Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d6ef8410-c66c-41ba-aa7f-a97c553660f8.roa
File:                     d6ef8410-c66c-41ba-aa7f-a97c553660f8.roa (raw, json)
Hash identifier:          /PDx4m9IUy1Lyic0FCSppjiXWMimd0GVYBe+3WErEwo=
Subject key identifier:   A4:57:65:2A:F5:AC:F2:15:E2:F0:3A:D6:E6:C7:82:57:D0:60:A3:86
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       38229D51293E0A4F7B8AADC2F34F4805B489C72A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d6ef8410-c66c-41ba-aa7f-a97c553660f8.roa
Signing time:             Thu 20 Oct 2022 00:00:00 +0000
ROA not before:           Thu 20 Oct 2022 00:00:00 +0000
ROA not after:            Sun 23 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:22:9d:51:29:3e:0a:4f:7b:8a:ad:c2:f3:4f:48:05:b4:89:c7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 20 00:00:00 2022 GMT
            Not After : Oct 23 23:59:59 2022 GMT
        Subject: serialNumber=23d8bf04de596ec5e75aaebbf96b815837a71af77332a17afc47802a38b3e483, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:97:c4:f9:b1:56:c0:54:e5:4d:27:60:55:6c:
                    97:c8:97:eb:2d:ba:31:67:a6:51:c8:5b:71:4b:ba:
                    73:32:00:a2:bf:20:1a:63:4f:c1:91:cf:b3:d2:e7:
                    5f:86:e7:68:cc:60:64:9f:1f:ec:18:4e:69:4c:fc:
                    8b:f3:83:2a:ec:23:9f:ec:18:ee:26:9e:e2:b5:25:
                    50:13:d5:fb:18:36:2c:23:09:1f:a9:72:34:cb:c4:
                    3d:e7:59:e6:07:f2:e8:f7:57:24:2e:d3:56:1b:72:
                    9c:e2:7c:94:6c:61:99:d7:c3:a4:cb:91:b5:07:15:
                    b7:e2:1f:4f:48:ca:2b:8b:4c:93:ec:b3:0b:2f:1f:
                    18:7e:65:0e:35:2e:39:ca:70:15:bf:ab:69:78:55:
                    58:07:6e:2a:d1:d1:d5:19:ad:13:80:01:16:3f:54:
                    5c:a7:00:d5:15:32:ef:87:c9:94:7a:d0:73:1e:64:
                    c0:43:ba:3f:1d:62:76:d1:91:7c:d0:fc:2f:f2:73:
                    3a:ff:a2:f3:a1:87:8f:74:94:36:e7:19:9a:55:fa:
                    69:c8:2e:53:2c:0d:01:d6:0b:9e:07:3e:5d:71:9a:
                    64:85:5d:60:9c:55:6c:ac:e1:64:eb:aa:23:76:2a:
                    a6:d7:ef:2a:2e:a2:49:df:d6:bb:ab:6e:96:16:99:
                    32:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:57:65:2A:F5:AC:F2:15:E2:F0:3A:D6:E6:C7:82:57:D0:60:A3:86
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d6ef8410-c66c-41ba-aa7f-a97c553660f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:06:eb:d9:fd:f4:af:6d:92:75:54:b1:2f:e2:d7:da:02:bd:
         80:c3:c9:f0:c6:1c:e0:8c:e9:c9:c6:53:1f:99:44:46:1e:4f:
         bc:5b:e1:4f:7b:97:5f:16:ac:b9:3d:f8:68:9d:13:c0:9f:7f:
         0e:b8:7d:f9:80:84:b6:38:0e:90:bf:f8:48:ca:6b:92:32:a1:
         cf:95:46:9c:9f:4e:09:ba:31:44:11:f8:4f:90:8a:e7:01:ab:
         e0:56:72:71:81:b0:94:68:5a:b5:42:c3:89:41:4f:fc:cd:f3:
         1b:bd:a1:cd:ed:c3:dc:88:f0:b6:c5:79:32:fe:de:4b:88:67:
         b2:ae:49:6b:86:0d:1c:d8:4c:36:97:fa:53:4f:c3:19:da:15:
         a2:6b:12:6c:ec:0d:da:81:74:ce:54:7a:6c:2d:f7:6e:86:30:
         67:1b:9b:da:23:5b:d6:52:24:3c:e2:c8:3d:c4:b4:94:6c:8f:
         a9:11:6d:50:b8:bb:4a:52:d8:23:89:6b:a9:d2:e5:0b:5c:34:
         7f:00:69:6f:3d:61:5f:e0:a9:03:64:b4:a1:32:78:ae:d4:b2:
         ab:a3:68:a5:32:4f:fb:5b:31:98:19:fe:ba:f2:4d:f5:9a:c1:
         90:1f:81:4f:eb:f7:57:76:fc:41:db:a5:a1:13:d7:af:63:04:
         c8:d5:38:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----