Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c47406c9-df4c-42ee-b1cc-735ef79305e6.roa
File:                     c47406c9-df4c-42ee-b1cc-735ef79305e6.roa (raw, json)
Hash identifier:          KxkhlQxtqhnyitW0PAs0ZDzzLcoq3LlyMPeaIN29E4M=
Subject key identifier:   7E:BC:66:03:46:B8:CC:5B:D2:89:5C:15:C5:9A:ED:91:E1:75:08:3C
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0ED390C516E2BD9BAE11856BD5A35BE1D37717B4
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c47406c9-df4c-42ee-b1cc-735ef79305e6.roa
Signing time:             Sun 11 Dec 2022 00:00:00 +0000
ROA not before:           Sun 11 Dec 2022 00:00:00 +0000
ROA not after:            Wed 14 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d3:90:c5:16:e2:bd:9b:ae:11:85:6b:d5:a3:5b:e1:d3:77:17:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 11 00:00:00 2022 GMT
            Not After : Dec 14 23:59:59 2022 GMT
        Subject: serialNumber=b4f5ef6afc4cfb80356dc97a49bb5f6a7244c96f01c9ee3d850a1420f5143f0a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:96:4d:64:63:e2:22:1f:f1:1f:03:18:70:
                    d8:1c:98:29:16:a5:28:21:4f:90:47:63:0f:f2:af:
                    a8:c5:29:13:78:e6:32:aa:b3:b5:4d:c9:91:f4:1c:
                    19:1e:c0:13:17:0a:f6:33:26:da:cc:2c:2a:fc:cc:
                    24:d4:26:79:fe:58:d5:62:90:ba:af:7e:b0:e9:9f:
                    39:0f:ff:fd:97:95:6d:7a:0b:70:4b:88:00:b9:4c:
                    3d:62:3f:2d:89:52:2f:63:4f:de:cd:e8:6e:5e:c5:
                    ee:55:23:37:80:da:3b:ba:b3:4a:0a:d9:b4:46:7b:
                    8f:15:75:aa:76:46:a7:d5:1e:47:5a:6e:1c:0e:41:
                    e0:ee:a5:c8:b8:72:96:50:41:92:bc:1d:cf:a1:88:
                    16:03:14:5d:a2:b8:48:86:73:17:dc:ff:16:c5:03:
                    13:bc:cc:90:44:f3:58:08:5d:b3:73:8f:62:b2:83:
                    c0:b7:fd:b2:cb:a6:90:b4:90:40:77:bf:7c:dd:b2:
                    81:c4:78:d5:23:63:61:7a:30:08:29:dd:1b:5d:7f:
                    5c:49:b4:de:a3:03:12:18:75:0d:dd:7e:ae:c1:fd:
                    e3:3e:a9:52:e7:64:b4:2a:92:60:f1:99:bb:6a:c9:
                    fc:9c:0e:2f:ac:09:5a:d6:a6:f8:d3:bb:93:85:93:
                    c0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BC:66:03:46:B8:CC:5B:D2:89:5C:15:C5:9A:ED:91:E1:75:08:3C
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c47406c9-df4c-42ee-b1cc-735ef79305e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:5d:cc:c0:d6:84:9b:2a:a2:5c:09:c4:34:9b:14:f8:d2:0f:
         86:98:ed:ff:03:64:e9:d6:a0:a6:73:c8:8d:65:bf:35:fc:32:
         ef:a5:83:c9:55:be:e7:f6:fe:12:7c:3d:e3:64:2d:4d:5f:8e:
         c7:99:39:4d:75:97:3b:53:33:5d:65:03:d2:87:11:cc:67:8e:
         7c:bb:6d:e4:56:b2:b7:57:9f:d5:ac:ca:7b:61:f6:4b:52:bd:
         8c:e7:9e:b3:d2:b5:d9:d6:a1:b6:e3:f1:f8:6e:56:32:72:9f:
         60:40:f2:02:b9:74:6a:3f:21:89:d8:47:6b:cb:47:62:a7:63:
         37:bd:a3:7c:98:d1:83:32:a5:ff:88:e7:c5:57:04:37:4c:1f:
         82:3d:c6:1e:76:d2:00:71:02:89:f2:bc:43:0f:1d:5a:a8:2a:
         6e:74:67:02:eb:b3:20:8a:36:aa:e5:42:af:10:bf:8e:1b:c8:
         58:52:8e:c1:33:7c:59:0a:dc:21:66:cb:eb:16:9c:a8:5d:7a:
         03:1a:79:62:f5:46:97:2e:5d:96:d9:c9:e5:ea:48:84:7c:74:
         a1:c5:a8:ea:93:d3:dc:08:c6:e1:aa:be:2d:05:91:f7:40:27:
         c4:94:98:35:75:74:01:75:79:cd:c9:74:95:5d:d2:50:d3:68:
         05:48:93:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----