Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/72d16699-fb58-410a-8485-1ab7c75fc892.roa
File:                     72d16699-fb58-410a-8485-1ab7c75fc892.roa (raw, json)
Hash identifier:          xmKogI68Vv2tr3b83wWKMU4hEA343Foe3xSsYFOWGBQ=
Subject key identifier:   3F:80:E8:71:41:50:82:30:C5:D1:F6:26:69:A8:6E:80:90:6C:58:F4
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0D4FE2FCF2D3D956CC0B0628F48AED0A2BF278F6
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/72d16699-fb58-410a-8485-1ab7c75fc892.roa
Signing time:             Sun 21 Aug 2022 00:00:00 +0000
ROA not before:           Sun 21 Aug 2022 00:00:00 +0000
ROA not after:            Wed 24 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4f:e2:fc:f2:d3:d9:56:cc:0b:06:28:f4:8a:ed:0a:2b:f2:78:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 21 00:00:00 2022 GMT
            Not After : Aug 24 23:59:59 2022 GMT
        Subject: serialNumber=87ffd3454b0920384829215da747baf914abe5198c1089d2faa59bd307d84694, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c6:43:62:53:2b:c7:bd:38:d5:67:c8:37:57:
                    46:b0:95:d0:aa:9f:ec:27:fd:62:cb:77:10:c5:5a:
                    9b:41:2d:2e:c8:56:55:a8:78:7e:54:d0:cb:05:74:
                    4d:ed:0d:e0:d0:a6:2b:00:58:d9:0b:b5:1c:ed:25:
                    08:00:2d:1c:54:42:b5:e3:e5:3f:74:5b:80:dd:29:
                    80:2d:54:6a:76:44:79:41:78:e6:21:d3:44:e0:bc:
                    e7:0d:e8:fc:ff:14:9d:07:bf:f4:fd:ce:3e:52:d8:
                    9e:bb:fd:a2:f4:b0:c3:c5:d1:b5:3f:31:fa:1a:4a:
                    5b:8f:3e:99:a6:c0:27:3a:79:88:72:07:91:5e:9d:
                    f1:9e:0b:aa:c6:45:a9:65:57:1c:36:d8:e2:a8:af:
                    2e:7a:2c:10:9a:3d:49:45:11:27:a4:18:e4:a3:31:
                    40:1d:84:05:5e:30:b6:dc:4e:f3:66:18:5a:49:a6:
                    bf:87:81:49:24:a2:76:08:ee:d4:78:5d:ee:5a:a4:
                    c7:5c:50:ea:f2:2e:f4:ad:3f:35:9d:26:a2:11:2b:
                    04:7b:aa:3b:7e:38:da:e3:8f:fa:96:0a:ae:e6:5c:
                    a9:6f:42:89:d6:af:ad:52:52:8d:9d:92:de:f4:56:
                    ed:a6:31:8b:ef:d7:05:ba:23:46:2e:83:b7:c3:93:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:80:E8:71:41:50:82:30:C5:D1:F6:26:69:A8:6E:80:90:6C:58:F4
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/72d16699-fb58-410a-8485-1ab7c75fc892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:48:78:4e:42:26:02:bb:15:f5:02:f0:a6:24:19:6f:9b:93:
         ec:26:ef:a6:e3:28:92:c9:70:e3:21:ab:ce:64:18:35:5d:1d:
         e6:70:21:08:3b:02:25:b8:30:e9:34:25:be:ee:f5:cd:31:b7:
         70:1f:1f:df:13:65:97:80:b8:76:11:f2:ac:66:27:33:5f:9b:
         34:ed:34:61:74:e0:d5:4e:06:99:5b:4c:63:89:93:d6:b0:11:
         52:dd:2f:62:82:76:f2:a6:91:e5:ad:b7:29:74:0f:d3:b0:b8:
         c1:b9:d4:4a:d1:f3:56:1e:3b:8e:3f:7a:62:9c:b9:85:2c:8b:
         b9:bf:68:56:56:46:50:30:46:2a:7b:1b:88:1c:54:51:bd:67:
         f5:61:63:cb:f5:5a:88:8b:d7:10:c3:33:29:d5:87:bc:d5:6d:
         36:2a:95:5d:7e:a1:78:b1:8e:b3:44:5a:3b:b4:f7:12:47:d5:
         63:62:1f:9f:17:7b:4d:6b:f6:ac:82:98:af:04:11:9c:9f:6b:
         9c:e0:a1:d0:17:be:19:ef:c6:1d:0f:d0:b8:e4:a9:13:85:eb:
         d4:dc:02:4d:13:fc:44:ac:78:7e:07:c1:ce:b0:0c:e3:f3:4b:
         2d:dd:06:13:e2:fc:14:70:89:e8:66:20:54:cd:8a:88:2a:4e:
         ce:f9:26:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----