Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5df0037c-1e1f-4b45-aaac-0bb58dca7efe.roa
File:                     5df0037c-1e1f-4b45-aaac-0bb58dca7efe.roa (raw, json)
Hash identifier:          f4miIZpEHQ7xlJPFdJpx1GSBm49BcfhYNMhhfOdvdSs=
Subject key identifier:   54:E3:C3:AD:18:C5:EC:4F:34:6A:8A:E1:A0:26:CB:EB:A8:D9:0C:F1
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7664A402C9D0CAA5F111448BC9FC651C1D33B903
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5df0037c-1e1f-4b45-aaac-0bb58dca7efe.roa
Signing time:             Thu 07 Jul 2022 00:00:00 +0000
ROA not before:           Thu 07 Jul 2022 00:00:00 +0000
ROA not after:            Sun 10 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:64:a4:02:c9:d0:ca:a5:f1:11:44:8b:c9:fc:65:1c:1d:33:b9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul  7 00:00:00 2022 GMT
            Not After : Jul 10 23:59:59 2022 GMT
        Subject: serialNumber=c00f15a2d688c95d917a1b273440426e2e3bb0a8bb178d80789ac64349d79a09, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5c:90:93:59:62:c6:26:78:1c:f1:4d:61:b2:
                    5e:3a:c1:3f:4f:34:c6:0d:42:a4:87:1a:07:70:28:
                    d3:8a:4d:51:62:81:ab:c8:ef:d6:75:2b:ff:b9:2d:
                    2f:8e:c9:12:1c:da:46:77:45:bb:6a:d3:3f:dd:27:
                    67:27:20:b3:ca:5c:4f:73:fa:c2:53:b4:68:4e:c5:
                    3f:2f:4d:17:39:60:24:03:f6:dd:66:1f:d0:dc:e7:
                    4c:e4:d1:35:05:1c:4c:b2:cb:a1:02:4f:80:5f:86:
                    da:28:66:c4:7e:d1:66:34:97:cd:f0:3d:a0:36:aa:
                    3d:78:82:b1:f2:92:00:3e:45:4d:02:1a:b7:12:88:
                    6c:9c:65:45:63:4f:1a:3d:ed:e3:39:7e:f9:ff:73:
                    bc:b6:16:1f:37:a9:d0:eb:44:c2:4e:2f:a4:4b:28:
                    9d:24:c2:94:c8:c7:d4:4a:25:53:f7:de:d1:b7:f7:
                    d2:10:c7:17:41:7f:7c:ef:be:20:ff:2f:f5:3a:5f:
                    86:a1:ed:8d:78:6f:7a:29:6a:75:2e:5a:7c:71:10:
                    ec:50:3a:8d:a4:57:f1:a9:16:fd:4b:da:51:1c:ac:
                    68:01:99:f0:85:90:fa:d1:8c:7f:1e:6e:de:6c:b0:
                    22:cf:ce:d0:32:68:97:e3:9d:34:c8:f6:50:90:77:
                    57:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E3:C3:AD:18:C5:EC:4F:34:6A:8A:E1:A0:26:CB:EB:A8:D9:0C:F1
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5df0037c-1e1f-4b45-aaac-0bb58dca7efe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:d6:18:34:6a:d0:cf:fb:cf:4f:39:e2:c7:ae:6f:74:aa:f1:
         ad:dd:42:c6:da:8a:c6:5e:0b:d5:99:18:94:bb:78:a1:02:b5:
         f5:31:08:d9:9d:c8:ea:67:97:d1:c1:49:2c:48:29:7a:0b:97:
         7b:7a:df:ed:f0:dd:85:e1:fc:4b:b8:7d:16:bd:2b:67:50:c3:
         8c:56:1c:47:01:3f:9f:e1:14:74:73:9d:35:60:0b:f0:8a:60:
         05:6f:3d:e7:28:13:04:a3:0a:2e:d1:bc:af:51:13:95:c5:68:
         a6:67:8e:06:ac:5d:c5:15:5b:81:20:9c:bf:18:c0:f4:32:4b:
         3a:7c:03:cc:cd:c8:1c:da:ca:da:80:38:86:64:85:42:50:49:
         f1:46:e7:13:1e:e9:cd:f7:02:e1:1f:83:71:3d:0f:80:f2:95:
         9d:ba:db:83:26:40:31:31:60:92:9c:bd:29:20:19:96:c6:05:
         7d:59:9d:69:de:46:7a:ee:ad:a2:62:03:d9:a0:e3:80:40:a2:
         60:e3:5f:35:9d:40:73:5f:6d:24:93:07:8c:55:62:98:43:da:
         11:3f:83:8c:55:33:96:f3:6f:21:93:16:e0:c0:ab:33:af:b1:
         0e:b2:94:41:92:69:e1:47:c0:53:fd:1e:2a:4f:b0:5d:94:17:
         bb:7a:c6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----