Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b6e6dc62-8747-43c4-90c2-d1f5c07bd363.roa
File:                     b6e6dc62-8747-43c4-90c2-d1f5c07bd363.roa (raw, json)
Hash identifier:          6FfVmyMBWj/Ni9zqohIfpRfLuRqfoTAG/pcR75wyths=
Subject key identifier:   2B:50:DF:3C:DC:94:D3:35:E1:AF:0C:8F:DB:8D:DD:9E:AB:16:4E:44
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       45AF8C8E6700EB77968FE32D8403446554FA8DA0
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b6e6dc62-8747-43c4-90c2-d1f5c07bd363.roa
Signing time:             Wed 14 Sep 2022 00:00:00 +0000
ROA not before:           Wed 14 Sep 2022 00:00:00 +0000
ROA not after:            Sat 17 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:af:8c:8e:67:00:eb:77:96:8f:e3:2d:84:03:44:65:54:fa:8d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Sep 14 00:00:00 2022 GMT
            Not After : Sep 17 23:59:59 2022 GMT
        Subject: serialNumber=a400a5cbc12541b12d5f8a1ae60f194d692e5e710b5969497021eae6d847c2af, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:b3:36:80:5d:c3:a7:1c:ca:5f:80:51:73:
                    b3:08:cc:00:fa:7f:b1:d0:4d:9d:0b:b5:10:4f:75:
                    1f:ad:74:96:3d:32:9e:a0:9c:a2:9e:e3:61:19:f5:
                    f6:d7:7e:c3:77:e5:64:a4:1b:58:59:7a:ba:ec:d1:
                    e0:4e:da:6f:9e:01:30:96:32:c8:4e:56:3a:ab:4d:
                    29:a4:c8:1b:e5:20:d6:39:dc:b4:d9:37:25:ee:6a:
                    f2:31:18:84:12:da:8b:97:60:27:e7:48:10:f6:e4:
                    48:8e:8d:a5:fd:ea:75:4f:74:63:23:12:87:f2:43:
                    60:0b:9d:57:51:0c:25:93:c4:8c:26:b7:1f:26:3a:
                    24:70:dc:ea:99:79:4b:d8:1c:f4:7e:56:f9:a0:0c:
                    a3:a1:51:33:dd:f7:91:13:e1:93:16:c7:fc:4b:6f:
                    a9:47:91:22:11:a2:34:90:b0:91:d3:10:58:54:1a:
                    77:10:3b:7f:e2:e7:c4:99:f0:b7:dd:03:ab:38:88:
                    0c:d1:65:9f:11:3b:6e:a4:34:25:34:40:83:c1:ab:
                    cb:5e:8e:13:e9:ac:4e:c8:d4:62:58:7a:ad:c2:37:
                    3a:c9:3a:a8:f6:13:f4:f5:08:a0:ee:06:f0:79:dd:
                    d4:f7:50:52:bc:29:50:19:4e:83:da:dd:bb:0c:2d:
                    4f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:50:DF:3C:DC:94:D3:35:E1:AF:0C:8F:DB:8D:DD:9E:AB:16:4E:44
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b6e6dc62-8747-43c4-90c2-d1f5c07bd363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:21:5a:3f:23:66:11:4a:99:b0:28:42:eb:d7:a5:e2:2f:c1:
         bd:f7:25:4f:63:b8:37:70:85:22:c7:c7:ea:26:e5:f5:f0:b5:
         7d:a0:1f:ab:5e:5a:4f:6e:33:d8:68:46:16:6d:11:75:f4:f6:
         a8:1d:b3:96:18:04:5b:40:bd:de:87:f6:bc:0c:17:59:73:1f:
         67:d0:b5:c3:aa:d1:a9:61:61:04:c2:47:9f:4b:1d:98:c7:ea:
         73:0e:2d:1e:23:f9:09:af:8c:d7:83:30:62:89:7c:24:d3:a8:
         c9:1b:f9:eb:d1:1c:0e:e8:73:f1:90:f8:ed:5f:1a:d6:c6:a3:
         ca:b2:30:b4:13:ee:09:9e:4d:6a:e9:73:87:b3:8f:45:32:94:
         5a:c7:ad:b0:34:e8:68:93:7b:30:f2:57:20:1a:72:9c:f9:71:
         ed:81:33:d5:d7:88:5c:11:aa:97:ba:85:29:bc:05:1d:77:b2:
         e1:c5:b9:49:9b:6b:08:c2:d7:0d:ad:5c:5a:59:c4:4d:1e:f3:
         90:8a:b0:74:05:70:33:e5:c2:66:66:da:67:d5:14:a4:cb:0d:
         e5:1b:8c:cc:3e:2d:b4:04:96:2b:99:97:3f:89:53:2c:b1:1b:
         d9:e8:cd:7d:f1:90:fc:5d:27:78:f3:fb:7c:d4:ce:a3:a3:27:
         39:fd:19:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----