Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7f5f88d1-d11c-4841-bb1b-eaf56da61b25.roa
File:                     7f5f88d1-d11c-4841-bb1b-eaf56da61b25.roa (raw, json)
Hash identifier:          UiOnQJyZ+k3NLq/kcgrsBO8S1oB0ToZR2Ss3yY0M+fU=
Subject key identifier:   5A:29:1A:F1:DD:8E:02:74:AA:E2:CB:02:11:DE:06:AB:67:6E:4F:D6
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       492472AB4D2AD46DCAD049C2E9E2F007812977B0
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7f5f88d1-d11c-4841-bb1b-eaf56da61b25.roa
Signing time:             Fri 14 Oct 2022 00:00:00 +0000
ROA not before:           Fri 14 Oct 2022 00:00:00 +0000
ROA not after:            Mon 17 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:24:72:ab:4d:2a:d4:6d:ca:d0:49:c2:e9:e2:f0:07:81:29:77:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 14 00:00:00 2022 GMT
            Not After : Oct 17 23:59:59 2022 GMT
        Subject: serialNumber=a6a63b0a4d4ef6a3e51f5acc67ec014dc5463a13ebd36fd9ece35463819bdd98, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:61:ea:07:a0:1d:56:12:fe:b6:7c:98:89:68:
                    29:52:71:ed:bc:7e:36:a9:80:9e:72:03:29:7e:23:
                    d6:36:65:dc:66:a9:32:fc:34:22:ff:ae:73:41:03:
                    1d:78:96:d2:2b:f0:f1:5f:3b:80:5e:aa:d3:e9:55:
                    76:b5:51:fd:ea:15:c3:89:b0:6b:57:40:89:ff:0d:
                    f4:85:51:98:95:d9:2c:57:7c:b4:8b:ac:01:18:f8:
                    03:98:36:fa:71:bc:cd:2b:55:82:63:55:20:8c:97:
                    d9:69:6a:b3:d2:b7:f2:d0:6a:db:8f:3b:ff:47:df:
                    5c:1d:0c:cb:e5:b7:14:b2:a8:4c:c8:42:42:4e:40:
                    78:e6:9c:42:94:92:85:99:d2:53:fe:4d:0f:96:d9:
                    67:2c:ea:90:bc:26:b0:3d:d7:c1:97:27:c5:57:33:
                    0a:db:06:18:c7:03:6d:92:b5:f0:04:69:b5:a6:81:
                    4a:77:ee:53:f7:28:af:d4:6e:22:13:31:e7:69:f7:
                    2f:73:0a:b5:66:34:0d:5e:45:d8:04:8f:8b:f2:b5:
                    7a:87:08:27:fc:35:62:b3:bd:85:93:e2:8d:0a:7e:
                    aa:58:3d:62:09:56:1e:2a:0f:92:38:43:54:8f:ec:
                    fc:04:10:8e:ac:f9:8c:77:d7:57:b5:03:77:c7:bc:
                    3f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:29:1A:F1:DD:8E:02:74:AA:E2:CB:02:11:DE:06:AB:67:6E:4F:D6
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7f5f88d1-d11c-4841-bb1b-eaf56da61b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:84:41:00:92:a4:53:00:20:9f:30:cc:0a:92:b9:ac:99:0f:
         24:35:d9:49:dc:fb:60:83:c5:07:05:96:20:04:7c:c1:5c:04:
         15:aa:26:50:3f:83:8a:ed:2d:8e:96:4e:cb:21:6e:0f:0c:86:
         be:e3:2f:57:21:62:35:1d:e3:41:48:3f:72:4e:6f:30:a0:c5:
         d7:fe:c0:0f:c2:df:85:fa:f3:df:9d:45:76:a0:87:29:c1:5e:
         17:63:6c:d2:5f:bd:a4:99:c6:ff:7b:1b:88:fc:b6:41:37:b9:
         a8:21:86:77:f8:dc:1d:e7:95:c6:b0:9d:97:56:3e:87:84:72:
         85:a2:70:8e:23:b6:9e:a7:ca:eb:63:a9:ea:0e:a5:ee:a8:f4:
         4b:13:e6:92:7e:44:02:ec:1c:dd:36:d7:e5:c5:1c:15:49:93:
         81:c9:fc:40:08:c4:17:81:12:bb:1b:5c:b1:f5:9f:e3:cc:d6:
         88:56:19:36:05:22:08:4b:3a:f9:b5:63:7f:83:21:56:4d:87:
         51:f2:a3:e9:e3:7a:84:3c:9f:1f:77:40:d4:e0:58:9e:66:9b:
         62:3a:e5:41:00:5b:40:52:df:0d:9e:9b:59:f1:f6:55:5b:60:
         ca:69:70:e8:29:57:43:30:01:59:dd:e3:bc:90:21:b9:fb:bc:
         a5:bf:5a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----