Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/418f8f3e-5936-4a2a-8bdb-6fb767d85144.roa
File:                     418f8f3e-5936-4a2a-8bdb-6fb767d85144.roa (raw, json)
Hash identifier:          kwNmlgHdB4jr0ajP9s9dvkbimSv920Z2WyVgW68hpxY=
Subject key identifier:   33:5E:A9:DA:F8:8E:D9:86:75:FB:E1:11:85:63:9F:B8:BB:9A:77:5B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0811A5DBA59F6AD409CC811C44C62D08AB31E319
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/418f8f3e-5936-4a2a-8bdb-6fb767d85144.roa
Signing time:             Fri 19 Aug 2022 00:00:00 +0000
ROA not before:           Fri 19 Aug 2022 00:00:00 +0000
ROA not after:            Mon 22 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:11:a5:db:a5:9f:6a:d4:09:cc:81:1c:44:c6:2d:08:ab:31:e3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 19 00:00:00 2022 GMT
            Not After : Aug 22 23:59:59 2022 GMT
        Subject: serialNumber=3dce4962674666c0b5fba63b15d201d910e567dbe12b484531479eafdc9639a9, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b9:4d:70:3a:c2:f9:4c:12:9b:a9:cb:33:11:
                    e1:20:b7:4d:2a:23:2c:d5:7d:e7:76:16:df:51:9d:
                    69:f1:e2:22:cb:85:fd:21:03:c2:c9:f7:93:99:08:
                    49:e8:c3:be:c3:65:ad:85:f3:13:51:9d:68:8d:52:
                    99:fb:89:12:16:b5:0c:02:5b:75:4e:7e:21:72:e6:
                    ff:44:a7:e9:75:6a:67:02:a5:eb:09:11:fc:c3:b0:
                    e1:9e:fc:37:8f:1d:43:5c:a3:de:d8:b5:3d:12:bb:
                    b6:9e:db:1a:4d:82:bc:a0:89:bd:d9:ee:8e:33:b3:
                    28:28:7b:0e:98:51:a2:a7:5a:0c:38:63:ec:66:ed:
                    ee:37:d3:01:88:17:9d:38:31:b1:05:8b:f9:e8:08:
                    67:6c:3c:96:ae:2c:a8:ed:da:b6:3e:fb:4f:99:48:
                    af:7e:8b:d1:41:6a:ab:f2:ab:1c:4b:01:a0:0d:86:
                    55:64:81:4c:0d:b1:a4:17:6d:90:9d:d0:33:94:e9:
                    b6:23:9f:65:c3:34:b2:cb:59:c1:bc:8b:7c:76:57:
                    41:f4:c5:09:64:85:de:a9:b1:49:72:79:51:af:91:
                    bb:5a:e8:c0:20:0c:7f:6e:9b:81:11:b8:e4:91:91:
                    1b:ed:ad:32:f1:e9:59:cc:8a:01:c3:65:e7:d3:84:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5E:A9:DA:F8:8E:D9:86:75:FB:E1:11:85:63:9F:B8:BB:9A:77:5B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/418f8f3e-5936-4a2a-8bdb-6fb767d85144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:63:21:9d:f8:0f:15:c0:fb:6f:f4:42:85:14:e2:50:1c:8f:
         f3:24:f3:3c:12:ee:4a:2b:c5:ec:31:e1:e5:bd:03:0a:f0:8e:
         f8:31:85:80:a6:ae:ba:78:bf:a0:20:73:96:2f:44:6c:1a:cd:
         f0:61:74:da:3d:b9:59:7a:15:f1:f6:bc:f4:4e:c6:94:bb:59:
         f2:8c:3b:c3:19:83:eb:e3:6a:e5:0f:fd:7c:c4:51:1d:e9:85:
         08:33:f6:a0:ee:95:fc:e8:16:98:48:40:3c:b6:58:ca:c5:9b:
         0a:4a:12:82:68:e4:f7:22:99:e2:5b:b6:2f:04:cf:aa:3a:07:
         02:72:8b:92:42:bb:1b:47:6a:2b:18:37:38:c3:f3:fb:2c:ae:
         35:20:34:5f:94:b5:aa:0e:9a:b3:ea:5e:c0:96:c1:25:a5:12:
         54:84:60:83:c9:a1:41:60:2e:11:91:4b:85:e4:72:11:fb:aa:
         c1:55:30:2f:2e:1d:3f:c4:70:48:9f:ac:34:55:bf:b1:49:3c:
         ce:84:d0:a9:7f:30:c8:18:fd:fe:4e:66:25:ce:f8:c6:27:13:
         35:27:6a:b4:40:93:1f:95:ef:e2:d3:b7:09:93:37:17:2e:2f:
         a1:73:b1:95:8e:a1:f5:d2:26:9e:0f:38:0a:26:3f:c2:c7:57:
         0c:2c:6a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----