Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e9ad8327-9c27-4700-ac3f-771202b2f7c0.roa
File:                     e9ad8327-9c27-4700-ac3f-771202b2f7c0.roa (raw, json)
Hash identifier:          HFVgsETAqZ64zJINla3ihKaDNTzwx9t7oFuEwTeHV40=
Subject key identifier:   3A:42:83:44:87:BB:1C:2F:33:67:55:94:9C:D4:C2:40:6F:60:32:9C
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2B53B5948A8007AD01373A0185E4188E639F6CFA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e9ad8327-9c27-4700-ac3f-771202b2f7c0.roa
Signing time:             Mon 05 Dec 2022 00:00:00 +0000
ROA not before:           Mon 05 Dec 2022 00:00:00 +0000
ROA not after:            Thu 08 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:53:b5:94:8a:80:07:ad:01:37:3a:01:85:e4:18:8e:63:9f:6c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  5 00:00:00 2022 GMT
            Not After : Dec  8 23:59:59 2022 GMT
        Subject: serialNumber=d9143003179b5e8918ce2172095c4707be65578f53b2ab444c8639b788ffa0dc, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:19:20:b8:9e:81:22:14:bb:6f:64:4e:9c:
                    0a:f2:53:51:17:62:8b:9a:40:cf:13:a6:a3:bf:9f:
                    1e:99:d8:3b:3b:3c:cd:55:3b:76:a8:94:b9:9c:cd:
                    14:6e:c5:85:28:b0:3e:39:f0:ee:99:78:1d:e0:af:
                    b5:65:29:7f:db:db:64:cf:6e:91:0b:b9:95:21:28:
                    b4:3f:1e:dc:3a:27:67:b0:a3:66:0b:de:44:35:61:
                    89:59:eb:f3:e8:f6:23:b0:a0:c1:c0:5d:68:4d:49:
                    f8:fc:10:8b:19:f7:1d:e1:fb:48:cd:e8:34:03:9b:
                    02:63:a8:b2:fb:87:17:5f:59:1c:90:d1:c3:91:94:
                    23:e2:08:d4:84:86:92:04:60:5a:3b:39:dd:ce:6e:
                    f8:f3:45:72:79:1c:53:d6:7b:5e:0a:ee:0e:7b:9b:
                    06:c2:ed:32:08:4d:cd:6a:04:a8:a2:c0:b3:c6:ef:
                    5a:c8:0a:c9:8c:64:6d:2c:36:10:69:44:9e:53:69:
                    0f:52:44:38:82:a6:f3:4c:e4:82:e6:a7:66:fb:7e:
                    70:33:33:3f:87:07:ab:a8:47:5c:68:f0:4d:0c:2a:
                    ba:56:f0:70:ad:e6:aa:e7:df:37:64:f9:ee:b5:2c:
                    e1:34:c1:a6:2d:43:a4:ad:79:d9:4b:1c:c0:5b:fd:
                    ac:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:42:83:44:87:BB:1C:2F:33:67:55:94:9C:D4:C2:40:6F:60:32:9C
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e9ad8327-9c27-4700-ac3f-771202b2f7c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:22:33:78:a6:69:93:a3:f4:f2:a4:8c:9c:e9:fb:91:7c:dd:
         e0:e4:ea:5a:f2:88:d5:0e:87:d5:54:ff:9b:b5:dc:08:26:d6:
         a9:42:4b:40:2d:f0:e2:02:0d:0a:ba:64:89:6b:61:3f:d8:25:
         d3:6a:3d:ad:07:29:4e:a8:73:a9:9c:c2:20:51:14:84:21:c3:
         e2:e7:ae:4a:c8:f5:f0:af:72:9a:dc:49:96:7c:77:9e:96:33:
         dc:2b:e6:ba:e3:91:86:f7:b0:01:e9:e1:60:06:4d:6f:b6:76:
         42:4d:e3:c7:6b:fe:d5:db:2d:4c:50:cd:fa:35:37:4f:f3:68:
         ba:02:32:9f:7a:28:bc:bc:2d:f5:2d:dc:08:19:78:93:25:49:
         a7:87:26:a8:82:a4:af:72:cf:6d:0e:3a:e0:8e:53:a6:0e:09:
         27:b6:e7:30:f1:04:d2:81:b3:6a:56:42:c0:cf:43:43:d9:28:
         82:b7:81:e3:06:45:a3:13:2b:59:60:af:bc:62:4b:bd:88:3c:
         ff:06:87:5d:c9:b7:bf:d9:6f:b0:44:95:a4:9d:32:bf:7c:cb:
         41:15:c0:61:ac:91:aa:19:6c:a1:84:39:07:e0:4b:9c:18:78:
         6f:15:e4:3f:d9:8a:fe:60:74:96:64:4c:cb:da:91:0f:a7:9e:
         4a:13:71:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----