Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7d2a5099-535a-4e3c-8900-deb674bfaf07.roa
File:                     7d2a5099-535a-4e3c-8900-deb674bfaf07.roa (raw, json)
Hash identifier:          skIS4PNQc+motR3yp8mZgxoH0roo7y066STUiSAGFC8=
Subject key identifier:   85:E7:C2:09:A3:42:34:FC:F3:FF:CB:A1:E5:EB:96:E9:91:89:48:31
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       44E8EE663F28914DD72A346A91B0B35D0874C9ED
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7d2a5099-535a-4e3c-8900-deb674bfaf07.roa
Signing time:             Sat 16 Jul 2022 00:00:00 +0000
ROA not before:           Sat 16 Jul 2022 00:00:00 +0000
ROA not after:            Tue 19 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e8:ee:66:3f:28:91:4d:d7:2a:34:6a:91:b0:b3:5d:08:74:c9:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 16 00:00:00 2022 GMT
            Not After : Jul 19 23:59:59 2022 GMT
        Subject: serialNumber=008a72ed43d8cb6708fa092ea11242b233422c0091cc29f8884ce27ee9fb4c1d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a9:9c:71:f9:29:46:a9:9e:55:25:be:39:77:
                    17:74:7e:4d:38:cc:77:18:d6:af:1d:f4:17:fe:af:
                    52:65:02:28:20:2e:c8:a0:37:82:83:f8:3d:cf:0d:
                    02:af:d5:30:2f:64:ca:1b:5d:fc:62:87:73:ac:1e:
                    ce:97:a1:3e:44:69:c3:11:5f:dc:70:37:d4:9a:39:
                    1a:92:d6:e7:34:56:29:f7:dc:26:3b:e0:0a:0c:61:
                    2c:dd:38:30:ce:b5:e2:91:83:18:47:89:fd:67:92:
                    bb:bf:2f:2a:23:a1:7e:fd:00:9e:c0:d4:18:c0:54:
                    c7:ae:e0:e4:53:2e:b7:7d:d6:30:54:d5:20:f9:d3:
                    54:ae:8c:26:ee:29:2d:a8:55:e1:b6:ab:f6:5e:a0:
                    ed:f6:30:03:11:2f:57:54:16:bb:fe:38:05:c5:f6:
                    df:5a:42:35:70:9c:70:7f:2d:c9:2d:b0:7c:3b:67:
                    4c:7b:5b:18:01:f8:b3:3b:7f:a1:39:29:23:27:a6:
                    d3:2b:ec:f9:4a:9e:fc:61:53:aa:47:23:49:9e:58:
                    29:c3:97:ce:94:60:c7:5f:69:e1:26:a7:e0:bc:eb:
                    50:24:1f:07:18:dd:c0:b2:55:4c:69:62:5c:c5:20:
                    aa:e2:7d:20:38:45:30:4e:be:28:10:21:1e:73:c3:
                    50:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E7:C2:09:A3:42:34:FC:F3:FF:CB:A1:E5:EB:96:E9:91:89:48:31
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7d2a5099-535a-4e3c-8900-deb674bfaf07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:24:10:ee:89:4d:f9:3c:60:e1:6d:2d:6e:a8:2a:e9:1f:38:
         8a:76:62:d2:06:2d:0c:80:7e:b4:54:8a:4a:90:a2:d5:72:3f:
         69:db:de:98:11:27:6a:26:99:61:14:2c:26:20:74:ad:08:ce:
         03:ef:da:d2:f8:ac:fe:f9:48:e4:f9:7e:72:24:ce:83:c5:75:
         41:14:34:7a:e3:2b:0d:c7:97:cb:23:f2:cf:21:4a:ba:98:5b:
         90:fd:f6:40:43:2f:6f:93:47:67:07:2f:ec:72:fc:ff:7c:9f:
         ee:5c:2d:09:4c:e7:b5:f1:1e:26:7b:27:1a:c5:84:4b:0a:83:
         0b:e1:d5:75:a4:a6:12:20:59:e3:b1:ab:e7:81:76:1d:ec:95:
         2c:01:4a:9b:1c:42:05:6c:6c:73:23:24:ae:c8:dd:10:3e:3d:
         f5:5b:31:cd:7e:fc:ed:ae:bc:26:fd:ca:90:78:2d:b5:f0:93:
         0b:bf:82:c3:39:b1:bc:c1:dd:ef:50:6e:d6:ac:d0:2b:b4:ea:
         2a:63:ba:97:ab:17:9d:41:d6:df:41:91:3c:43:a6:a2:97:93:
         1e:9a:b0:a8:f0:a2:6d:28:51:c0:19:2e:53:8b:dd:ba:7f:91:
         5f:b0:5c:f1:fe:2f:d8:37:f1:90:73:ce:75:83:16:d3:5b:24:
         58:e4:cd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----