Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5068f0d7-2961-4236-b9fd-8c5a38ead346.roa
File:                     5068f0d7-2961-4236-b9fd-8c5a38ead346.roa (raw, json)
Hash identifier:          b/HTW9cPfImmwN3k/71M/5fN8si5gDUvaI0TvkCC5hc=
Subject key identifier:   63:70:8F:0B:93:E1:E5:1C:D0:F3:4A:8F:74:EA:06:C4:77:13:A6:C5
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0DFF0E5236672E9B17DA0157304837219AB8E54F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5068f0d7-2961-4236-b9fd-8c5a38ead346.roa
Signing time:             Wed 27 Jul 2022 00:00:00 +0000
ROA not before:           Wed 27 Jul 2022 00:00:00 +0000
ROA not after:            Sat 30 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ff:0e:52:36:67:2e:9b:17:da:01:57:30:48:37:21:9a:b8:e5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 27 00:00:00 2022 GMT
            Not After : Jul 30 23:59:59 2022 GMT
        Subject: serialNumber=c53729a02da567a67117a0de5ee9c8f3403a63fd9741b508110ba434cef2b8ca, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:06:a3:d8:91:41:dd:53:bb:28:f5:a0:50:
                    4f:59:0c:ba:61:1d:0a:a5:69:43:64:a7:16:fb:4c:
                    58:fb:a2:4b:c4:3f:0d:6a:9e:49:27:06:e0:85:b1:
                    c4:f4:aa:de:5c:0b:b3:e4:5c:57:1d:7c:87:8d:11:
                    41:2c:f6:c9:c1:0f:94:a8:ce:04:9a:15:da:32:7c:
                    f2:3e:f1:ff:ec:09:60:aa:8c:a2:2f:51:84:e4:9f:
                    ba:cd:9a:36:de:75:5e:99:c6:54:85:72:78:f9:5b:
                    bf:76:c3:6e:97:a9:75:83:c4:c0:73:a6:b7:1a:7e:
                    a7:c3:5c:c3:40:79:4b:ec:98:8a:c7:c8:7e:ef:0c:
                    a0:0f:cb:00:b5:17:9c:1d:4f:c3:47:55:f0:c8:50:
                    6f:93:f7:e5:d9:3b:a3:95:e1:a9:f6:15:fb:93:da:
                    85:92:08:67:b6:30:c9:47:d5:42:83:79:51:e5:8d:
                    b8:75:b4:4b:8b:71:20:ed:51:c5:75:a5:56:00:82:
                    fe:7e:72:b8:3a:dc:9c:ec:af:29:69:29:79:93:60:
                    ed:f6:dc:3c:40:ce:2c:53:68:aa:8f:a8:a8:d1:62:
                    5b:27:91:e5:84:f3:93:78:dd:74:59:f1:ff:65:09:
                    ba:43:fa:4d:38:8c:d7:04:ea:2e:a4:45:c2:af:0e:
                    82:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:70:8F:0B:93:E1:E5:1C:D0:F3:4A:8F:74:EA:06:C4:77:13:A6:C5
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5068f0d7-2961-4236-b9fd-8c5a38ead346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:c3:01:b5:11:4b:ea:49:4d:05:66:36:69:47:9d:45:d7:ee:
         7f:f4:94:02:b9:a8:34:28:bd:0a:ef:37:b6:c3:e0:a1:d7:2f:
         f2:e9:fa:60:73:00:68:3e:0d:93:96:e8:e8:49:28:08:47:0d:
         af:4d:51:c6:9e:ac:ee:da:b5:94:b0:21:1c:57:c3:c4:a9:7f:
         10:83:35:d6:86:94:e3:7a:a6:96:b6:c3:87:bb:8e:6c:9b:e8:
         34:98:8a:24:e9:6e:10:cd:eb:dc:9b:9c:de:43:cc:94:72:e4:
         9a:b4:34:f4:2c:fd:2f:8f:19:1f:40:c8:9d:f0:b6:32:b9:4d:
         04:4b:35:48:46:46:a4:1f:11:7d:b1:e9:4c:27:91:e7:65:1b:
         7a:f8:8f:c8:cd:29:7e:53:84:e6:e5:cd:49:a3:76:42:f7:f9:
         ca:5e:bc:0a:f4:2f:ec:e9:10:10:56:dd:8b:88:12:d9:f6:65:
         57:27:01:c1:72:33:d3:8c:47:c9:7d:f0:6e:53:53:70:12:07:
         dd:10:6d:f6:3e:45:a7:21:cc:92:49:4c:12:48:c7:72:40:90:
         9b:2b:fe:c7:a6:89:97:9e:8b:35:9a:ce:0d:92:68:7b:54:36:
         ed:69:93:bb:af:87:10:87:19:61:db:a5:6b:9f:f7:ac:6d:de:
         97:8f:51:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----