Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ada0743a-79c7-48b3-88a0-93b29b83e7db.roa
File:                     ada0743a-79c7-48b3-88a0-93b29b83e7db.roa (raw, json)
Hash identifier:          7NhfXIL8xlLyN0yyToaFjAl1nBr4PnnM2sbx+gnED2c=
Subject key identifier:   B7:3A:AE:19:6E:CD:5C:67:3B:47:DC:11:DE:31:35:B7:76:F9:DA:1F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4B5001FE9E1E178A4E6185A8DB106850CC70DAF8
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ada0743a-79c7-48b3-88a0-93b29b83e7db.roa
Signing time:             Sun 04 Sep 2022 00:00:00 +0000
ROA not before:           Sun 04 Sep 2022 00:00:00 +0000
ROA not after:            Wed 07 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:50:01:fe:9e:1e:17:8a:4e:61:85:a8:db:10:68:50:cc:70:da:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Sep  4 00:00:00 2022 GMT
            Not After : Sep  7 23:59:59 2022 GMT
        Subject: serialNumber=93d12b2a46ecf69dc178552b7c848fd4523f40255befc503ae3f9f45ac59e299, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a4:96:38:dd:65:b0:e2:a5:99:32:4a:fb:05:
                    30:d7:12:6d:b2:d1:dd:a8:bc:ee:53:37:de:6a:a9:
                    5a:b4:d1:7b:a2:09:ce:fa:f0:86:f4:a6:80:a3:d2:
                    88:c3:04:ab:20:01:0c:ee:e8:6a:81:f7:d0:02:d0:
                    44:df:6f:82:03:83:34:75:2f:32:ba:d8:a6:ee:e7:
                    c7:11:48:07:6d:72:64:ce:7f:31:4a:38:4e:5d:56:
                    7b:6b:9b:85:28:63:b4:1b:a4:e8:9d:32:49:a3:09:
                    16:95:f9:7a:a4:57:8e:a8:ef:01:8e:6f:6b:b4:cb:
                    76:70:c9:35:86:c8:85:54:23:6c:60:eb:60:8b:d8:
                    dc:28:22:07:de:c6:c2:35:e9:00:20:88:55:75:6f:
                    0f:6a:24:4f:f8:60:45:1c:5f:e8:26:17:fe:95:bb:
                    7c:13:97:68:8b:8e:3b:49:49:95:07:bd:d9:6e:00:
                    e1:8c:04:0d:33:f1:6b:65:c0:71:d0:ae:1b:f9:9c:
                    a0:85:8b:32:6c:99:e7:0b:58:4f:2a:92:70:be:66:
                    c6:50:ba:40:5f:21:bf:c5:39:4a:32:aa:c6:14:5f:
                    14:13:52:22:c8:cc:50:3f:4c:b3:df:4a:19:dc:76:
                    29:07:3b:71:83:34:2f:2d:a1:6b:0a:be:04:09:f8:
                    a8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3A:AE:19:6E:CD:5C:67:3B:47:DC:11:DE:31:35:B7:76:F9:DA:1F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ada0743a-79c7-48b3-88a0-93b29b83e7db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:16:15:38:24:b8:12:6d:c9:69:e3:f1:c2:a9:8d:8d:0e:e6:
         41:2f:09:a3:b2:6f:bf:42:7d:68:4d:d3:5a:55:0f:65:59:e1:
         41:22:15:c0:25:4d:21:32:7f:0f:1e:0e:d6:30:c4:65:0a:06:
         db:9f:04:1b:14:15:a4:46:96:07:b2:2f:de:b6:dd:be:7d:33:
         53:36:a9:6a:f3:07:29:1b:2d:73:62:2f:b6:34:97:f9:cc:37:
         a0:d4:25:70:3e:e2:a8:f6:48:e4:27:8b:68:b1:2f:ae:48:ed:
         df:71:21:ef:a7:ea:d7:da:43:db:8b:b6:c6:ef:a0:cc:73:49:
         02:56:a0:10:57:d8:5a:46:8f:89:8f:f1:23:77:72:2c:b3:d9:
         cc:fd:b2:be:03:18:a4:9b:5b:19:d4:ea:11:e7:20:ff:b2:9e:
         75:ae:17:15:0d:1d:cb:31:8a:38:41:45:4f:77:c7:68:14:49:
         96:a6:34:b9:ad:db:f0:50:f7:3a:76:fa:18:61:46:4e:f2:71:
         70:30:4c:19:5d:f3:fa:a5:38:5a:14:20:59:ac:0b:5c:61:d7:
         0f:57:71:79:c1:c8:4a:47:5c:9d:90:88:fe:8d:4c:12:95:59:
         9a:24:f9:aa:20:ae:9b:b9:e0:8b:41:fa:87:0c:83:90:65:39:
         f0:9e:88:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----