Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ee4c59e3-9b71-4a31-bfcb-8d9d35321bb0.roa
File:                     ee4c59e3-9b71-4a31-bfcb-8d9d35321bb0.roa (raw, json)
Hash identifier:          7Uf/V8EXmD+mpePyV9wGUSDiwqVRxoWmaAAGPLZkF7c=
Subject key identifier:   31:5F:E0:19:F3:91:B7:0D:4A:9A:1F:A8:D7:C5:BD:E6:44:94:BD:19
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2057EE702CFD9D880F672AF7C1A4C86A111E3E13
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ee4c59e3-9b71-4a31-bfcb-8d9d35321bb0.roa
Signing time:             Fri 02 Dec 2022 00:00:00 +0000
ROA not before:           Fri 02 Dec 2022 00:00:00 +0000
ROA not after:            Mon 05 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:57:ee:70:2c:fd:9d:88:0f:67:2a:f7:c1:a4:c8:6a:11:1e:3e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  2 00:00:00 2022 GMT
            Not After : Dec  5 23:59:59 2022 GMT
        Subject: serialNumber=c9a3d35318cc105263c3214b848276888df7217f545725e00f6ba8ada90b470b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8d:dd:bb:ec:c3:9d:5a:63:3a:9e:20:a7:18:
                    30:0f:8a:99:59:f9:9f:d4:65:3a:43:26:5b:1c:7a:
                    27:ea:51:5e:cf:aa:ff:bf:d8:29:3d:5b:9b:01:f5:
                    e1:5a:d3:02:e7:72:2e:40:63:b9:09:08:29:79:17:
                    f8:12:96:75:91:cb:db:ec:4e:3e:20:84:28:5b:e9:
                    42:d9:e3:22:c0:8e:26:0a:c8:1a:47:d5:31:54:98:
                    2d:0c:4d:8b:a9:74:78:91:88:9f:29:69:6f:51:44:
                    d4:e6:90:c1:a3:ca:32:13:33:9e:ad:81:35:ef:c3:
                    cf:d6:8c:3d:b7:a9:1d:d8:60:82:0a:14:b9:02:94:
                    44:e8:ba:a0:5c:ce:ba:78:68:21:bb:5d:6a:8f:a9:
                    d5:f3:96:67:6e:51:db:97:73:54:5e:46:f1:c8:32:
                    a9:73:7a:14:9f:7b:2b:93:eb:a6:7c:8b:8d:9d:6c:
                    50:b2:e4:9e:b5:74:fd:f6:41:f3:cf:5c:3e:83:92:
                    f7:3b:70:b6:64:7e:df:0e:88:4d:09:a1:cc:2e:0c:
                    69:b1:19:8d:a8:9b:68:87:9f:83:57:48:13:35:ee:
                    25:09:1e:ef:f3:f7:d1:cb:de:48:ee:56:d4:a7:8e:
                    7b:ea:ec:b3:8b:7f:7b:31:4e:16:11:22:92:fb:f6:
                    00:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5F:E0:19:F3:91:B7:0D:4A:9A:1F:A8:D7:C5:BD:E6:44:94:BD:19
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ee4c59e3-9b71-4a31-bfcb-8d9d35321bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:80:a9:92:d9:4f:da:98:b5:0c:1e:ec:5b:de:6d:ee:0d:19:
         7d:50:4d:f9:e5:7c:6a:a9:69:2f:7c:40:c0:a6:d7:27:d3:46:
         f5:62:42:e9:ed:d0:3c:d9:91:da:83:80:53:b8:61:78:35:94:
         d8:11:38:5c:4e:d4:bd:0d:53:5e:2a:30:e7:b4:b5:c2:94:14:
         4d:a8:d2:18:6b:98:15:6b:8c:0f:de:f7:ac:93:7c:96:dc:04:
         d9:69:7f:0c:98:fa:eb:2f:fc:5d:38:7d:96:f8:04:0e:f7:55:
         94:90:b6:44:a7:d6:ac:05:cd:0b:eb:03:0d:43:a7:65:95:36:
         83:62:8c:da:68:e4:13:2a:43:6a:b9:9f:22:63:97:72:bf:80:
         99:79:2c:25:f3:f1:98:56:b7:6d:4f:f2:06:5e:7a:43:0b:d9:
         9c:67:f4:7e:38:8b:e8:b4:bd:8c:36:b7:6a:e7:28:f3:9d:08:
         77:ac:d6:0d:42:5a:4d:4b:51:3e:ee:5b:17:76:be:80:6d:9c:
         42:1f:57:23:c0:20:5e:be:85:05:20:cc:f5:1a:91:7a:92:fe:
         c0:d2:16:a0:7d:a4:3b:4f:2e:81:5b:a8:8a:f5:92:2b:76:b9:
         7f:18:46:db:53:11:82:cc:1a:e5:9c:c7:a5:1f:13:03:c4:7f:
         05:f3:39:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----