Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7c89cf61-34c5-4506-a6ba-e66dd11f20ab.roa
File:                     7c89cf61-34c5-4506-a6ba-e66dd11f20ab.roa (raw, json)
Hash identifier:          QytlYcIEl/QEEgg8CxJKla5G86N54x+RInlvv+zI+eQ=
Subject key identifier:   C0:67:D7:B9:13:C9:04:00:CB:DB:5C:2B:0E:D6:30:2B:E9:FE:21:2E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5ADE1A92F4A4A2724A8B529167C8DA088C21688C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7c89cf61-34c5-4506-a6ba-e66dd11f20ab.roa
Signing time:             Thu 25 Aug 2022 00:00:00 +0000
ROA not before:           Thu 25 Aug 2022 00:00:00 +0000
ROA not after:            Sun 28 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:de:1a:92:f4:a4:a2:72:4a:8b:52:91:67:c8:da:08:8c:21:68:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 25 00:00:00 2022 GMT
            Not After : Aug 28 23:59:59 2022 GMT
        Subject: serialNumber=508cc133767df0441e6413e938340132d8496ff7dd0725395b7eddb1b547d918, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e5:6d:fe:9a:b1:36:e1:30:44:cf:96:fc:3f:
                    d7:f3:3b:3b:11:98:57:da:63:33:3c:e6:68:e3:0f:
                    a0:cb:7d:88:bc:19:40:e7:2a:e5:f7:a2:07:1e:fd:
                    b8:3d:81:2f:6a:72:b0:4c:d2:8c:c2:de:6d:29:a9:
                    97:bb:51:c2:65:56:dd:f5:de:5f:d1:91:ed:d0:c8:
                    37:85:5d:da:74:0a:8e:f5:ae:87:87:42:5f:7f:73:
                    db:45:77:51:b7:04:c5:73:44:a3:67:91:08:46:12:
                    36:ca:36:46:41:1c:70:1f:3a:4e:fd:da:84:c1:48:
                    b7:20:ad:7f:86:68:f7:c3:2f:4d:3d:4a:35:15:da:
                    96:76:52:eb:08:cd:41:42:6b:50:aa:8d:6a:29:36:
                    cf:95:66:3e:9f:0d:a8:b6:a1:be:3b:40:1a:09:a2:
                    6d:4c:a0:7d:53:81:3a:c8:b2:29:ce:ac:86:3e:8a:
                    76:b4:04:56:39:e7:da:a5:19:e7:98:e4:01:dd:ed:
                    a7:1b:4d:93:8b:88:7f:40:b1:8d:99:b4:82:3d:d3:
                    6b:fb:ff:9a:8e:4c:02:85:5a:21:9b:30:11:34:db:
                    ae:c7:1c:3f:40:46:6a:47:e4:29:0e:68:f7:61:8d:
                    61:b2:74:38:06:b4:ea:4e:64:d1:ee:51:62:de:09:
                    e3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:67:D7:B9:13:C9:04:00:CB:DB:5C:2B:0E:D6:30:2B:E9:FE:21:2E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7c89cf61-34c5-4506-a6ba-e66dd11f20ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:29:52:74:74:43:ee:0d:b7:3d:dc:7b:9f:b0:30:0b:40:fd:
         fb:2e:db:dd:0d:3a:bd:52:44:d2:56:af:9c:03:f6:77:ef:f8:
         b7:d3:36:fe:e0:17:6c:fd:51:6d:fd:2a:f8:82:0c:3b:b3:a6:
         09:e5:e4:f0:e6:8f:8b:86:5b:0e:59:08:c1:04:2b:eb:80:1f:
         6c:da:28:d7:f0:b4:d6:61:15:71:14:4a:89:bd:0a:84:81:8f:
         17:a8:a3:7e:31:85:bf:ce:58:bc:4b:77:47:72:ff:f2:53:23:
         78:f7:31:8e:17:94:4c:bf:1a:50:2a:46:56:9b:43:3c:fe:1b:
         a1:e1:e1:d4:1f:c3:0b:a5:2f:e8:76:3f:b2:d1:eb:05:67:a7:
         0b:7c:4e:f3:9a:79:7a:01:45:cf:50:ae:ec:4f:9a:72:3c:09:
         3b:1a:95:bd:df:87:c4:69:14:1d:9a:46:c1:99:7a:ff:55:db:
         d9:59:70:ee:44:30:4d:19:b7:87:0e:d6:2d:2b:ba:3a:8f:d6:
         2e:ee:22:e0:9e:2f:da:79:07:34:9b:0a:17:c6:ad:42:66:6c:
         01:19:23:b7:ca:fe:27:db:85:4c:0d:8e:ca:a6:43:d7:a8:23:
         f3:95:e2:52:1c:99:9c:e0:4d:36:a8:a0:eb:a0:96:f6:e7:3a:
         f0:88:51:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----