Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5ab9754a-6ada-4e4a-8fad-6d6dfb2a1e95.roa
File:                     5ab9754a-6ada-4e4a-8fad-6d6dfb2a1e95.roa (raw, json)
Hash identifier:          ZGTXMv2EYurdYtXI7edUxgnrfJ5QpYRHJ+e71DSIfFk=
Subject key identifier:   1A:7F:0D:F0:7E:2B:40:53:05:25:A5:54:71:9B:DE:90:26:04:1A:96
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5EBB880B2992281179D1C9BBC591D4A6DFBDF2F4
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5ab9754a-6ada-4e4a-8fad-6d6dfb2a1e95.roa
Signing time:             Fri 02 Sep 2022 00:00:00 +0000
ROA not before:           Fri 02 Sep 2022 00:00:00 +0000
ROA not after:            Mon 05 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:bb:88:0b:29:92:28:11:79:d1:c9:bb:c5:91:d4:a6:df:bd:f2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Sep  2 00:00:00 2022 GMT
            Not After : Sep  5 23:59:59 2022 GMT
        Subject: serialNumber=18cf449a87f56a7bf33f35daecac35b94c008a319131273f9f01c119edd51398, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:06:df:2e:bd:77:c3:bb:ba:3a:62:4f:91:ff:
                    21:41:4d:89:43:f7:f3:06:ce:64:68:89:de:f6:6a:
                    68:6d:99:e5:92:6d:c7:66:f5:fa:43:07:c3:48:88:
                    9f:5c:a4:ed:9a:92:74:17:81:cc:96:3e:80:5a:e0:
                    0f:35:07:e0:9a:eb:b0:55:75:32:94:bd:23:73:1b:
                    6b:d4:ad:68:7a:1b:7b:44:34:2d:51:16:7e:2f:b3:
                    34:e9:26:f1:3f:80:b0:23:81:a7:26:30:ca:0c:e3:
                    d1:2b:84:6f:e5:26:3a:6d:a8:e5:9d:d6:39:d8:cf:
                    a6:f5:89:8b:1d:10:98:90:6b:09:ec:99:29:c4:42:
                    7a:7e:00:a8:d6:7d:b7:e5:cd:9b:14:a0:8b:b2:67:
                    40:29:23:dc:ba:bc:a6:4d:ad:4f:4b:e9:53:8d:36:
                    76:e0:d1:76:dc:a5:f4:d6:00:4c:f4:ec:9d:cb:c0:
                    7c:2d:97:12:4a:f4:3c:1e:b6:f3:16:a3:b0:27:4f:
                    65:5e:57:3a:a5:06:88:4a:29:01:f7:e5:41:5e:89:
                    7a:e1:49:e5:de:4b:79:eb:88:8a:27:e7:93:5c:e8:
                    4f:ac:81:e0:89:7c:bf:d2:a3:27:59:e3:0c:0f:17:
                    c1:b8:e4:fd:1e:f6:d8:56:fc:1d:07:f6:27:84:e2:
                    1a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7F:0D:F0:7E:2B:40:53:05:25:A5:54:71:9B:DE:90:26:04:1A:96
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5ab9754a-6ada-4e4a-8fad-6d6dfb2a1e95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:75:4e:e1:91:d9:c1:89:56:3d:f9:5e:cf:f4:52:c0:c9:0c:
         3a:8c:87:53:11:8b:8d:5f:df:69:a0:d0:05:c9:29:2f:d3:24:
         24:d5:ba:48:f7:d9:a9:70:8e:d1:b4:3d:05:fc:fb:3a:60:38:
         90:ff:b6:36:85:e6:31:51:b8:a4:5d:d7:4f:2a:64:f9:12:1f:
         48:b3:41:d3:f5:d4:93:98:ce:16:14:a9:34:a8:b1:6c:1a:48:
         33:6b:08:37:1d:a7:f4:d6:8f:5b:58:b1:63:24:b5:58:f3:69:
         b3:c3:bc:18:dc:3a:74:61:7e:95:96:88:3e:16:ba:2e:ea:1c:
         9b:da:e8:5e:cf:e4:99:41:9b:d3:70:d5:30:08:cb:2a:b8:b1:
         ea:ad:9d:e9:68:92:1b:b5:13:64:78:ae:55:22:58:3b:ad:0d:
         be:cf:90:25:34:3b:a6:36:8f:21:dd:56:59:00:9d:29:4b:80:
         83:09:d7:10:2b:3e:10:7f:3e:4e:4a:15:b5:ff:2e:2f:d7:f0:
         35:67:1b:83:bb:9f:85:fd:21:a5:e8:12:9f:ee:f6:da:dd:e2:
         c4:b0:78:25:2a:e6:38:85:d5:7e:69:7d:25:23:6e:a7:79:30:
         e8:b5:9c:8d:6d:29:9c:aa:cc:ce:de:cd:33:d5:f1:e4:a6:ef:
         c7:fe:8c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----