Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c4a4c9de-4a85-409c-87dc-73c5214bd993.roa
File:                     c4a4c9de-4a85-409c-87dc-73c5214bd993.roa (raw, json)
Hash identifier:          onA9EPHmZC2Gr5IjkvP7fIzhKsHBvVPrx9XtbNOCz9o=
Subject key identifier:   FF:9B:CF:8A:33:9A:2A:36:15:FD:99:7D:C0:64:C0:5D:C0:11:9B:10
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3925797DECCB9FF98AFE9EDC3EEA454366AF90EE
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c4a4c9de-4a85-409c-87dc-73c5214bd993.roa
Signing time:             Thu 03 Nov 2022 00:00:00 +0000
ROA not before:           Thu 03 Nov 2022 00:00:00 +0000
ROA not after:            Sun 06 Nov 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:25:79:7d:ec:cb:9f:f9:8a:fe:9e:dc:3e:ea:45:43:66:af:90:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Nov  3 00:00:00 2022 GMT
            Not After : Nov  6 23:59:59 2022 GMT
        Subject: serialNumber=31692fba974d2ce26aea51968c0a44832e21c218bd1bd6e42d8dc1467c4a50cb, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:fb:96:fe:8a:49:89:80:8a:d1:8a:ac:63:
                    1d:b4:3a:3a:57:36:d4:d7:32:33:4d:3e:79:52:93:
                    87:6b:ca:56:51:23:c3:90:ac:c6:0e:ba:83:a6:cd:
                    a4:7b:ae:67:02:69:39:07:99:db:ca:d7:96:ac:c4:
                    c3:be:e8:d3:ac:5c:82:e1:93:13:cc:bb:1c:8a:3b:
                    a9:eb:09:5c:f7:9d:39:42:7a:7c:cf:09:e5:25:71:
                    df:c5:89:67:50:fd:20:9f:15:9b:1a:94:16:f4:08:
                    64:a7:73:ce:b6:83:73:90:91:53:36:f8:f7:26:69:
                    80:e3:f8:4f:f7:d3:d2:ad:63:2c:a1:03:7f:d9:31:
                    e1:03:d4:78:14:ba:1d:4e:31:b5:d4:90:6a:54:75:
                    e9:ea:01:be:86:ca:21:e5:32:0b:6a:b5:99:11:16:
                    56:01:91:2b:37:a2:f6:1e:3a:a4:6e:bc:5a:08:07:
                    a1:94:a7:8f:91:c2:5a:7a:cb:6d:88:a2:84:7e:16:
                    0a:87:23:5f:6f:c2:9d:f8:2a:06:72:4a:d8:10:b2:
                    f2:0d:d1:e5:cd:79:a8:cc:72:d8:d6:28:86:a4:4c:
                    9e:68:53:45:27:d0:2f:27:ae:7b:91:1a:67:e1:77:
                    57:cf:d4:4d:59:c0:44:ca:7e:53:34:65:fa:c9:76:
                    bc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9B:CF:8A:33:9A:2A:36:15:FD:99:7D:C0:64:C0:5D:C0:11:9B:10
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c4a4c9de-4a85-409c-87dc-73c5214bd993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:35:76:f1:c2:73:a0:ce:fd:c6:45:fa:df:f4:41:c7:52:8c:
         94:bb:ab:8a:16:8a:98:9e:3a:75:e8:17:d5:c8:7f:0e:83:1f:
         21:56:c9:a2:b9:d0:89:df:eb:28:ed:1e:f2:4b:d0:0d:17:c3:
         14:a7:ee:63:98:35:75:e5:e7:ac:c3:52:d9:5d:88:32:e1:dd:
         ba:a5:ff:ca:7d:95:13:b1:7f:a5:be:a0:b1:e2:01:6d:07:74:
         0d:ef:6d:9d:ca:93:e3:8f:75:8d:c5:43:d6:07:c6:dd:36:47:
         67:4f:8b:41:7c:92:b9:9d:4a:06:21:90:17:a5:f9:39:58:c9:
         83:97:4a:f3:e2:a6:6e:1a:a5:0a:d4:36:04:a5:32:36:4e:88:
         a6:df:f3:47:3d:28:76:2b:7b:e6:ae:33:7d:3c:c3:23:18:99:
         7c:da:90:36:34:86:c6:53:4d:1a:51:af:27:78:1d:43:e6:6f:
         59:df:64:8e:3b:be:a9:fd:bf:7e:c6:67:4c:2c:ad:88:88:2b:
         5d:16:e7:34:9c:ce:3f:42:05:d3:24:ff:df:ab:08:60:3e:e5:
         c3:34:4f:28:e1:a1:ca:ad:89:47:e4:38:07:0b:a1:9b:48:1c:
         8f:3c:88:d5:91:b6:a8:2b:2d:cb:88:55:42:82:5f:17:7f:13:
         58:e9:68:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----