Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c5f98e82-3605-4c70-ad15-65fe370fbd3d.roa
File:                     c5f98e82-3605-4c70-ad15-65fe370fbd3d.roa (raw, json)
Hash identifier:          /1UehCzZXE5xIlaN65vWWv4/F7VrjzFzzrBvskeY3sQ=
Subject key identifier:   19:F0:0D:AE:84:18:43:83:E8:E4:34:AA:3D:F2:23:76:20:F4:6F:64
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6F313664A51D674BEB27D2F3F3E123AE7B8E54B3
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c5f98e82-3605-4c70-ad15-65fe370fbd3d.roa
Signing time:             Sun 30 Oct 2022 00:00:00 +0000
ROA not before:           Sun 30 Oct 2022 00:00:00 +0000
ROA not after:            Wed 02 Nov 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:31:36:64:a5:1d:67:4b:eb:27:d2:f3:f3:e1:23:ae:7b:8e:54:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 30 00:00:00 2022 GMT
            Not After : Nov  2 23:59:59 2022 GMT
        Subject: serialNumber=63fa4d731658940c0e66852efed99c84f56f665300afdd770b79bfe6996e8a43, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e9:89:e5:1a:40:0e:cb:0d:fa:bc:29:65:0e:
                    22:5f:89:3e:dc:67:75:6a:0e:01:0b:52:37:86:2d:
                    5d:ba:e1:7c:bf:f0:88:98:29:c6:12:02:fe:76:8f:
                    dc:58:ee:3e:34:6d:00:5e:aa:38:3f:a6:de:a6:c9:
                    f2:09:b1:09:45:6a:93:43:c2:f1:98:48:bb:04:39:
                    83:0c:7b:75:c9:2b:d8:14:f4:b1:93:53:30:26:dd:
                    95:d8:37:9b:9e:a4:cb:b4:83:f5:90:01:99:75:70:
                    5f:7c:51:22:82:77:ae:c1:61:04:ce:44:ec:1a:b5:
                    d6:68:ff:58:e0:54:b2:21:2c:ef:a0:79:cf:10:d0:
                    fd:68:4a:f0:21:64:84:18:72:9c:04:62:0d:a9:d7:
                    d7:8b:68:fd:1b:52:3b:dc:3c:54:75:5e:3c:76:9e:
                    11:be:c0:ca:7c:6c:b2:eb:92:63:96:db:8f:54:8c:
                    27:74:e6:2a:4d:8b:7a:12:d1:c4:c4:f4:73:10:13:
                    1d:91:0b:13:23:9c:29:ed:df:22:f6:82:e9:a2:ef:
                    ca:64:f6:ce:71:9b:49:91:c7:86:ff:e8:52:8e:d9:
                    42:2d:be:17:64:f0:83:23:fa:5b:12:88:79:f1:77:
                    d3:05:c7:76:4e:b0:12:81:72:62:b8:07:6c:31:4b:
                    a8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F0:0D:AE:84:18:43:83:E8:E4:34:AA:3D:F2:23:76:20:F4:6F:64
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c5f98e82-3605-4c70-ad15-65fe370fbd3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:66:e6:18:f1:bf:84:bc:cb:31:c8:1f:53:49:78:b9:8e:c7:
         16:6f:b2:d8:e9:66:43:4c:e4:56:9e:87:4e:20:72:45:9a:07:
         0c:39:df:95:84:e2:53:38:8a:66:91:a8:26:95:75:7b:44:22:
         18:f6:42:83:3f:0d:17:d4:0f:c1:66:a5:10:fb:c8:b0:f1:d8:
         00:21:c7:c9:ba:8d:66:c3:bd:3f:90:83:a6:ba:05:dd:02:05:
         41:25:3e:d4:2e:60:80:38:b4:2a:45:b3:ae:b3:c2:7b:cb:f8:
         05:7e:d7:bb:27:b6:0a:c3:ae:e6:53:7a:40:64:c3:76:2f:52:
         1d:da:eb:64:e2:d4:00:d3:b8:ef:3c:b0:18:97:67:a2:08:99:
         16:ca:5b:25:e7:d8:e3:c9:77:2e:a8:ad:38:f8:58:31:f7:4b:
         6a:19:d5:a4:63:f8:ff:83:d9:f8:a0:ee:be:87:8b:87:0c:8c:
         58:32:55:d4:37:1d:71:ab:eb:1f:67:22:69:97:80:ec:f8:67:
         1a:b9:0e:12:90:4c:af:e2:c4:b4:09:70:d0:52:17:93:70:4b:
         7b:49:6e:2a:63:71:1b:41:b3:4b:20:39:d3:a1:63:0b:d4:37:
         9e:df:2b:84:a5:23:f0:aa:f0:38:d1:f8:3e:e5:d0:51:63:7c:
         a0:4b:f1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----