e0:5e:2d:64:6c:68:
                    0c:c3:e6:15:c4:7a:50:33:0d:9c:c9:0c:d3:eb:4a:
                    47:ed:f8:5f:89:ed:11:1c:85:1a:40:4b:bd:ba:e3:
                    85:21:3d:e9:48:15:9c:8d:ee:90:9d:f6:cf:fa:85:
                    8a:77:6e:77:c6:05:55:8d:33:33:59:2c:b7:9f:d0:
                    d2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:80:29:7B:B6:1B:49:E7:06:23:88:F7:97:0F:EC:16:A0:A4:E6:17
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a2c1200a-155c-4c6a-a672-109f6b95933c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:9e:5e:ea:56:97:48:e7:e9:f0:12:d5:4a:85:34:17:c1:a6:
         42:ed:fe:20:0e:45:8f:5b:74:28:fe:9d:b6:f5:2a:cf:8b:49:
         36:6e:22:dd:14:d0:0f:f1:d5:53:59:c5:79:80:2d:5c:11:44:
         03:14:42:14:d6:95:0e:c0:c3:4a:c0:56:74:1f:b0:7c:ab:d0:
         4a:95:17:42:8e:c1:ea:95:e1:94:42:0b:0c:cd:3e:8b:4a:c5:
         b9:28:9c:72:8d:15:1b:3b:c2:11:44:68:01:c3:f7:8d:d6:fa:
         14:4c:c8:a9:cb:76:a2:55:d3:f8:a8:7c:89:d4:0f:e4:83:78:
         10:2c:58:41:cf:5a:32:d2:58:ca:bc:c1:37:31:85:55:45:d1:
         33:83:4e:0b:f8:cc:81:25:d3:c6:e3:cc:51:47:56:f6:73:8b:
         87:29:e1:f1:8e:70:f9:36:97:8a:33:e8:26:e7:32:db:e0:f9:
         b8:8a:a0:67:71:1c:74:c8:13:6b:56:d4:70:8f:79:42:9e:6c:
         f2:4d:be:68:fc:d3:05:d4:5c:6d:04:ee:6a:ac:c0:bd:89:78:
         a7:fb:d3:be:55:e2:69:85:32:07:b1:dc:62:c0:05:d1:da:8f:
         d4:9e:87:0a:4e:10:71:75:5b:52:03:a6:0d:d2:93:3d:8b:61:
         7b:c5:04:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----