Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/be3ebb1f-ef72-4343-98a5-bd22d81bbfd2.roa
File:                     be3ebb1f-ef72-4343-98a5-bd22d81bbfd2.roa (raw, json)
Hash identifier:          73/pgaBwFJ8YpNxjwQpmyJiJFdmCh9q6UyyY0wLlZQg=
Subject key identifier:   98:BA:24:23:E7:61:9F:59:E8:0D:8A:53:F7:9A:91:0B:71:6C:68:97
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2BC0DEC5E9A8328BD6D6B308F7B6F46487F75111
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/be3ebb1f-ef72-4343-98a5-bd22d81bbfd2.roa
Signing time:             Thu 17 Nov 2022 00:00:00 +0000
ROA not before:           Thu 17 Nov 2022 00:00:00 +0000
ROA not after:            Sun 20 Nov 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c0:de:c5:e9:a8:32:8b:d6:d6:b3:08:f7:b6:f4:64:87:f7:51:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Nov 17 00:00:00 2022 GMT
            Not After : Nov 20 23:59:59 2022 GMT
        Subject: serialNumber=0fb5e7be45fb983fe4071d0d05a35b5249701526ea97c5d71a4ac674db9d033a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c9:55:5e:8b:6d:1d:6d:5f:93:9c:04:c3:73:
                    6f:80:0f:dc:c1:b9:10:4a:37:ce:7c:ae:30:39:ab:
                    f0:64:01:58:70:8b:f4:1d:3a:2a:e8:4f:b9:96:92:
                    53:82:09:28:d6:be:f5:66:8d:9f:0a:0d:67:52:4c:
                    e9:85:d3:57:21:6b:9a:b9:a1:1f:ea:5d:7e:1f:a3:
                    1e:c0:65:e9:9f:a0:3f:82:76:90:08:9a:a8:4e:d5:
                    51:de:e4:14:bf:d1:bb:67:b4:3e:0a:56:90:21:f4:
                    59:cd:b1:a3:21:d2:98:eb:c1:7e:f3:08:d6:aa:f3:
                    3c:16:91:59:06:b0:72:56:67:a3:d6:fe:65:76:f1:
                    f2:0f:0d:d3:19:7c:d7:50:26:1e:fb:4d:36:13:39:
                    88:88:a8:3f:92:6a:a7:41:23:a7:fd:a4:bd:4b:47:
                    aa:92:2c:52:bf:6a:63:22:43:5f:72:e0:ee:6c:85:
                    ba:88:55:1c:49:f2:73:d6:6c:41:e1:4d:3b:5b:9f:
                    b2:00:ee:95:81:56:03:b9:41:8d:d6:e6:0e:6b:25:
                    12:9b:40:be:46:1c:b8:e3:11:7c:ae:71:40:c3:3a:
                    00:ec:fc:65:29:0b:3e:37:c0:a7:7b:f5:55:b4:2e:
                    6d:f9:03:6c:36:e1:6f:a8:6a:0f:51:29:6e:39:69:
                    95:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BA:24:23:E7:61:9F:59:E8:0D:8A:53:F7:9A:91:0B:71:6C:68:97
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/be3ebb1f-ef72-4343-98a5-bd22d81bbfd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:92:d4:c7:75:71:c8:6c:fc:4e:d6:ee:90:15:2b:b0:49:38:
         12:d1:3d:67:87:89:51:e1:7b:b7:95:0d:dd:9c:03:1e:3f:71:
         ad:79:96:02:3e:e4:0c:b8:a9:06:53:62:07:9f:e2:1a:29:de:
         83:55:1c:14:0b:09:43:24:53:dd:51:1f:7f:7e:aa:0b:f2:2a:
         63:cb:90:f0:b9:76:19:17:5f:cf:07:72:a7:51:be:88:4e:db:
         29:1a:c9:3e:c6:80:33:cb:b2:a1:2a:6d:3e:c8:3d:32:74:04:
         d6:d4:db:9b:68:30:ab:41:f1:98:af:52:d7:0d:99:d6:fa:59:
         c5:df:ad:0b:77:6b:cd:03:60:c9:17:c0:b3:31:2a:4a:22:0e:
         3b:47:dd:dc:aa:75:66:82:3f:9b:43:a9:8a:7d:1e:04:39:60:
         e1:85:ca:a2:f7:59:9d:a7:d4:48:12:d5:e6:b7:2e:d2:01:85:
         8d:c7:fb:f4:b3:23:40:98:b0:f2:79:63:2b:74:d9:46:ab:9c:
         be:65:ce:3f:9a:a4:a4:44:b0:77:9c:6b:4f:22:90:28:48:4a:
         59:97:26:bb:47:0f:ed:d1:a1:9b:8a:72:e2:f7:cd:71:57:0e:
         7a:b6:b5:cf:65:25:d4:ca:52:59:26:22:14:1a:87:ef:7b:7b:
         af:e0:2a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----