Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ae64ac54-e4c6-4b76-a037-019421d9ecaf.roa
File:                     ae64ac54-e4c6-4b76-a037-019421d9ecaf.roa (raw, json)
Hash identifier:          nQ7v28GMv+Lho1GhXWarc0njfGeMS5Pu15BSnBYhUc0=
Subject key identifier:   8D:C7:B7:2B:F6:6B:E2:28:6C:61:92:99:B9:15:76:EC:3A:A6:54:4D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5B0AC64B71CBD1C04F920439D067F6B463CE164F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ae64ac54-e4c6-4b76-a037-019421d9ecaf.roa
Signing time:             Thu 13 Oct 2022 00:00:00 +0000
ROA not before:           Thu 13 Oct 2022 00:00:00 +0000
ROA not after:            Sun 16 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0a:c6:4b:71:cb:d1:c0:4f:92:04:39:d0:67:f6:b4:63:ce:16:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 13 00:00:00 2022 GMT
            Not After : Oct 16 23:59:59 2022 GMT
        Subject: serialNumber=3512b163eb5a4d08f2e0ed72aaed9c71a98a453240b17835d1e8d11acece4fbc, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:ae:63:16:a0:b5:27:f3:4f:6b:0c:6f:c2:
                    ec:15:b5:78:bb:3f:7c:2f:d3:82:67:4e:c1:85:c5:
                    08:34:7c:94:60:66:7a:a1:e5:47:d7:ac:02:8b:40:
                    5d:c9:ab:e6:73:42:d5:09:7c:93:95:76:53:86:f5:
                    c4:52:76:ed:7a:a7:51:b0:ee:b2:d9:8a:29:d8:89:
                    50:52:99:cc:0c:85:91:4e:24:6f:69:8d:17:1f:20:
                    a4:83:2e:13:16:87:57:db:47:27:ef:c6:3b:f4:22:
                    49:60:ae:e8:ea:df:a1:fe:34:ae:7d:e4:8d:8e:d8:
                    94:19:d8:e7:5e:07:56:ab:71:44:d9:e7:9f:1d:44:
                    c6:55:36:f2:a5:a6:36:89:0d:94:35:c8:ae:ff:71:
                    1f:6a:c3:42:0f:e0:13:0c:a1:f1:8d:ee:b3:54:57:
                    f7:f5:5a:70:72:41:db:00:44:93:63:37:07:00:38:
                    51:a9:cf:4b:05:19:f6:94:cf:33:a1:83:7c:08:cf:
                    46:fd:86:e0:04:b6:cd:04:3b:9b:b6:6b:89:47:81:
                    43:b4:c6:3b:37:c8:6a:89:8b:48:11:03:83:50:c6:
                    1e:5c:a2:cb:bc:47:d1:17:5a:29:9b:32:1b:44:87:
                    07:c7:02:77:51:86:39:38:a9:f2:d9:0d:56:b3:0a:
                    14:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C7:B7:2B:F6:6B:E2:28:6C:61:92:99:B9:15:76:EC:3A:A6:54:4D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ae64ac54-e4c6-4b76-a037-019421d9ecaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:0f:ae:96:f2:b8:95:27:53:68:2b:9a:40:a9:f3:77:37:f4:
         ec:71:b7:9f:2c:f3:0e:01:c5:82:fc:72:c8:c4:f6:9b:9e:fd:
         03:d2:32:ed:3d:a6:21:92:96:cc:50:ab:69:b7:47:c2:dd:46:
         eb:68:87:e7:37:32:97:54:3f:63:9e:fc:b2:3d:a3:95:44:45:
         98:31:0b:b7:b8:a7:c8:fb:ec:eb:d1:f0:7e:bb:c3:22:70:cf:
         b5:1a:c4:75:97:fa:61:c0:85:5f:af:40:4a:7b:50:73:8c:19:
         36:12:a6:38:c4:e8:aa:5c:c8:d0:d7:b2:8c:78:ef:8f:37:fb:
         04:24:f4:6a:cc:77:e4:b7:c0:68:33:98:22:f0:89:fd:61:3a:
         1f:a5:5a:04:d0:74:fa:f2:bf:57:e6:4c:82:cb:24:95:eb:b7:
         8f:e9:92:19:b8:60:31:a3:92:8d:c1:1a:8e:8c:76:60:58:76:
         95:0a:a7:96:76:0b:9c:e9:61:d7:b0:a2:aa:6f:38:e4:73:44:
         66:80:da:c9:24:aa:a8:b6:11:c2:73:37:e1:ac:ae:71:8e:dc:
         72:ce:ce:df:9e:00:8f:a4:e8:d0:98:0a:62:13:e5:f7:2b:3c:
         85:c0:a3:89:2d:34:88:99:a8:7d:7a:02:be:a6:71:86:c5:e2:
         3a:b6:79:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----