Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/014ec7d6-7f27-489c-aefa-7786f06a5ebf.roa
File:                     014ec7d6-7f27-489c-aefa-7786f06a5ebf.roa (raw, json)
Hash identifier:          tlD/L/nkm+VcGNsDm0wad8icwNKmx0Hghq1mnuq34qc=
Subject key identifier:   AF:6C:F1:A1:C2:88:73:0C:40:A6:82:1E:E8:9D:4E:58:A5:96:E5:B3
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       522FF5B44EB24737805D1EF974E6467DBF61ECEC
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/014ec7d6-7f27-489c-aefa-7786f06a5ebf.roa
Signing time:             Sat 25 Jun 2022 00:00:00 +0000
ROA not before:           Sat 25 Jun 2022 00:00:00 +0000
ROA not after:            Tue 28 Jun 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2f:f5:b4:4e:b2:47:37:80:5d:1e:f9:74:e6:46:7d:bf:61:ec:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 25 00:00:00 2022 GMT
            Not After : Jun 28 23:59:59 2022 GMT
        Subject: serialNumber=a7e106b044c52121b7126dcb1089c392319668ebfed8a83b6d46494b267c66d5, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:8c:8d:3d:a8:0a:3b:e1:37:3f:8b:77:ac:
                    72:01:06:b6:2e:55:94:a4:64:c3:52:47:b7:40:e7:
                    d8:00:a9:d9:10:76:f4:33:13:5c:a8:92:9a:e4:dc:
                    0e:12:b3:dc:35:0a:8d:4d:c5:21:71:83:a4:c9:21:
                    c3:44:b2:ad:ea:80:53:b1:eb:ae:b1:f7:c8:b5:c6:
                    89:72:e9:8d:25:d1:e6:fa:10:92:3d:36:e7:a4:04:
                    80:ba:b8:05:18:b2:72:3f:d5:e7:ed:6c:16:f9:74:
                    77:b3:e5:e1:a7:c9:59:e4:c7:55:f0:9e:b3:5e:ec:
                    41:1e:79:75:b5:69:4f:4a:c5:73:98:78:c1:11:9e:
                    f7:27:e7:e3:18:c5:f1:9b:e7:b9:fe:a6:72:ea:eb:
                    0e:41:ca:0c:71:1d:f1:bb:ba:a5:b6:97:b1:f8:4e:
                    f4:93:49:88:bd:4f:5c:5a:e5:5f:37:1f:5c:29:97:
                    66:23:7e:1a:84:1d:cd:0b:b2:53:1f:43:ae:0e:06:
                    5e:c3:65:f5:f0:57:03:6b:97:6f:2f:b6:a8:c8:41:
                    e0:bf:a1:dc:d6:43:70:ff:9d:b6:cc:2b:b8:73:c8:
                    20:d5:5f:58:50:6c:ed:d2:f4:64:d7:a7:f3:67:e0:
                    a3:25:ae:81:80:ca:1a:4f:42:64:43:1c:48:50:98:
                    3e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6C:F1:A1:C2:88:73:0C:40:A6:82:1E:E8:9D:4E:58:A5:96:E5:B3
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/014ec7d6-7f27-489c-aefa-7786f06a5ebf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:13:95:9d:56:62:44:9b:9c:5e:2a:eb:11:5b:cc:2e:36:af:
         6a:97:ef:df:1c:b7:1a:f8:e1:f2:c2:2d:e0:5e:b1:cd:81:e2:
         48:e6:23:c1:ae:b4:44:a9:a8:e2:1b:32:be:51:29:d4:04:3a:
         65:1c:6f:8e:f1:d0:aa:56:3b:33:3c:38:f8:44:8f:b1:40:eb:
         2c:83:38:71:00:2b:72:74:46:ae:71:d8:f1:8f:b6:d8:d1:45:
         45:49:a1:50:82:8e:60:bd:1f:06:c3:af:eb:52:fb:b0:b3:43:
         46:67:60:8d:eb:7d:e9:5f:d6:b3:af:4f:af:64:2a:e2:4c:0b:
         1e:71:21:3c:24:0a:b6:b1:f7:e5:bc:94:88:5a:b2:7d:9f:be:
         66:f3:51:f7:1b:22:cc:6f:dc:45:d3:df:55:31:d5:0c:22:cb:
         4a:44:b9:57:3b:67:54:f0:b0:f5:a5:dd:f5:d1:c3:e4:83:b1:
         20:e1:65:52:f9:53:f7:da:cd:2f:2e:26:53:91:ef:f4:07:aa:
         5d:07:46:06:75:86:4a:db:e1:4f:d0:68:20:85:08:61:35:52:
         aa:e2:e8:a6:9a:48:06:c3:ce:61:d9:28:6e:4f:e0:01:b9:b2:
         07:a7:a5:7a:d2:b0:90:33:8c:44:ea:cb:7a:b1:e7:d1:76:d4:
         7c:98:61:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----