Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6cbf4223-54e1-4939-ac46-ba0dbc056257.roa
File:                     6cbf4223-54e1-4939-ac46-ba0dbc056257.roa (raw, json)
Hash identifier:          dj8n6RCGWagzVW/yySqhLQGfmZ/1v9Flg2giDKcyE7Y=
Subject key identifier:   75:B5:F4:63:D7:C4:B5:63:B6:BB:2C:94:99:4F:FE:39:43:2F:2D:2E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       17C512A2386DCF72A7C34469C6D7D2544EEC34CA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6cbf4223-54e1-4939-ac46-ba0dbc056257.roa
Signing time:             Sat 09 Jul 2022 00:00:00 +0000
ROA not before:           Sat 09 Jul 2022 00:00:00 +0000
ROA not after:            Tue 12 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c5:12:a2:38:6d:cf:72:a7:c3:44:69:c6:d7:d2:54:4e:ec:34:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul  9 00:00:00 2022 GMT
            Not After : Jul 12 23:59:59 2022 GMT
        Subject: serialNumber=c5ffdb2e9316e7851dc240fb496cfafdba47c47601f1c74e5961889770dfb985, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b3:8f:83:d5:19:7b:fc:a4:82:b1:45:7d:6b:
                    fa:e8:11:3f:64:97:75:bf:ff:75:7f:1d:8c:30:89:
                    bd:14:95:10:ea:84:51:ee:96:90:d1:c5:16:ab:75:
                    8f:36:b0:6f:8c:71:10:3c:51:7a:52:fb:0f:70:1d:
                    39:c4:9f:d4:03:46:0c:72:e4:2f:ed:85:ee:ed:a9:
                    85:a9:91:43:13:10:53:a5:b4:38:f4:44:71:d8:52:
                    79:b8:bf:59:6d:63:bc:4d:33:ea:60:3a:1d:06:9f:
                    91:4f:21:a9:0e:28:0c:ee:ec:96:f2:61:26:97:c5:
                    c3:61:3f:7f:18:ad:f7:1c:92:d4:19:c1:79:11:09:
                    ca:e6:64:f5:1c:fa:95:92:3b:03:da:a8:87:7b:09:
                    2e:68:17:c4:51:ca:aa:13:f8:1d:17:3d:11:85:76:
                    4a:5f:4c:8f:50:98:ff:07:4c:40:30:ca:7d:fc:9c:
                    d9:22:79:28:55:b0:bf:a1:86:b3:06:fb:0d:d3:86:
                    fe:ad:70:6e:c4:b2:58:ed:71:74:6f:c1:dc:aa:63:
                    5c:98:b0:23:d3:e9:6c:26:06:07:c1:e9:bc:1e:21:
                    f3:63:0c:c1:52:54:00:a5:12:54:f9:ab:3a:69:03:
                    54:3b:90:71:16:8f:0d:b6:29:e1:44:76:b8:35:c1:
                    19:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B5:F4:63:D7:C4:B5:63:B6:BB:2C:94:99:4F:FE:39:43:2F:2D:2E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6cbf4223-54e1-4939-ac46-ba0dbc056257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:65:0a:42:cd:92:13:a5:6f:72:25:24:85:ad:39:ab:8a:96:
         f8:dc:ab:e7:37:35:a9:2d:0e:43:b8:53:01:8b:dd:5d:6d:49:
         d5:c5:69:ff:19:ca:1d:ba:25:29:4b:55:75:72:c5:66:42:a1:
         ec:e7:0a:bc:7c:28:01:a6:d3:8f:92:ec:fe:7b:db:4c:30:7f:
         f5:c7:8b:ea:a8:05:42:28:c3:cf:6d:61:6c:47:17:0c:ad:20:
         d2:c4:20:88:47:b5:98:bb:eb:be:50:87:60:20:0f:58:83:c7:
         5f:71:18:95:5d:01:3b:87:82:22:a9:69:4a:d3:b9:23:91:66:
         7b:79:50:d4:7c:62:4e:0b:44:25:3f:5c:d8:be:58:db:14:4d:
         6a:15:60:89:65:09:2d:23:6f:45:aa:7c:c9:68:f3:77:3f:5d:
         a7:93:b5:33:34:1c:f2:2f:3c:a3:eb:f9:be:08:8e:57:ff:c8:
         39:c6:02:f6:87:eb:93:99:c8:97:cb:d7:c4:7f:05:b4:e1:73:
         b2:ef:11:75:2f:2c:2a:2d:69:bc:e8:1b:3b:ec:fc:ee:60:02:
         16:b0:6e:b6:f0:79:90:6e:2b:99:6d:df:c3:94:83:7a:6e:bc:
         b2:47:75:c8:5d:92:f1:4f:65:ce:fc:07:ea:4e:8c:15:37:32:
         68:67:33:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----