Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/531bdc46-fabc-4f57-99b1-ad8d947a81a7.roa
File:                     531bdc46-fabc-4f57-99b1-ad8d947a81a7.roa (raw, json)
Hash identifier:          jet9AgURSarOBXeftZICGglYp0DmuFop7wCJiVKBE+M=
Subject key identifier:   98:00:F4:5B:24:1F:8E:3F:ED:55:CA:44:39:E5:61:89:9C:A4:B4:BC
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       71A1D7DD8491DB5EDD6BD0BE28050187655CEC83
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/531bdc46-fabc-4f57-99b1-ad8d947a81a7.roa
Signing time:             Sun 24 Jul 2022 00:00:00 +0000
ROA not before:           Sun 24 Jul 2022 00:00:00 +0000
ROA not after:            Wed 27 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a1:d7:dd:84:91:db:5e:dd:6b:d0:be:28:05:01:87:65:5c:ec:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 24 00:00:00 2022 GMT
            Not After : Jul 27 23:59:59 2022 GMT
        Subject: serialNumber=025c1a318ac989e15417eef3f156887e9e8c72a389d9c7263be767fec4102eae, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3c:a4:3b:51:29:a0:52:1e:4d:c8:68:c1:86:
                    2a:d8:69:e4:cb:66:89:20:b8:5f:73:65:84:9a:07:
                    cf:e2:ba:70:33:ce:82:7e:b4:b2:eb:bc:9c:83:31:
                    7a:b0:4e:ab:0e:11:58:e6:bb:12:ac:d5:5c:32:0f:
                    38:43:96:d7:87:bf:34:5f:ef:a3:de:63:bd:b0:01:
                    0b:50:11:cc:8d:4f:ac:4d:2c:6b:85:87:9d:ce:77:
                    94:18:14:b3:42:ab:15:b2:5a:0a:27:6e:ef:fc:cc:
                    80:90:27:da:34:51:ef:80:8a:43:d9:dc:63:45:ac:
                    76:d6:bb:6f:47:74:be:23:5b:e3:d0:e4:52:21:e2:
                    84:c8:62:35:0f:72:82:38:ea:fb:61:92:7e:3f:19:
                    04:b9:c8:90:fc:39:8e:0a:14:74:19:61:3a:a1:7c:
                    f0:51:bf:ca:bd:9b:dc:cb:ed:62:8a:7f:c5:54:b7:
                    d0:95:64:bd:1c:72:61:6d:13:11:a4:e0:be:32:0f:
                    ea:ce:0e:ef:7d:2a:2c:96:8a:f2:ce:43:1d:93:fb:
                    51:ad:d9:7d:b2:3b:20:ee:bc:1b:a6:8f:be:19:86:
                    df:eb:50:1f:5e:64:4d:35:ca:6d:70:de:39:d4:a9:
                    e1:a8:e9:b3:96:0d:1a:69:55:0d:e7:c0:5f:96:7e:
                    7a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:00:F4:5B:24:1F:8E:3F:ED:55:CA:44:39:E5:61:89:9C:A4:B4:BC
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/531bdc46-fabc-4f57-99b1-ad8d947a81a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:33:5f:73:c1:8f:e0:3b:1a:50:a2:0c:14:38:90:a6:01:7c:
         5d:ae:b9:07:80:05:04:9d:93:fc:47:eb:3d:33:ca:2b:93:84:
         80:2f:51:20:2d:07:c0:bd:2f:1d:96:c0:b8:c2:7f:b8:88:5b:
         85:29:b5:19:cc:d0:d5:56:d1:a0:64:cd:ad:b0:3c:dc:55:91:
         6d:db:c9:bb:d9:34:dc:71:91:94:d7:1b:79:49:00:40:38:83:
         8a:ea:01:fd:27:9d:15:d8:bc:41:62:d0:76:99:3b:3a:cc:1b:
         c1:bf:c3:47:4a:d7:a3:87:87:b6:b6:13:4d:70:36:19:8c:5d:
         29:8a:65:b1:1e:65:9f:2a:dc:da:33:3d:6d:3c:2f:e1:e4:0a:
         3c:c5:05:c0:99:8a:86:fc:a4:51:55:68:cc:26:25:a7:b7:32:
         72:0c:a4:9f:34:be:23:49:3d:e0:b5:18:05:0d:cc:2b:d0:8e:
         bc:3c:16:4e:e8:4e:0d:fd:5f:ff:7a:37:d5:d8:0a:fa:04:e0:
         3a:77:ee:19:df:f2:fd:83:cd:33:52:df:ce:df:0e:22:0e:e1:
         59:9c:fe:f8:be:09:71:17:85:75:58:ff:28:0e:94:b2:16:28:
         42:7f:19:c3:1c:b2:00:5a:cc:7c:ca:65:44:57:24:d6:04:5e:
         ed:6b:64:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----