Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fa0cb9af-5ab3-4310-8ac9-ef9b0d0dc92f.roa
File:                     fa0cb9af-5ab3-4310-8ac9-ef9b0d0dc92f.roa (raw, json)
Hash identifier:          vxjFnB+UApawCSVmJVQVL7pPbw5SzEEFxv7PF/tN3Xo=
Subject key identifier:   6F:BB:EE:E4:65:30:91:30:25:3A:55:B1:13:05:EA:C1:E9:DF:3E:DD
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2089FC032784FAD1C6CC158794E66A0102AA19D4
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fa0cb9af-5ab3-4310-8ac9-ef9b0d0dc92f.roa
Signing time:             Thu 13 Oct 2022 00:00:00 +0000
ROA not before:           Thu 13 Oct 2022 00:00:00 +0000
ROA not after:            Sun 16 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:89:fc:03:27:84:fa:d1:c6:cc:15:87:94:e6:6a:01:02:aa:19:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 13 00:00:00 2022 GMT
            Not After : Oct 16 23:59:59 2022 GMT
        Subject: serialNumber=2ceedfb24aa961f74e06288e370b0f1e1cd0030699acd53ae426482f8605698c, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6f:77:ae:3c:c5:d3:9e:8e:0c:62:2c:74:6d:
                    74:43:9b:27:71:b7:96:97:68:ec:fd:08:64:00:10:
                    42:bd:95:84:fd:32:e3:3c:7a:99:a1:eb:87:28:59:
                    61:1f:e0:38:3e:7c:81:8e:55:c0:b4:1c:7e:d8:7b:
                    a6:05:31:e6:cc:f0:a0:ae:46:6b:9f:8d:f5:75:08:
                    6d:cf:76:c2:62:fb:12:76:c3:5f:0e:5b:c4:de:1b:
                    c4:45:6d:84:5f:cc:d6:d1:8e:fe:fb:8c:c9:74:66:
                    fb:31:9e:98:1d:ef:e1:64:d5:18:a3:73:25:5e:80:
                    d3:1e:de:11:60:f7:3d:c7:a0:75:29:20:51:e1:c0:
                    41:67:fc:ad:72:c4:3e:07:88:11:be:a2:20:4c:af:
                    96:75:a1:28:e0:95:43:fa:a3:ab:b3:f9:a9:8f:9c:
                    4f:13:22:e9:15:57:e6:68:6e:a2:c5:fd:56:d7:67:
                    76:41:44:5f:c2:45:98:68:e5:ba:d5:34:21:4b:7d:
                    2c:a2:3c:c3:42:f6:4d:5a:d0:9a:72:6f:ed:b1:c3:
                    ff:c0:c7:3f:a7:65:b1:72:2f:30:20:b7:45:e3:6b:
                    e9:cc:4e:e5:88:74:1f:24:97:47:f0:3b:b1:a6:cb:
                    8d:4e:95:e8:b1:dd:5a:f5:e6:f3:02:b1:98:e1:55:
                    ec:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BB:EE:E4:65:30:91:30:25:3A:55:B1:13:05:EA:C1:E9:DF:3E:DD
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fa0cb9af-5ab3-4310-8ac9-ef9b0d0dc92f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:ca:31:6b:27:09:4e:fa:67:db:8e:57:ab:fc:83:a1:d5:81:
         48:52:62:be:7f:b9:ed:af:10:a8:35:d1:44:c8:f4:bb:fc:0f:
         ca:4d:24:17:ff:f7:76:57:1d:95:f4:37:d7:b8:2c:2e:f9:cc:
         52:0d:b2:97:18:88:9b:40:90:81:11:63:62:b7:ed:af:eb:63:
         85:59:7d:83:52:4d:0c:ea:0d:7c:de:d4:42:6c:a8:f2:aa:c5:
         3e:a7:f4:8d:86:db:fa:91:cf:68:00:6f:77:fe:fa:bc:3e:e3:
         db:79:e2:72:c2:51:95:08:ab:e6:df:91:80:65:69:7e:18:ef:
         6f:33:22:07:e0:27:c4:36:f0:6a:e5:20:d8:23:f7:8b:ee:ac:
         1f:d5:36:27:e4:7d:60:7b:1e:0a:cf:db:ea:2d:33:c3:31:de:
         1e:77:91:0f:9e:92:b5:82:f0:65:4d:b1:2c:80:9e:63:29:b9:
         9a:61:c6:1e:63:e8:20:c0:b4:03:e5:03:e7:78:bd:37:6d:16:
         dd:f2:7d:d4:20:34:5d:a2:28:cb:cc:cc:69:71:20:79:b5:d2:
         6b:98:af:3b:fb:c5:78:ee:5d:b7:b7:da:90:1f:a7:09:96:2e:
         6e:a3:63:7f:11:cc:2a:01:6e:db:6d:87:18:30:3d:93:07:c5:
         d6:be:66:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----