Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ba5077b9-536c-4fae-986a-11ab98007a5d.roa
File:                     ba5077b9-536c-4fae-986a-11ab98007a5d.roa (raw, json)
Hash identifier:          cmdO4tYlSBKw2OeGy/rpyMVGqZshS3/h5N41ZSZUIeA=
Subject key identifier:   9D:A7:25:5B:CB:BB:04:E2:2B:DA:44:2E:3E:FB:7B:E6:EE:EA:A3:73
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5560331EFB9CAA235BEE4B354E51E205389027A1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ba5077b9-536c-4fae-986a-11ab98007a5d.roa
Signing time:             Mon 07 Nov 2022 00:00:00 +0000
ROA not before:           Mon 07 Nov 2022 00:00:00 +0000
ROA not after:            Thu 10 Nov 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:60:33:1e:fb:9c:aa:23:5b:ee:4b:35:4e:51:e2:05:38:90:27:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Nov  7 00:00:00 2022 GMT
            Not After : Nov 10 23:59:59 2022 GMT
        Subject: serialNumber=6905cb4004a1a93689a8596c89932b35dc4436000ce0b8444e2d7d51808d2326, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:4b:9d:36:f6:db:55:8f:ea:d7:a7:42:82:
                    3f:00:eb:af:89:af:28:8d:4c:8e:0b:95:d1:30:f6:
                    a8:e8:66:50:f0:6f:55:43:56:de:54:3c:da:e1:83:
                    42:fa:25:9c:49:2a:b8:f0:a7:97:c2:b7:a0:0a:96:
                    d8:42:85:ed:17:6e:42:0d:ac:a2:1d:c2:96:60:95:
                    33:2f:92:16:73:49:f4:67:54:b7:c8:8f:2f:0c:67:
                    ba:86:7e:fb:5c:2b:70:29:43:9c:0e:44:54:aa:90:
                    c6:ff:1a:c3:c2:8c:7f:fb:77:53:70:48:6b:d9:c0:
                    71:cd:bc:76:a0:95:d8:bb:56:f1:27:50:50:b5:5e:
                    c1:78:fb:2e:02:bd:ec:cf:0b:4a:90:2f:28:7d:a3:
                    e2:22:90:f6:80:2c:0f:a9:c4:31:e9:be:7c:1e:50:
                    ac:b2:3c:72:b0:7d:8c:21:29:f9:8d:fe:43:ae:17:
                    a6:cc:25:38:6c:15:1f:f6:cf:68:c7:95:63:b0:3e:
                    f3:5d:38:be:83:7f:78:67:64:50:f8:ee:67:c3:8d:
                    61:6f:24:f8:eb:f8:6b:8e:a0:a2:fe:47:32:5e:dc:
                    1e:59:7c:76:4f:99:a0:05:c3:5c:e3:8b:90:5f:8d:
                    5a:db:fa:51:fa:f4:c8:19:88:6a:4d:e9:7a:a3:de:
                    9d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A7:25:5B:CB:BB:04:E2:2B:DA:44:2E:3E:FB:7B:E6:EE:EA:A3:73
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ba5077b9-536c-4fae-986a-11ab98007a5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:39:dc:40:ce:d1:57:53:d5:e4:ed:89:50:96:36:54:11:0f:
         0a:61:fe:af:71:21:77:8d:07:b7:61:32:52:9e:94:0b:42:83:
         7c:69:3a:db:e1:54:6b:64:1e:33:da:cb:ee:70:f8:f2:0c:0c:
         4d:3e:ce:11:8a:44:d8:5d:e5:50:fb:22:21:a4:32:d0:ee:20:
         e8:1c:16:1c:11:92:9f:c4:3f:97:55:72:b6:e7:4e:25:74:ca:
         b8:49:8b:6b:75:16:1e:11:f1:16:fc:d0:27:55:b0:8c:8c:32:
         c6:0c:9b:09:96:bf:1f:c9:28:55:c6:b2:b8:34:ce:a8:45:bd:
         ae:c0:2e:44:f4:0c:29:f1:6d:5f:2e:9a:54:1d:ae:97:22:de:
         2f:c1:7f:5c:3a:72:78:0c:87:48:2d:41:af:23:5c:40:17:0d:
         23:91:53:9d:ce:f0:81:92:6b:fd:82:2c:bd:36:1e:71:c6:69:
         3f:03:74:23:d3:a0:14:06:ed:aa:d0:12:db:ef:85:ea:c7:85:
         07:76:ea:54:c6:01:4a:c1:e5:bd:62:81:0b:c5:96:6c:b6:12:
         fc:e8:59:79:6d:81:9f:b0:72:2b:65:b2:e2:55:26:60:f7:ae:
         ae:be:e4:37:3a:a9:c4:6a:fb:18:ec:9d:66:d2:5c:70:5a:86:
         06:31:92:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----