Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8e50f70b-c672-4401-bd0f-6e842dd9d4a9.roa
File:                     8e50f70b-c672-4401-bd0f-6e842dd9d4a9.roa (raw, json)
Hash identifier:          f1kNewHDRIQoDswtqPn0XjkQRBgpUZY62mD1+b4PBFE=
Subject key identifier:   5D:BA:3D:C6:76:6A:9A:B0:76:35:CA:6B:D5:C9:81:78:16:A7:F9:0E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       510DA96096A3EB8006F09CFBB4FA46DB01EA880C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8e50f70b-c672-4401-bd0f-6e842dd9d4a9.roa
Signing time:             Tue 26 Jul 2022 00:00:00 +0000
ROA not before:           Tue 26 Jul 2022 00:00:00 +0000
ROA not after:            Fri 29 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0d:a9:60:96:a3:eb:80:06:f0:9c:fb:b4:fa:46:db:01:ea:88:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 26 00:00:00 2022 GMT
            Not After : Jul 29 23:59:59 2022 GMT
        Subject: serialNumber=67e9536ca5709a2cda6829a4cd506e8d048a579c8b59e04fe1e8d625ed186f48, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4f:df:aa:ee:d0:c7:7c:30:04:b2:19:90:0f:
                    82:bb:01:bd:c3:c2:9b:9d:45:ff:25:ba:20:cd:f0:
                    de:d6:a0:df:e6:c5:cb:8c:88:06:13:4f:11:c0:5e:
                    c5:d0:34:4a:da:f4:25:63:30:b1:cd:4c:22:cc:91:
                    ce:2b:3d:2f:c7:c0:bb:31:02:91:3f:6b:45:75:06:
                    16:99:42:c5:aa:63:21:c3:5d:53:85:28:88:7f:e6:
                    fa:2a:02:65:9c:e7:3f:f2:11:81:49:0a:aa:09:7e:
                    ce:b0:8d:18:5a:55:cb:97:7e:d3:05:5a:34:1d:ba:
                    3f:91:46:84:8f:ee:16:33:da:57:9e:b2:e0:fa:00:
                    b1:48:1a:b3:c9:96:b3:7b:a3:4d:06:72:e7:1c:32:
                    4d:00:08:e4:39:3b:40:bf:d3:cd:ce:8f:92:6c:5a:
                    fa:30:75:d8:00:57:ab:4f:f6:1d:9f:d2:3a:d4:e7:
                    00:d8:e0:90:c7:8b:ec:41:39:79:70:49:e1:ad:66:
                    de:b0:dc:b9:8e:30:3b:9f:32:db:18:d4:e1:63:b7:
                    97:e4:7e:b3:22:8a:fc:a3:5c:02:ab:fa:36:f0:3d:
                    e2:93:3b:ce:af:06:bc:ef:da:b9:ff:db:c2:b1:50:
                    e7:f9:83:c9:5f:ed:8d:04:bd:a6:55:54:96:6c:f8:
                    2f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BA:3D:C6:76:6A:9A:B0:76:35:CA:6B:D5:C9:81:78:16:A7:F9:0E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8e50f70b-c672-4401-bd0f-6e842dd9d4a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:51:5c:b4:d2:60:fb:02:a1:d9:33:28:0e:c4:7e:ef:23:2b:
         76:34:1d:e7:15:d2:6f:66:a1:4d:9d:c3:ae:3f:f5:d8:ed:99:
         fc:df:7f:a9:47:ac:f9:be:81:e8:04:bd:48:e0:d5:a2:9d:d5:
         c5:e4:0f:d9:86:49:13:e6:92:3b:96:87:eb:44:55:1a:bd:bf:
         d9:09:ae:ae:2a:be:13:a4:ba:97:7b:e4:22:41:1b:e1:b6:1a:
         d4:05:19:be:c2:57:ca:b9:b4:09:fd:07:89:69:42:77:6c:b5:
         02:e6:d0:6b:87:00:60:28:01:93:8b:f6:29:36:6b:bd:b6:2b:
         a3:63:16:9b:68:de:58:ba:a7:a5:93:8d:58:15:62:eb:8e:1e:
         f9:03:f4:d0:a4:c3:a0:2c:9e:01:37:54:43:7e:f0:f5:95:60:
         91:ae:7c:66:41:19:f0:ea:29:21:92:2b:e8:87:e5:55:9b:4f:
         32:42:b5:b6:8b:60:be:03:f5:ca:fc:e2:44:19:e0:ad:07:e2:
         8f:a9:82:63:60:ca:41:aa:53:b7:ea:a0:3a:ac:61:b0:ae:e0:
         52:73:3f:69:4d:38:6d:b3:85:95:0b:a5:b0:2e:13:6e:97:d9:
         71:66:27:ea:3d:ca:94:f9:b2:93:58:08:c8:16:67:c5:53:6c:
         0d:3f:59:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----