Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/eaf3856c-9a8f-4295-b573-065c675284af.roa
File:                     eaf3856c-9a8f-4295-b573-065c675284af.roa (raw, json)
Hash identifier:          mZeZZFQdEJlazLcFZTmPWih7Eh2BlBMJ2NFJ4B5m4/k=
Subject key identifier:   3F:98:89:95:24:2E:68:D1:09:10:6A:DA:D8:CF:71:E6:AF:E0:F9:7A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       37DBF6B06C590FF820FDFBA6B643B0BE9EA30FE8
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/eaf3856c-9a8f-4295-b573-065c675284af.roa
Signing time:             Tue 30 Aug 2022 00:00:00 +0000
ROA not before:           Tue 30 Aug 2022 00:00:00 +0000
ROA not after:            Fri 02 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:db:f6:b0:6c:59:0f:f8:20:fd:fb:a6:b6:43:b0:be:9e:a3:0f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 30 00:00:00 2022 GMT
            Not After : Sep  2 23:59:59 2022 GMT
        Subject: serialNumber=6c2896d68a8a14d2ab490edcc73b3ec829a61235b7fdc63e9d9e1cc33524a3a5, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b3:a4:91:29:cf:35:6c:ff:8d:d3:c6:a4:47:
                    ce:fd:7c:42:dc:04:d0:ea:5c:b9:8b:3f:b8:26:23:
                    5a:71:d8:cc:5f:22:3a:37:f6:d0:2e:72:2b:ad:93:
                    e2:a8:b5:58:01:72:58:23:82:f2:9f:48:39:6f:81:
                    1a:ce:c4:e6:a3:0e:27:2c:e5:ec:03:11:03:b9:aa:
                    d8:b2:df:f0:f0:92:ca:25:6e:33:c6:c8:b6:60:08:
                    0c:4d:6a:8f:98:34:8e:40:bb:17:e8:b8:08:0a:82:
                    03:40:5f:84:93:93:1d:60:3a:5d:a4:3e:4b:73:4f:
                    83:ac:be:61:05:97:b6:6e:59:91:d4:60:65:4a:84:
                    ff:c7:00:99:ea:6c:7e:74:50:ec:41:bc:14:c1:cd:
                    bb:02:90:00:c1:d4:98:f6:46:5f:b3:13:33:02:c1:
                    4f:e2:ca:60:c1:4d:25:0f:95:fa:eb:a5:b0:7c:e0:
                    0d:53:88:6c:45:39:19:fa:65:7a:20:15:64:e9:f4:
                    61:14:32:8d:24:c0:38:99:67:f0:90:7e:07:65:6f:
                    70:f9:5d:18:87:92:ab:b9:21:4e:90:dd:d9:37:d4:
                    64:6b:2f:d1:57:6a:33:f8:ee:13:0f:6c:eb:9e:92:
                    4f:6e:65:a5:bf:22:ae:5b:1e:fc:0c:dc:57:d7:0c:
                    a7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:98:89:95:24:2E:68:D1:09:10:6A:DA:D8:CF:71:E6:AF:E0:F9:7A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/eaf3856c-9a8f-4295-b573-065c675284af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:59:45:ed:30:e6:88:a3:68:4b:ce:69:ac:de:5c:ec:47:5f:
         a3:e4:f7:ff:cd:69:86:db:f0:71:63:e3:ab:da:99:29:e1:52:
         2c:42:01:f9:7d:f6:4e:20:c5:05:4e:4f:e7:b9:8a:ce:9a:a6:
         04:70:2d:19:85:79:05:8f:02:55:5c:01:c3:bf:28:a4:7e:24:
         c5:9d:4b:45:30:ab:c2:88:22:5b:71:3e:6a:a3:81:d8:49:c6:
         f8:40:29:2f:95:ef:c6:73:ca:09:54:a2:15:2a:8f:73:c8:23:
         bb:3f:11:10:b5:1f:8d:61:37:65:91:29:cd:e6:fa:93:f4:77:
         d6:0a:d7:5e:ac:39:c3:47:47:a9:12:87:22:b4:39:08:0a:99:
         5e:3d:eb:d3:63:da:ee:4f:56:a6:ba:17:92:b4:04:c8:7f:f7:
         82:6d:5e:50:34:05:d2:bb:6c:1f:35:8e:75:19:2e:8b:0e:1b:
         96:33:9b:4d:04:4f:ec:e6:32:cb:8a:06:89:29:65:e3:80:f3:
         d7:cc:55:e5:25:c2:e8:ff:3c:38:f1:31:d8:4b:09:eb:d5:fc:
         d6:d2:39:3b:e6:1e:c5:ab:c7:aa:39:65:56:a8:88:e9:de:9b:
         cc:2e:94:20:d2:19:6a:ef:08:93:cb:16:d6:51:1d:3c:f2:86:
         ca:5e:82:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----