Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9a5880c2-26c8-4612-a88b-3fb86b63e331.roa
File:                     9a5880c2-26c8-4612-a88b-3fb86b63e331.roa (raw, json)
Hash identifier:          y1CsxsmMtikEaNn1zO7oKFphVmXFuE5rM7M7iVTPnyo=
Subject key identifier:   38:7A:A3:49:81:17:E6:55:AA:8F:F7:F4:D1:44:C0:DE:8E:A3:C1:8C
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4AA134D4A86119DD7910CBA94A8070A94A1C6D99
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9a5880c2-26c8-4612-a88b-3fb86b63e331.roa
Signing time:             Sun 24 Jul 2022 00:00:00 +0000
ROA not before:           Sun 24 Jul 2022 00:00:00 +0000
ROA not after:            Wed 27 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a1:34:d4:a8:61:19:dd:79:10:cb:a9:4a:80:70:a9:4a:1c:6d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 24 00:00:00 2022 GMT
            Not After : Jul 27 23:59:59 2022 GMT
        Subject: serialNumber=82cbdafe1fbe9288281456bc64792cd8c39d29a5c2a583a74d792cf9f8e756d8, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:8e:3b:e7:b8:af:62:78:fa:1f:c3:3a:77:
                    0e:a6:1d:35:18:12:2a:8d:aa:f0:04:69:82:ef:24:
                    12:25:76:1c:b0:e6:ed:75:82:c5:b8:77:f2:09:57:
                    86:6c:cb:50:9d:eb:9e:66:da:3a:5b:dd:b0:fc:13:
                    fd:91:c2:fe:f0:ab:80:35:95:c5:cf:17:df:0e:6e:
                    2c:3d:11:2e:86:e5:55:cc:eb:61:22:d1:5e:9d:4a:
                    a5:46:e1:04:51:f4:10:16:1a:47:23:d7:a9:66:79:
                    30:ea:79:b8:50:aa:7b:af:73:c5:7b:91:be:f6:8c:
                    c6:cb:bc:2e:c9:aa:90:a2:04:3b:95:e8:05:8f:99:
                    d3:63:18:40:9a:81:d8:21:f4:d4:0f:e8:fa:c9:dc:
                    7d:76:f4:87:a0:0b:dd:91:af:3c:51:36:13:99:a7:
                    08:ec:f3:a2:e0:94:37:ec:00:50:39:3a:0f:38:fe:
                    80:27:65:18:42:44:10:15:92:55:34:ed:3c:24:15:
                    13:97:df:33:31:89:94:7b:aa:45:73:f2:73:2f:33:
                    17:17:84:5e:41:b1:98:d7:94:57:95:f0:87:b3:f1:
                    cd:11:6b:35:15:0e:09:e6:50:d1:89:8f:ad:e5:0c:
                    66:5d:a7:cd:51:36:06:a2:40:28:7f:a3:0e:1f:f5:
                    22:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7A:A3:49:81:17:E6:55:AA:8F:F7:F4:D1:44:C0:DE:8E:A3:C1:8C
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9a5880c2-26c8-4612-a88b-3fb86b63e331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:cc:a8:11:e7:3a:01:4c:c6:c6:a6:6f:98:20:64:f1:f0:fb:
         54:68:1a:e5:c5:63:66:5d:23:15:eb:21:fd:cb:f5:d2:28:0c:
         d7:40:26:7b:39:88:5e:7d:96:eb:10:5b:57:b1:c6:e2:9b:a2:
         a4:c9:1e:eb:74:87:7c:33:92:5f:d1:b5:2d:b3:41:05:bb:fc:
         a9:b6:1f:e0:8e:2b:5e:86:0d:a3:c6:35:35:3a:a4:2a:22:0b:
         09:25:33:bd:e6:ef:ab:ac:cc:38:a6:6a:4c:c1:ca:29:3d:71:
         f5:7b:86:6b:81:a0:b7:6a:92:9d:5d:70:78:b9:ed:9a:a6:a8:
         43:f6:9a:01:4a:43:78:68:82:c4:c4:17:6e:4a:c5:d6:5a:2f:
         a0:1d:40:7d:15:f7:e5:d5:fb:45:64:10:e0:e5:57:4c:97:69:
         8c:4b:a9:3a:1e:aa:4f:ae:f6:36:80:fc:83:c4:cb:96:81:73:
         a4:9b:e1:67:3a:af:6d:d5:0c:1f:df:c7:ae:2c:9e:1d:4b:83:
         1d:1d:b9:22:90:80:55:83:eb:66:eb:7c:56:2b:87:37:da:ea:
         8a:42:9d:dd:eb:ba:f2:33:69:95:c7:33:f0:2a:51:47:25:31:
         4f:50:ae:07:ad:85:50:f1:80:76:01:f2:9d:e0:49:57:15:88:
         d8:57:49:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----