Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7927e514-e02d-4d23-b471-cc74970f12fe.roa
File:                     7927e514-e02d-4d23-b471-cc74970f12fe.roa (raw, json)
Hash identifier:          RDYtPNkRSp+a9pacLZHSwS8lQJ6xZFyKQVp9TZYkh6Q=
Subject key identifier:   EF:8A:D7:37:76:51:25:A3:80:3B:E5:2B:F4:F9:A0:3C:57:81:00:3D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4D2FB81297B4D5EA51F2D8A14B866E2AD03DD95C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7927e514-e02d-4d23-b471-cc74970f12fe.roa
Signing time:             Sat 09 Jul 2022 00:00:00 +0000
ROA not before:           Sat 09 Jul 2022 00:00:00 +0000
ROA not after:            Tue 12 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2f:b8:12:97:b4:d5:ea:51:f2:d8:a1:4b:86:6e:2a:d0:3d:d9:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul  9 00:00:00 2022 GMT
            Not After : Jul 12 23:59:59 2022 GMT
        Subject: serialNumber=75622c80d4a57748111fd2f7879a7ea4968514a8769410a1da0a7ce86aaa16d0, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ce:c1:4d:fe:0a:d0:49:86:1d:26:ef:84:3e:
                    ef:a9:6d:3a:c9:6b:bd:4d:41:7f:dd:c6:f4:76:73:
                    1a:fd:23:e3:96:b6:38:4f:55:53:41:b2:46:42:ea:
                    4e:3b:af:32:fe:94:27:60:01:6b:98:85:01:a9:ae:
                    d2:5a:71:e5:21:6f:82:9a:80:cf:cf:0b:0c:ee:2d:
                    e9:46:59:cd:d3:27:b4:82:da:8b:44:1d:48:57:26:
                    02:ad:b0:a9:ca:f9:6c:1b:f6:f2:29:2e:6e:63:17:
                    82:de:ad:a1:68:ed:16:48:94:83:1e:66:01:9f:67:
                    42:9e:4e:e2:d2:8b:8b:d5:15:3e:b9:76:60:0f:a6:
                    55:8a:42:69:c6:ac:70:a1:8c:eb:51:35:aa:05:65:
                    dd:1d:2c:e1:11:d9:0f:6d:2e:6f:db:28:d2:98:09:
                    56:24:49:5d:96:58:c5:89:45:e8:15:37:44:b3:d7:
                    22:ba:5e:4c:ed:b1:eb:8f:91:27:9d:f7:4c:ea:3d:
                    79:9a:5a:6d:3a:9f:46:35:5a:a9:8b:ab:fd:d3:65:
                    9a:4b:71:38:e0:8e:b6:ab:4c:fb:07:1d:f2:83:fc:
                    22:f0:70:9d:46:d9:11:38:6b:aa:bf:ed:d3:45:ca:
                    45:55:da:e3:dd:c5:e8:a6:f6:93:68:f8:9d:d6:87:
                    ff:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8A:D7:37:76:51:25:A3:80:3B:E5:2B:F4:F9:A0:3C:57:81:00:3D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7927e514-e02d-4d23-b471-cc74970f12fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:f0:8b:af:30:a1:5f:cd:b9:5c:b4:c7:aa:f0:7f:ab:e6:c3:
         1a:37:8c:68:88:9b:f0:67:7b:09:e7:8b:23:9a:b0:35:7d:bc:
         65:e2:a1:f4:54:92:f8:36:87:60:84:ac:ca:fa:fa:d5:47:2f:
         16:2a:98:8d:2d:9d:16:f1:09:0c:28:3d:5a:86:3e:85:63:7c:
         cf:e5:f9:67:25:ce:98:e4:21:e4:bc:8f:ab:8e:66:6b:40:46:
         29:63:93:b4:d9:32:b4:8f:ea:3f:a7:69:77:05:65:d0:4b:40:
         fb:07:f4:44:0c:e0:3a:ca:4c:7f:e7:98:5e:5e:6f:0b:8a:bc:
         d8:d9:97:c8:37:ae:a4:ed:08:14:9f:4b:d2:82:bf:5c:f0:7b:
         2c:ad:5d:75:1f:5f:cb:ed:28:5a:29:c0:03:f1:c4:6d:a3:e7:
         58:56:49:71:5b:b7:95:8d:f1:44:22:a0:5e:30:a8:fd:e5:a7:
         ca:2b:a8:32:b3:28:76:53:b4:53:51:95:96:a4:43:13:df:15:
         a5:9e:8d:00:12:59:d5:f8:e2:ab:df:09:ee:75:95:0e:d7:1b:
         f4:b1:c7:e6:94:7a:bc:14:41:0d:c9:1e:65:14:d9:ba:52:7d:
         ab:66:09:81:07:67:2b:ce:7a:63:1f:66:1e:2a:12:ef:e6:dd:
         21:2e:b1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----