Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/11168691-8e48-4952-822f-66b5f7a316b2.roa
File:                     11168691-8e48-4952-822f-66b5f7a316b2.roa (raw, json)
Hash identifier:          AiGlmap92apFZQRXHt5sU5Kbpq1UKWj6rk2nL7+pkoc=
Subject key identifier:   DE:42:47:90:90:63:2D:C4:57:06:45:9F:DC:38:80:63:08:53:C7:0D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5B1B0B6F27DEB362B6ED17E2276A27D5E1364D45
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/11168691-8e48-4952-822f-66b5f7a316b2.roa
Signing time:             Sun 07 Aug 2022 00:00:00 +0000
ROA not before:           Sun 07 Aug 2022 00:00:00 +0000
ROA not after:            Wed 10 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1b:0b:6f:27:de:b3:62:b6:ed:17:e2:27:6a:27:d5:e1:36:4d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug  7 00:00:00 2022 GMT
            Not After : Aug 10 23:59:59 2022 GMT
        Subject: serialNumber=83f8c18bf685103f29e812663da2c6261f4b5a2217fb57a3721df2f031c5aa47, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1c:79:43:a5:34:b7:73:17:3c:0a:97:01:8d:
                    1f:11:fe:12:74:7a:1a:ab:d6:c2:a9:a8:79:89:f8:
                    78:c5:73:e5:22:2e:b5:22:36:04:fc:47:81:08:3c:
                    7e:1e:b4:96:72:1c:e8:03:15:3d:46:f1:62:16:82:
                    40:f7:1e:c1:0e:95:db:14:d7:eb:a7:e1:36:8d:91:
                    0a:28:49:c5:09:c9:da:ff:1f:e8:a3:6d:c2:c0:42:
                    42:27:4b:5e:f8:f1:f2:6d:2a:ba:a7:21:40:d4:5e:
                    28:2e:73:b8:c7:18:a7:c0:db:1f:71:17:6c:3f:48:
                    f9:ac:30:18:e9:bd:ee:65:6e:98:83:42:33:5f:29:
                    0f:2d:fd:8d:36:07:a1:0c:08:83:cd:6e:e1:f0:e1:
                    98:2d:d2:b5:cd:24:f6:39:6c:f6:da:56:37:c2:96:
                    85:33:12:fd:63:7e:ba:53:6c:11:fb:ac:e3:61:2f:
                    ad:f7:c1:09:97:01:f7:63:75:c1:98:7b:92:7c:6a:
                    d9:83:80:44:85:43:47:68:e6:83:b5:fb:07:de:e5:
                    f0:f9:8f:36:4b:b0:64:4a:1f:44:46:61:39:0b:ab:
                    c0:3c:e7:da:d0:2e:2f:80:9c:a5:4f:3b:87:01:72:
                    87:b3:8b:e1:29:79:92:a4:7e:2f:49:52:90:c0:10:
                    18:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:42:47:90:90:63:2D:C4:57:06:45:9F:DC:38:80:63:08:53:C7:0D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/11168691-8e48-4952-822f-66b5f7a316b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:b2:aa:f5:18:91:68:a8:a9:da:4d:d8:f3:01:4e:51:33:02:
         0d:1e:85:2d:4e:4c:fd:a9:fd:be:65:d2:67:41:7d:79:f6:73:
         22:5f:84:89:bc:13:34:23:03:04:48:8e:75:fe:3b:0c:a7:09:
         a6:8b:41:80:fc:25:1e:4b:3c:a6:2e:c1:c0:f1:49:63:f8:11:
         3a:44:7f:f0:04:c4:65:ec:92:9f:65:45:ab:f8:fd:68:50:46:
         b3:59:1c:c8:f0:38:03:45:09:9e:b3:8b:7a:67:6d:8f:dc:51:
         15:5f:be:19:66:c1:49:f0:0c:92:66:19:26:51:2d:cb:b6:ab:
         17:4d:8d:c4:59:c3:3c:c0:3d:5c:9d:30:24:41:82:ba:51:8e:
         e3:7e:dc:ab:7b:0c:4f:5b:b8:c9:ad:fc:1a:21:44:a5:bf:e1:
         61:0c:ac:39:7e:16:dd:d7:d8:c4:fd:b8:1b:9a:ed:e4:8e:13:
         93:4d:7c:a5:ad:15:2b:c0:52:f8:28:c2:89:db:ba:4a:dd:59:
         cd:32:4f:6e:9b:cd:b0:28:15:bb:3a:f4:d2:62:9b:c0:f6:63:
         b1:d0:b5:0a:d7:5a:23:bf:ea:55:99:aa:13:c4:a7:32:03:9e:
         79:b5:15:57:56:d2:99:a4:c1:55:de:b2:dc:4d:30:3a:ca:8e:
         0a:ad:89:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----