Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/35cbb3ae-5398-43b0-8495-5f0114ebcaa5.roa
File:                     35cbb3ae-5398-43b0-8495-5f0114ebcaa5.roa (raw, json)
Hash identifier:          yABdf8GuwQ8N8z/86vI2H+nbG8NCVSkojUVJk9vbvMo=
Subject key identifier:   72:B3:EB:A7:D9:78:24:A2:D4:2E:77:A2:1A:28:5D:57:7B:96:80:BF
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       224FC4496585CCCA237657D435313D061A2F7FFB
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/35cbb3ae-5398-43b0-8495-5f0114ebcaa5.roa
Signing time:             Mon 27 Jun 2022 00:00:00 +0000
ROA not before:           Mon 27 Jun 2022 00:00:00 +0000
ROA not after:            Thu 30 Jun 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4f:c4:49:65:85:cc:ca:23:76:57:d4:35:31:3d:06:1a:2f:7f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 27 00:00:00 2022 GMT
            Not After : Jun 30 23:59:59 2022 GMT
        Subject: serialNumber=721641a6732cbeaf1b03accbe9927f165ce74fb4e10b4fc4f3bfba227ab798e9, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:94:13:2e:71:88:a4:c8:3b:7d:17:df:af:
                    77:e9:f3:0d:90:3c:0b:b4:d6:ed:e0:91:30:0a:4b:
                    17:ba:3e:b9:39:94:51:37:4e:b6:75:1c:6c:5e:a4:
                    49:4f:96:57:06:e4:d3:2d:0b:22:78:70:93:d8:2d:
                    37:92:4f:af:f3:48:f2:6f:61:de:ec:12:33:41:cd:
                    6c:f0:fa:80:80:c1:de:11:e2:97:c3:96:f0:d7:32:
                    df:fe:c9:41:8b:5d:a3:c4:01:20:f2:d6:c1:6b:ce:
                    30:56:ed:39:5e:20:42:a1:1e:5a:f6:cd:17:1d:c4:
                    0f:c6:e4:d4:a1:f3:4a:1b:9a:2c:6e:eb:26:d2:81:
                    b2:64:95:84:fa:72:e9:42:ce:95:91:a1:70:84:69:
                    3a:54:c2:4a:a2:73:c4:fa:15:0a:19:5d:b4:c8:dc:
                    f6:58:ef:11:0b:fa:f8:ad:62:46:ec:d9:82:69:a1:
                    2d:82:8d:92:8d:d5:a5:66:df:2e:28:72:3f:b2:79:
                    69:70:f6:11:c7:80:5e:48:38:27:df:00:9f:4b:58:
                    76:6f:f0:4c:dd:42:d6:e2:fb:5c:b2:05:c3:86:67:
                    9e:fd:4f:2d:df:68:30:4b:94:ca:03:40:7f:37:50:
                    2d:79:a6:3c:51:bc:5d:19:12:e5:ae:43:f8:12:23:
                    c5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B3:EB:A7:D9:78:24:A2:D4:2E:77:A2:1A:28:5D:57:7B:96:80:BF
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/35cbb3ae-5398-43b0-8495-5f0114ebcaa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:7e:f5:c5:63:b9:e9:67:e5:b1:2c:78:a4:0a:62:ec:73:a3:
         fe:1a:4c:f3:fd:4a:d0:9c:25:b9:e4:ac:1f:9f:04:fb:b9:ef:
         8f:58:e1:9d:7d:fd:f7:48:3f:32:6b:9f:71:16:34:d2:95:89:
         ec:e4:a2:4f:80:ee:63:77:0a:58:51:d3:f1:01:23:e5:56:24:
         ae:a7:6e:7a:69:d0:d2:aa:b5:32:57:61:6a:85:15:88:49:06:
         e0:f2:34:da:c6:d0:e7:a2:49:84:aa:4c:20:c7:eb:93:a2:e4:
         fa:41:6c:e3:6e:59:3a:c0:7c:34:4a:51:60:83:99:88:8f:13:
         2a:fb:3b:4b:14:7f:e6:14:70:78:f4:c7:08:1a:6e:a7:ef:8a:
         7f:b0:72:38:50:2e:f1:d0:21:7a:65:0e:08:a7:47:26:6a:78:
         d9:4d:54:1f:89:8d:62:96:39:45:4c:9c:5f:ae:05:52:37:a0:
         e6:d4:76:8a:d0:d5:36:d5:85:e7:94:9c:5e:4c:8a:1d:92:b6:
         82:f1:33:5d:5b:1d:10:af:11:51:b2:91:90:1a:bd:f2:4e:cc:
         79:59:4f:41:f5:0f:ff:6b:59:fa:da:76:f6:eb:4c:2b:e2:77:
         30:b2:a0:bf:66:61:9b:c8:fd:08:2f:3d:82:1f:a7:af:10:f9:
         c5:47:44:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----