Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/91878968-1b05-4fe6-83ee-adeedc53973d.roa
File:                     91878968-1b05-4fe6-83ee-adeedc53973d.roa (raw, json)
Hash identifier:          QWDa6PhJw1S9OS0xCTAESd5b+sGHI94JYe5JLytxurk=
Subject key identifier:   C3:B4:F4:75:29:30:91:42:4C:87:C8:1A:D7:51:1C:60:5D:81:EE:A2
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       651E9A3F731FADFEED970F580B4DFE205DF8EBB1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/91878968-1b05-4fe6-83ee-adeedc53973d.roa
Signing time:             Wed 31 Aug 2022 00:00:00 +0000
ROA not before:           Wed 31 Aug 2022 00:00:00 +0000
ROA not after:            Sat 03 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1e:9a:3f:73:1f:ad:fe:ed:97:0f:58:0b:4d:fe:20:5d:f8:eb:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 31 00:00:00 2022 GMT
            Not After : Sep  3 23:59:59 2022 GMT
        Subject: serialNumber=8cfc62a11067952840b12ad713fc1af78fb9f3434b763050b1053afc58ab7c75, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:16:8f:47:27:89:cf:52:fc:1a:8c:83:18:
                    ae:b3:11:98:88:02:79:3f:db:27:f0:b3:a3:2c:8b:
                    23:9d:16:c2:32:8c:8f:ea:28:97:56:97:23:e2:38:
                    b7:2a:00:81:d4:5d:d1:04:7e:c6:41:fc:6e:51:d8:
                    24:67:a2:55:e8:4f:68:c2:e5:6b:92:85:cc:6b:c1:
                    48:69:d9:28:77:d6:5a:21:20:04:34:c1:5f:60:d2:
                    b6:68:e8:83:90:08:33:0e:dc:76:0e:53:14:f5:9b:
                    8a:2c:47:b3:5a:97:8d:d7:3c:d1:a3:c1:03:a0:ed:
                    e4:14:87:81:ee:d0:6c:12:9d:7d:33:d9:c3:6e:ae:
                    f6:53:df:36:74:7c:ad:8e:31:c4:fc:a6:d5:17:ae:
                    6b:62:af:7b:d7:42:ab:94:ce:ce:48:82:fb:be:33:
                    d8:1e:19:ac:f0:65:fd:0f:ab:f8:b3:6b:7e:86:63:
                    d4:5f:62:4d:5e:ed:09:a4:0d:84:18:3d:2f:b9:cb:
                    1a:5e:e9:e4:77:57:c9:8c:1a:6a:97:03:16:09:65:
                    33:ff:ee:08:96:6c:29:cd:1b:7b:fa:3e:23:00:74:
                    52:89:38:8e:22:78:b4:62:c8:31:2e:c5:fe:03:0a:
                    2e:13:ab:a4:65:9f:23:10:c4:46:8b:4f:2f:66:47:
                    a5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B4:F4:75:29:30:91:42:4C:87:C8:1A:D7:51:1C:60:5D:81:EE:A2
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/91878968-1b05-4fe6-83ee-adeedc53973d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:a5:2a:f5:5e:ba:59:70:60:6b:35:a1:c9:55:b8:8a:43:28:
         37:6b:46:4d:80:64:18:ba:ce:37:e6:ce:43:fe:cc:bc:1e:c6:
         67:a9:c2:9e:de:7d:84:6b:78:13:9f:e5:27:04:44:ea:6f:5d:
         18:29:d0:a4:32:54:03:d4:75:61:08:48:55:41:eb:57:4a:22:
         fa:e2:9e:76:00:c4:b0:92:34:90:a3:79:3b:60:30:50:f7:16:
         15:fb:e0:b1:3a:60:fa:5d:1a:8e:54:5e:d9:20:1a:a6:69:3a:
         5a:aa:b8:50:7c:2b:ed:61:7e:35:db:68:95:15:e1:ff:87:92:
         01:8c:09:8f:73:dd:d9:a9:14:19:97:a1:c9:83:0a:13:70:d3:
         7f:8f:2d:cc:3c:e9:68:e1:a1:ea:c9:7a:3a:5d:59:d6:4a:02:
         96:10:2d:78:bf:86:7e:8f:34:bb:a7:93:e4:f8:97:eb:a0:af:
         36:ca:68:6e:1e:2b:d1:72:26:91:d8:fb:63:66:bf:2b:e0:c5:
         7c:99:f0:96:ed:be:43:b1:ae:21:bc:46:e7:59:c4:23:b7:7c:
         ca:ef:0b:8c:79:ae:18:d4:28:9b:90:df:19:8c:0d:1c:68:71:
         80:f6:a9:aa:3e:89:36:49:f1:28:b6:26:3e:6d:fc:35:c2:83:
         22:e6:64:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----