Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cd79cb44-3de8-4610-bf34-4af5657a0026.roa
File:                     cd79cb44-3de8-4610-bf34-4af5657a0026.roa (raw, json)
Hash identifier:          UT0v4sVK/lZDZlyj5hUut8PsHLt7Y+nIqV4mOGmfBH4=
Subject key identifier:   D0:0A:F0:BE:0D:42:44:E6:F8:65:85:60:2C:6F:73:D3:6C:00:66:0A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       74B9E70087DF2A75B4AD1E7177380ABD639A3C77
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cd79cb44-3de8-4610-bf34-4af5657a0026.roa
Signing time:             Tue 27 Sep 2022 00:00:00 +0000
ROA not before:           Tue 27 Sep 2022 00:00:00 +0000
ROA not after:            Fri 30 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b9:e7:00:87:df:2a:75:b4:ad:1e:71:77:38:0a:bd:63:9a:3c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Sep 27 00:00:00 2022 GMT
            Not After : Sep 30 23:59:59 2022 GMT
        Subject: serialNumber=54cc8895c3711ae30482b4b30e6062fe3924f5a215ca6a9e03aa576d1cfc30e3, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:06:6a:9d:68:f2:38:8e:fe:92:87:e5:f0:d7:
                    59:03:6d:dd:7e:bd:8c:a3:58:d6:e2:81:c3:9b:e1:
                    a0:5d:5c:e0:ff:c5:5d:3b:fa:33:70:05:f9:57:6e:
                    85:de:ec:68:dd:56:b7:c5:5a:7f:7a:13:db:98:a5:
                    f3:56:93:99:8e:0b:1c:9a:04:d2:8c:45:56:00:24:
                    5e:f3:da:81:ce:9b:e3:e0:f8:2b:67:47:c9:b2:6c:
                    ca:de:2d:a5:02:66:eb:1a:45:ed:89:9d:26:cd:75:
                    e6:54:8d:82:27:2d:3b:f6:b3:b7:a3:9b:88:d8:b1:
                    c5:b5:9e:4b:3a:be:aa:6e:ed:e0:db:7c:27:24:0b:
                    f3:34:e8:1c:e7:8f:39:cc:6f:50:b1:b3:b0:1b:79:
                    1f:3f:fd:c3:da:5c:d3:c5:37:d0:5b:33:58:35:78:
                    58:2a:ab:89:08:db:85:cb:86:17:2d:9f:75:80:99:
                    d4:60:38:20:c5:59:f1:f8:9a:e8:a7:5e:d1:e5:f3:
                    77:d0:db:cd:95:2e:1a:96:75:4e:43:4e:3b:11:db:
                    5b:41:4b:fc:a5:eb:8f:57:19:53:46:b7:6c:82:1f:
                    fb:fa:75:8a:99:06:49:db:30:a9:1f:c5:c4:aa:38:
                    be:7b:4a:07:06:6f:0c:c0:7f:84:58:00:56:91:99:
                    92:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0A:F0:BE:0D:42:44:E6:F8:65:85:60:2C:6F:73:D3:6C:00:66:0A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cd79cb44-3de8-4610-bf34-4af5657a0026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:08:48:f6:f7:ac:7f:c0:82:dd:91:f3:f2:36:d7:d4:6b:d8:
         93:9a:ce:18:79:f0:ca:c5:5f:8d:33:0b:d9:81:9c:6a:36:6d:
         c8:ec:78:0b:b8:bf:41:1c:28:8d:3d:ae:ff:8d:45:db:51:7e:
         dc:1e:9e:32:32:08:14:01:a0:e1:e2:f3:6d:83:4b:36:e4:41:
         be:03:b8:cc:ce:35:e0:c5:df:68:80:71:a9:4e:c1:3c:1d:5b:
         21:fb:57:17:01:6c:ac:b0:f3:8f:c2:11:0b:49:74:3e:aa:9f:
         ec:07:b2:c6:84:51:e0:a6:d4:16:aa:10:86:92:f5:76:be:d6:
         92:99:1e:00:82:31:9d:32:1b:e3:9a:9d:da:ac:c4:5c:fa:f8:
         21:33:af:39:ec:c8:4c:9c:59:be:f3:32:8f:20:ba:0c:46:d0:
         08:ed:ba:31:fd:08:79:ba:37:30:02:fa:ab:83:44:e6:0d:b0:
         d7:3e:9c:63:92:ce:17:c0:bf:b2:c6:0e:c5:44:b6:d8:11:51:
         88:eb:de:a0:dd:03:15:f3:88:74:b3:7b:d2:55:c2:18:1a:cc:
         b0:4a:62:94:6e:5b:df:e2:7e:df:9e:15:c2:52:ad:a2:df:92:
         4e:e6:13:b2:00:ec:7e:0f:22:e3:9a:4d:59:f4:c9:cc:b0:db:
         14:5b:9b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----