Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/158679d4-5df5-4c5b-afdf-135cf627ea0f.roa
File:                     158679d4-5df5-4c5b-afdf-135cf627ea0f.roa (raw, json)
Hash identifier:          CbCX44wMBx/UvniYcL78vL7iJVZ56WQtv278wKrji3E=
Subject key identifier:   B8:F8:3A:DD:B1:62:CB:C3:93:54:08:AB:85:8A:67:22:EB:62:71:96
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       458C67B46776CF7E3FF231C6DE0A6AED00CA7D67
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/158679d4-5df5-4c5b-afdf-135cf627ea0f.roa
Signing time:             Sun 24 Jul 2022 00:00:00 +0000
ROA not before:           Sun 24 Jul 2022 00:00:00 +0000
ROA not after:            Wed 27 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8c:67:b4:67:76:cf:7e:3f:f2:31:c6:de:0a:6a:ed:00:ca:7d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 24 00:00:00 2022 GMT
            Not After : Jul 27 23:59:59 2022 GMT
        Subject: serialNumber=a014fadfad7b547c558b2d0503468f52b9c9ba79be6b140a42ac45a422079884, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:c9:3d:41:56:48:8b:9b:b5:13:9a:f8:5a:
                    1f:4f:bb:7b:f6:7f:9e:a9:64:b4:9f:45:cc:a0:ed:
                    55:3e:23:05:f6:e0:d7:a8:29:bc:7b:cc:cd:f6:89:
                    cb:d5:3d:b8:07:3d:44:1d:f3:e1:b9:db:50:e7:ef:
                    10:b3:49:38:27:03:b1:ef:f6:c0:99:2d:30:e5:c1:
                    61:b9:0c:26:f7:55:9f:60:e4:81:3a:50:10:fe:60:
                    0e:2d:8f:e7:fb:55:91:2c:7d:bb:69:e8:db:21:c5:
                    20:f0:e1:6d:a3:fa:7e:e5:e7:d0:32:03:88:6a:61:
                    9b:6d:fd:44:ad:56:2c:e1:66:f1:38:dd:98:f5:7e:
                    88:38:3a:fe:35:40:c7:8c:74:8e:b0:9a:66:9f:27:
                    6c:e3:ad:fd:72:62:a3:57:92:64:d5:d0:c8:75:80:
                    f4:51:95:64:b5:2d:0a:8d:9c:b6:8f:1d:8b:66:1f:
                    62:fc:22:fa:43:f2:93:a4:dd:72:58:0c:4a:aa:79:
                    a5:e9:ee:da:9e:83:31:92:5e:36:85:e8:28:17:f6:
                    6b:f5:22:69:e8:96:c5:ff:14:05:ed:d2:be:2a:94:
                    ca:51:7a:f3:6e:31:71:e1:1e:36:ee:fa:1c:7c:67:
                    a5:83:28:54:81:ee:e4:ca:8a:7f:3d:17:72:41:57:
                    56:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F8:3A:DD:B1:62:CB:C3:93:54:08:AB:85:8A:67:22:EB:62:71:96
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/158679d4-5df5-4c5b-afdf-135cf627ea0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:7d:f0:4c:b8:87:61:b8:08:f0:21:d4:68:c4:fe:6b:01:6e:
         81:d5:5e:c3:51:a5:43:47:d5:4e:e2:40:7d:13:e5:37:d3:d8:
         bb:6b:eb:be:33:f7:17:c6:d0:76:87:37:32:b3:79:8f:8b:3d:
         21:59:9d:53:13:1f:dd:e1:0f:5b:f5:15:b2:21:6d:78:42:72:
         5b:a5:77:f7:18:83:59:84:18:a8:82:66:09:56:8b:91:22:a3:
         b1:c0:6b:67:dd:57:28:74:e9:ec:7e:98:6f:84:d0:1f:f4:66:
         c4:f8:fd:31:c1:56:eb:6a:6d:ea:a5:8a:79:ed:1f:5a:1c:3c:
         c1:0a:1d:70:10:12:ed:13:35:29:53:15:58:09:15:e0:26:15:
         9a:27:6b:9c:bf:21:c8:d1:26:c2:93:1e:8e:26:f7:93:27:5f:
         cd:16:0e:70:b3:71:53:bf:0e:07:f6:b2:3e:28:c7:5d:fb:50:
         4b:e7:8f:68:b5:95:e7:e2:83:08:b1:22:a7:59:c7:20:95:66:
         11:f9:75:01:84:ef:9a:fc:03:da:a3:2e:b3:fe:eb:cc:0c:e4:
         0f:4c:c1:11:7a:00:10:bb:19:de:f7:1b:36:15:f5:94:40:72:
         b3:54:13:4d:45:a3:a1:1f:76:28:5e:a1:73:a2:13:df:eb:00:
         b4:e8:44:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----