Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e0a3da9e-70c1-48bc-a668-159f114cde83.roa
File:                     e0a3da9e-70c1-48bc-a668-159f114cde83.roa (raw, json)
Hash identifier:          VKws1tDv+9WKbq5+iAUuSMgaAIDo7GJAQTh5oL08D/U=
Subject key identifier:   39:30:9E:41:C6:C4:4F:C0:A3:85:98:B6:0C:1A:84:AC:0F:51:5A:34
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4045340CB06A7BD9B9AF05A7C73963EFFD2FB980
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e0a3da9e-70c1-48bc-a668-159f114cde83.roa
Signing time:             Thu 01 Dec 2022 00:00:00 +0000
ROA not before:           Thu 01 Dec 2022 00:00:00 +0000
ROA not after:            Sun 04 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:45:34:0c:b0:6a:7b:d9:b9:af:05:a7:c7:39:63:ef:fd:2f:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  1 00:00:00 2022 GMT
            Not After : Dec  4 23:59:59 2022 GMT
        Subject: serialNumber=cff9b1358a12f0a8ac02bab48ab489abb1118391d84dad68309a8d3f8f4bbe50, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:9e:ce:e9:81:ea:f4:7e:fa:22:06:6b:b1:
                    c4:62:70:5f:31:e8:d4:8c:7c:cc:20:8b:8c:d4:24:
                    8b:4a:55:b8:a2:a9:cb:cb:bf:fa:1f:04:ef:5f:3b:
                    a1:d9:16:2b:8b:a8:2b:67:fb:c4:81:46:c9:cb:72:
                    00:b1:9a:64:01:68:8b:7b:1b:f9:a5:f5:ca:ab:93:
                    fa:56:c1:ec:ea:77:23:99:b4:8f:57:8e:21:02:f1:
                    b0:3f:83:a9:e0:af:ee:ba:f2:fb:d5:d7:40:62:61:
                    62:e2:8d:f8:9b:85:2f:49:d8:6f:6c:d7:4c:3e:87:
                    2f:56:03:bc:98:c7:5e:17:e3:0c:1c:14:d2:68:a7:
                    af:06:f0:e1:4f:31:99:04:1a:f0:94:89:0c:ca:15:
                    a3:b0:80:44:83:4d:9c:09:4b:1e:ae:d1:64:17:1f:
                    9d:0f:04:63:94:74:4c:17:26:01:1a:d3:c6:89:e9:
                    bc:b4:10:17:9a:ff:8d:79:bf:33:56:25:73:ca:8a:
                    cf:93:a9:59:55:5c:cc:2e:cb:ce:1c:be:0d:2e:d4:
                    c8:bd:c8:a0:cd:f5:44:9c:1b:a3:81:8b:52:0b:f0:
                    d8:fa:90:0e:6a:a2:e5:e0:36:69:a2:fd:57:b4:6f:
                    72:71:15:77:3c:b1:04:49:c0:6e:87:df:c8:94:eb:
                    fa:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:30:9E:41:C6:C4:4F:C0:A3:85:98:B6:0C:1A:84:AC:0F:51:5A:34
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e0a3da9e-70c1-48bc-a668-159f114cde83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:26:d4:60:ec:62:a4:9e:55:85:d2:d2:1e:0e:a6:8c:ea:a3:
         67:04:ba:99:60:75:24:4a:65:73:c0:46:3d:85:ab:e9:6c:6a:
         5b:33:b7:0c:1e:49:9c:0d:fa:01:46:25:39:2f:9b:f4:6c:74:
         bc:b1:c8:de:e0:ef:13:df:56:ac:0f:44:3c:7e:bb:64:4d:51:
         7a:1f:7e:f8:9b:b0:e5:47:a8:f4:59:76:88:df:7b:76:35:f4:
         df:d9:7a:92:ad:e3:96:be:16:5f:37:ce:e1:46:a2:78:ba:cc:
         b1:e7:2e:f9:51:ad:b5:89:4b:cc:8f:96:06:ea:65:e3:92:c6:
         cd:a3:3d:c5:3f:a8:8c:ce:ff:94:45:d2:7a:05:2b:2f:b4:ee:
         1c:cc:9d:3a:02:16:03:ba:b4:91:31:93:b6:f2:97:9f:02:bb:
         d4:ab:3f:e5:f3:9c:f7:e9:8c:a7:6c:5a:aa:ab:e2:dc:be:50:
         7d:ca:a1:23:65:b3:69:6a:69:6b:d7:59:49:99:06:10:ba:0e:
         a0:db:63:4a:4e:ca:ca:db:58:63:fa:67:9d:30:db:f2:f3:ea:
         1f:ad:61:9b:cf:23:a2:97:4d:6a:17:35:45:e8:af:c6:9c:a5:
         a7:18:39:a4:b2:01:31:e3:dd:64:60:46:90:e0:a2:33:d5:db:
         7c:de:86:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----