Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7b91a77b-f93f-4388-a363-b146c93b9ac5.roa
File:                     7b91a77b-f93f-4388-a363-b146c93b9ac5.roa (raw, json)
Hash identifier:          ursvA2CQmfLVu2OEd7i50eWLMI7Gvf3gaGn3ki6PvMo=
Subject key identifier:   A4:9E:09:80:55:0F:FB:5B:FA:90:71:C8:E8:62:58:80:DC:CC:63:11
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5F7953E29806E4F0DC9DA066007F058EC51DEECE
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7b91a77b-f93f-4388-a363-b146c93b9ac5.roa
Signing time:             Mon 18 Jul 2022 00:00:00 +0000
ROA not before:           Mon 18 Jul 2022 00:00:00 +0000
ROA not after:            Thu 21 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:79:53:e2:98:06:e4:f0:dc:9d:a0:66:00:7f:05:8e:c5:1d:ee:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 18 00:00:00 2022 GMT
            Not After : Jul 21 23:59:59 2022 GMT
        Subject: serialNumber=a6437fb789ca504a0e169e6ca2de058c3421a3d3f47cbbcc8257f7e578801cb6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:15:e8:c1:6b:73:ce:b7:78:df:c3:e6:f4:d4:
                    84:a1:de:f6:e9:df:d0:0b:54:89:39:be:38:ef:07:
                    8b:a1:9e:fb:32:cb:a6:b0:86:67:7d:00:f1:f8:c0:
                    a3:3e:49:3e:76:d8:0d:90:9f:d4:80:97:c4:25:c5:
                    fb:09:06:28:69:f2:f1:60:c6:1b:80:86:ac:e4:9f:
                    db:9a:a7:0e:99:33:77:4a:ba:5e:9f:63:34:1b:a0:
                    0b:ec:67:b7:e0:f1:21:d5:cd:34:79:e5:ec:b8:7c:
                    af:17:fd:73:07:c2:89:92:84:5d:a6:89:fb:7d:d9:
                    12:34:81:6a:38:59:d5:4e:32:ab:87:21:e6:f7:d3:
                    0b:a9:30:7d:9a:ca:42:b0:b1:b4:10:56:a3:91:de:
                    2e:52:83:a5:4b:18:6d:a0:3f:bd:68:e8:ea:c1:23:
                    7b:c8:78:f2:0e:aa:a1:99:c9:36:0c:1b:54:6f:99:
                    21:21:2d:17:15:62:fc:3a:2f:04:4d:7b:f4:4f:47:
                    f7:d7:2c:cc:c5:ac:99:e5:61:84:db:aa:4e:74:2e:
                    90:33:df:f8:72:c3:ff:2b:1c:b8:40:ac:b4:72:67:
                    c3:28:e2:b3:80:01:ca:3d:70:92:91:ce:dd:be:f1:
                    4a:20:c1:9f:5f:24:5b:04:8b:15:38:f8:a0:af:32:
                    c8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9E:09:80:55:0F:FB:5B:FA:90:71:C8:E8:62:58:80:DC:CC:63:11
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7b91a77b-f93f-4388-a363-b146c93b9ac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:3f:ba:f4:1a:90:63:6f:53:13:af:86:7c:96:26:3f:a7:2f:
         49:4c:b6:ef:43:fb:21:62:2b:07:6c:e4:d5:df:12:66:70:18:
         e6:6f:94:07:7c:97:d3:d2:4f:b2:c3:26:4f:b4:24:8a:a4:e2:
         c5:15:0b:39:6c:6d:be:71:d4:3d:8c:05:6e:54:ae:8f:df:14:
         2e:7b:12:91:00:c3:5b:1a:41:c4:35:95:cf:4f:57:03:4e:a4:
         4f:8a:e1:1b:2f:de:ff:5f:c8:50:5e:5e:0f:5f:84:98:ff:9c:
         a8:9c:1d:f4:44:cf:27:10:b3:1f:8f:bf:bf:b8:dd:e8:44:7d:
         11:c0:6f:63:c5:3f:be:b2:b7:8d:fe:e1:ea:8c:07:f3:5e:0d:
         d5:eb:d0:15:98:66:eb:75:bb:a4:05:7d:aa:39:14:f4:fd:b2:
         47:4b:04:33:7f:1d:38:a1:ee:b2:77:98:0a:e1:55:83:82:51:
         fb:c8:bd:77:dc:92:e2:46:61:47:f1:a9:dc:b1:83:55:a9:ba:
         8e:2f:5a:2d:39:0f:51:df:db:ba:c1:e4:90:41:69:b4:39:6b:
         22:3b:46:ef:89:49:60:e3:d8:f0:6f:c0:ae:3f:a4:c2:06:a7:
         7f:e2:de:01:52:28:a4:34:e3:1e:2a:a9:c4:cd:b1:64:d3:6e:
         c2:ed:a8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----