Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a5dc2666-61b9-4fe2-afae-7d0a350f9f3e.roa
File:                     a5dc2666-61b9-4fe2-afae-7d0a350f9f3e.roa (raw, json)
Hash identifier:          A/MtuievGRUXi6U1G76To5e6tIk2yhVqureZSR1KnOA=
Subject key identifier:   9E:3D:B7:EC:15:65:7A:15:17:FF:14:94:86:53:5C:BB:E1:F2:73:FB
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       055C650137C6EA1CD7B4FDE6F903D1AA60489C51
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a5dc2666-61b9-4fe2-afae-7d0a350f9f3e.roa
Signing time:             Sun 14 Aug 2022 00:00:00 +0000
ROA not before:           Sun 14 Aug 2022 00:00:00 +0000
ROA not after:            Wed 17 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:5c:65:01:37:c6:ea:1c:d7:b4:fd:e6:f9:03:d1:aa:60:48:9c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 14 00:00:00 2022 GMT
            Not After : Aug 17 23:59:59 2022 GMT
        Subject: serialNumber=91f0fc031b5f2213151bd382b30317de11bd45f8e8d5abe7b60aed1f70164040, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8a:23:45:2e:f7:1a:bb:fd:0e:43:66:c5:53:
                    66:99:c2:cc:5a:3b:be:25:a3:6a:0c:55:0d:c0:64:
                    d7:ec:a9:ac:ab:8e:ee:d3:02:03:5a:c7:d0:e3:65:
                    4a:d7:9b:f1:66:db:ac:2f:f0:fa:bc:1b:5b:fb:87:
                    da:2c:39:8c:ad:36:43:22:af:88:c7:1f:a3:74:71:
                    ac:f0:82:ea:04:82:51:2b:60:06:e1:1e:e5:a8:6a:
                    b0:1a:de:94:27:4e:4f:0e:21:3d:06:fb:88:c2:c4:
                    b4:73:34:2d:83:59:df:76:73:06:fd:4f:bf:f7:f5:
                    02:53:86:e3:aa:11:d9:cb:d0:10:01:f8:a5:11:ff:
                    5e:48:3a:b4:b6:31:62:e6:00:62:ae:c4:14:ee:3d:
                    8f:81:b5:78:19:83:34:9c:47:3a:76:d0:60:8f:97:
                    5e:a0:f7:b7:59:6e:33:ec:e7:17:2e:63:1d:4b:25:
                    a2:65:83:e6:06:78:c6:0b:08:b6:9e:31:94:12:46:
                    b1:e1:1a:c5:e6:da:d5:0f:2e:1e:60:d3:51:73:e9:
                    15:52:f1:cc:8e:51:a8:d6:bc:1a:72:ce:08:96:42:
                    ea:d3:aa:7b:7b:b2:db:c6:dc:3a:bc:37:ce:b6:8b:
                    ef:ad:a0:d8:a3:0a:bf:ef:73:82:9b:3d:cc:66:a2:
                    d0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3D:B7:EC:15:65:7A:15:17:FF:14:94:86:53:5C:BB:E1:F2:73:FB
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a5dc2666-61b9-4fe2-afae-7d0a350f9f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:5b:c7:f4:01:ec:0c:46:7f:3d:2f:14:cb:6a:d8:ec:d4:6f:
         17:8e:74:20:ad:6b:13:54:c9:ed:11:e8:3e:e8:5f:fd:3f:a9:
         be:e7:d9:3b:a3:8a:ba:d2:42:0a:26:43:e5:4e:6f:5f:15:7e:
         9b:b3:6c:81:9e:0d:e5:f6:83:40:a6:0b:fe:0d:5c:36:ce:0b:
         dd:c6:92:6b:ac:37:23:eb:b1:83:c6:76:72:c8:9c:15:ac:f1:
         f6:35:f2:2c:1b:fd:e5:92:0e:e9:8c:c0:d4:85:e0:44:68:fc:
         2c:f0:53:ca:03:08:46:5e:d7:8a:62:da:7f:07:85:00:99:88:
         a8:17:70:c4:d5:77:55:f0:12:a1:55:59:80:70:00:8b:5e:6a:
         e3:25:e2:a8:1f:eb:d2:7d:70:c2:e1:fb:71:b1:bd:35:d6:34:
         9e:fc:9c:43:cf:44:20:0e:df:b5:86:6a:2e:9e:13:80:43:61:
         bd:25:4f:1f:ed:a2:1a:7c:cc:6b:fc:55:7f:02:94:31:6e:31:
         ed:ec:53:58:09:ca:89:1f:b1:32:0d:3b:bb:5d:18:c1:a6:67:
         96:ff:d8:61:2b:f8:28:12:05:5d:fe:b8:2c:08:77:33:ac:21:
         9e:3d:a9:d7:50:bc:c3:a0:93:f1:71:bc:cb:89:79:65:3f:3f:
         64:25:6c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----