Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/99d07d4e-31bc-4d0c-83b1-d731997088ac.roa
File:                     99d07d4e-31bc-4d0c-83b1-d731997088ac.roa (raw, json)
Hash identifier:          RsSaoYuZeMoh5Cpa6ojT2wtz/dyrVtOVWo/S+wD1dOs=
Subject key identifier:   36:A3:A4:C0:ED:E8:2B:2F:C4:D3:3B:49:39:8C:2E:CA:A3:3C:FF:97
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       17664651C81532271BC084CCAFC9FD4E18EE13C1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/99d07d4e-31bc-4d0c-83b1-d731997088ac.roa
Signing time:             Sat 06 Aug 2022 00:00:00 +0000
ROA not before:           Sat 06 Aug 2022 00:00:00 +0000
ROA not after:            Tue 09 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:66:46:51:c8:15:32:27:1b:c0:84:cc:af:c9:fd:4e:18:ee:13:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug  6 00:00:00 2022 GMT
            Not After : Aug  9 23:59:59 2022 GMT
        Subject: serialNumber=0a52a29ae206d75b6f2b7c518c3fc788727563c7f1da7c9d9696aee6815c6fe6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:c9:d8:5d:5b:b8:cf:ab:75:6b:c7:9e:40:
                    85:ba:ee:fa:0f:b9:b2:bd:0b:29:26:8d:89:54:5e:
                    9b:cb:30:67:9b:36:98:64:f7:fc:49:17:e6:a8:1d:
                    33:cf:84:10:be:d7:72:3d:d0:89:65:44:21:4a:6d:
                    1f:43:c1:bf:1a:c6:ae:88:c8:38:c1:dc:6b:01:b9:
                    4b:db:0c:c1:e7:e2:13:de:0a:d5:10:18:fc:a4:23:
                    23:05:5a:75:b7:d7:67:09:56:b3:20:dc:5a:df:7d:
                    bc:7d:9d:cb:08:b4:ac:ce:4d:6f:3f:b4:a4:13:f2:
                    6f:51:c7:31:e9:0f:aa:09:ac:ab:e4:78:dc:8b:46:
                    de:b9:f2:13:51:be:c2:46:f4:ac:1a:6e:c6:00:ce:
                    4a:d3:ea:b9:66:ac:30:13:bb:8f:3b:a7:aa:b3:64:
                    c7:ee:53:9c:46:ca:fc:55:d5:1c:ac:f4:16:22:49:
                    09:db:10:1e:c7:bb:bc:df:24:9b:00:9a:17:85:ed:
                    70:bf:5b:7a:90:7c:88:30:25:2e:13:c2:e3:f6:c1:
                    8f:7c:af:97:3c:29:a5:13:54:da:01:39:4a:08:3b:
                    4b:8f:49:6c:91:2e:a8:6f:df:59:05:53:fd:2b:de:
                    fa:b4:2c:e6:7d:9b:fa:a9:85:b5:61:0e:a0:05:ff:
                    e5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A3:A4:C0:ED:E8:2B:2F:C4:D3:3B:49:39:8C:2E:CA:A3:3C:FF:97
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/99d07d4e-31bc-4d0c-83b1-d731997088ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:03:96:88:71:18:0d:51:bb:e1:df:4f:0d:0e:81:ba:22:9d:
         b2:7b:1b:ff:b9:2a:49:6d:2f:ae:5b:e4:b6:66:ce:dc:07:36:
         95:bd:2a:04:85:a2:41:72:f4:7b:97:22:68:dd:b2:38:cf:71:
         8d:0f:90:23:78:32:21:40:f3:6c:07:ca:66:7c:2c:a6:47:9f:
         f6:e4:58:6e:9f:fd:43:cd:c4:fe:f0:bb:17:10:e0:0d:bd:72:
         7a:25:d8:45:d8:64:22:b2:cd:41:5e:43:d1:2c:38:6c:5b:29:
         29:3e:66:e4:dd:91:78:6d:e2:83:20:30:f2:81:d3:ae:73:7b:
         05:35:db:fd:46:39:7e:b5:94:22:d3:2d:11:77:d4:9d:4b:88:
         e5:82:4c:f1:24:be:38:20:c9:89:15:9d:7f:c0:5a:92:6f:6b:
         89:92:1e:1a:f9:0f:98:88:3d:2a:bf:93:89:02:fa:e2:75:b8:
         b2:b0:c6:22:ca:40:71:3e:47:aa:63:54:0d:e0:11:ef:e0:65:
         29:3f:31:ba:85:e3:ec:3c:57:84:6f:74:5c:22:c5:6f:19:a2:
         3e:57:78:e8:a9:ff:c6:96:3c:2a:e7:85:30:14:49:2e:84:e9:
         3b:27:dd:6c:76:00:c9:a0:de:35:b9:49:f3:b7:23:67:a3:5f:
         fb:a3:c4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----