Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/31263c4d-a0d6-44cd-8c4c-756961c4394f.roa
File:                     31263c4d-a0d6-44cd-8c4c-756961c4394f.roa (raw, json)
Hash identifier:          5FUxBZKzQ+KY2HbNXvfAy6Xx6Wd6u7WNJXVcGOINFyo=
Subject key identifier:   BB:80:2F:B5:8A:A6:69:54:F7:BF:BC:EB:26:E7:24:14:64:75:07:74
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       77F07DE71A7D8E8F109E75BCDE38B715F743553D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/31263c4d-a0d6-44cd-8c4c-756961c4394f.roa
Signing time:             Wed 06 Jul 2022 00:00:00 +0000
ROA not before:           Wed 06 Jul 2022 00:00:00 +0000
ROA not after:            Sat 09 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f0:7d:e7:1a:7d:8e:8f:10:9e:75:bc:de:38:b7:15:f7:43:55:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul  6 00:00:00 2022 GMT
            Not After : Jul  9 23:59:59 2022 GMT
        Subject: serialNumber=fc53c71d57387588d589b96e352a9e9ff9bf98a914f1d5be01827fa49f31aa82, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f8:da:6b:3c:64:01:0f:f6:62:d5:f1:32:f7:
                    c2:55:b2:c8:0b:09:76:0a:bf:11:68:7b:0b:0f:d2:
                    84:bc:c6:8f:11:60:74:c4:74:0f:5b:d7:ff:60:6c:
                    c2:e5:55:04:05:55:9b:73:5b:92:c7:eb:01:62:82:
                    82:2f:aa:0e:7b:56:d5:2f:8b:21:8f:54:8f:4e:a6:
                    7a:5f:ea:1b:d9:91:6b:3a:51:13:70:42:97:d9:4e:
                    b9:87:a0:f1:45:9c:1e:e0:91:68:a7:60:8c:71:f4:
                    50:a1:a0:f7:8c:62:ef:4f:30:81:d2:7e:95:f5:7d:
                    c7:9c:fd:d0:fa:49:ed:51:67:4b:78:9a:9c:41:07:
                    70:a2:79:bf:c6:22:28:48:7a:1a:fb:3b:52:45:f0:
                    68:53:45:47:2c:b1:ed:78:d7:de:2a:78:bd:63:ca:
                    9c:37:01:69:c9:0b:34:f6:f2:86:d8:09:70:f1:5b:
                    0f:cc:07:5d:25:e3:f0:e1:56:63:2a:49:c9:76:60:
                    b9:be:dc:e3:6e:3d:cf:d7:6c:7c:7f:97:de:80:f2:
                    7a:f4:d5:fc:14:03:b1:a6:47:b8:f2:6b:5f:a4:22:
                    4b:21:df:01:7c:f1:01:19:7e:e3:ea:8e:db:0f:0f:
                    fa:1c:df:aa:5e:8a:a0:9b:36:c1:8d:de:0a:a2:06:
                    d9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:80:2F:B5:8A:A6:69:54:F7:BF:BC:EB:26:E7:24:14:64:75:07:74
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/31263c4d-a0d6-44cd-8c4c-756961c4394f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:1f:32:a8:4b:fc:af:35:69:a2:87:a6:6f:e8:ee:96:a6:ea:
         b4:f7:fc:47:8f:a9:30:7f:7d:fa:65:1c:42:8f:5d:0f:40:35:
         71:95:a9:2a:8a:3a:fa:57:ef:26:6e:88:9a:ad:5a:8f:2d:a5:
         f6:6b:ba:46:09:06:2f:e7:d6:a9:61:16:17:e2:b2:11:0d:6b:
         c9:69:73:19:85:ed:89:13:14:f6:11:75:d4:65:01:7f:18:97:
         b9:18:5e:c2:79:fa:95:f2:63:4e:44:03:9e:ce:7b:9e:8f:8d:
         db:74:cc:43:53:71:63:41:d2:5a:a2:73:88:4b:89:18:73:8f:
         04:41:fd:24:d3:ea:9f:98:52:9d:56:43:5e:3d:b3:f7:04:0d:
         02:4d:d5:24:c2:aa:e9:f9:a3:0b:83:09:73:3f:1b:72:b5:c4:
         ec:63:5f:c0:db:52:a1:f5:1c:21:8a:68:78:be:77:25:a6:60:
         b6:fa:07:ac:93:78:19:70:3d:90:be:05:58:a6:21:fb:db:23:
         f9:93:a9:0a:6a:ba:20:57:55:5d:d4:ae:0b:65:86:35:c0:e8:
         f5:1c:7e:cf:72:8f:68:a4:09:18:7a:47:1c:96:fd:26:e4:9a:
         82:96:03:f4:33:9e:2b:6a:a5:d7:cb:4d:4a:ca:66:4d:77:f7:
         84:d7:0e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----