Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b687fcc8-72b0-485f-ac24-1d32b4c62666.roa
File:                     b687fcc8-72b0-485f-ac24-1d32b4c62666.roa (raw, json)
Hash identifier:          uEQs9YqLdxqOMy2HM1rAizI+uTOKdpiL4Y762P36tXk=
Subject key identifier:   92:3B:BF:81:CD:BB:50:E3:DF:4D:BD:7D:25:BE:58:1B:0F:32:74:A3
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       058E17C03F0CFE8F802275480A1DB3E85465FA4D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b687fcc8-72b0-485f-ac24-1d32b4c62666.roa
Signing time:             Tue 28 Jun 2022 00:00:00 +0000
ROA not before:           Tue 28 Jun 2022 00:00:00 +0000
ROA not after:            Fri 01 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8e:17:c0:3f:0c:fe:8f:80:22:75:48:0a:1d:b3:e8:54:65:fa:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 28 00:00:00 2022 GMT
            Not After : Jul  1 23:59:59 2022 GMT
        Subject: serialNumber=e6fcf4ed6f6e16fbf9f860a7849ded5f097031e518e79863d71b3fe235adfc60, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2d:7c:ad:d6:34:05:66:80:57:03:23:3f:d8:
                    6f:ed:23:42:5a:04:c8:3c:af:88:16:57:c1:83:a7:
                    6c:df:a4:f1:1b:b1:f1:53:96:e0:62:3a:eb:e4:bf:
                    53:7b:6b:76:5c:33:d9:38:10:af:5c:d2:82:74:0a:
                    c4:26:2d:8d:75:e1:a9:7b:fd:3f:42:db:da:24:28:
                    35:0f:6a:09:82:68:6d:93:c3:96:d9:7d:eb:12:7b:
                    09:a7:30:41:fa:95:9a:14:eb:87:c7:4d:2b:6e:1c:
                    b3:27:78:c9:d6:46:40:27:06:32:e5:1a:9a:b2:56:
                    31:e7:02:92:58:ad:55:a4:a3:df:bb:d0:72:c5:89:
                    a7:24:a9:8c:11:ec:43:81:98:0d:47:70:d7:59:dd:
                    2d:93:cc:d5:1c:04:ec:d3:25:41:7b:e9:b8:ef:0b:
                    af:02:79:d9:da:49:fa:98:06:37:3a:09:dc:ae:0a:
                    a2:94:a6:18:4c:2a:07:82:1b:1c:6f:72:eb:77:5b:
                    3b:91:f5:92:ba:c9:16:c2:a7:68:7e:7e:38:1d:b8:
                    46:32:2d:46:90:cf:97:37:24:b0:7b:77:81:c7:d9:
                    f5:7e:d0:0d:9a:03:e4:60:9f:4e:f5:a9:0e:f0:74:
                    bd:59:a6:52:29:e2:2c:9f:8d:62:e2:71:21:05:70:
                    62:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3B:BF:81:CD:BB:50:E3:DF:4D:BD:7D:25:BE:58:1B:0F:32:74:A3
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b687fcc8-72b0-485f-ac24-1d32b4c62666.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:31:50:fa:04:43:32:2a:86:a0:bc:90:31:ec:40:69:9d:69:
         33:e1:81:ed:ff:5b:5d:a0:8d:3e:4a:ec:bd:76:0d:c6:48:61:
         45:c1:66:0e:49:37:fd:bd:ba:9e:df:b3:e7:64:cd:d9:b5:37:
         5b:67:d3:4d:e3:d8:13:a5:8e:be:63:b6:ac:df:ad:3f:42:c9:
         d9:1e:9d:a6:20:1e:a0:3b:f9:d5:13:7d:37:7c:a8:6a:db:2e:
         8e:82:a9:79:dd:29:83:03:28:72:8e:40:57:1a:c9:8d:88:16:
         6b:52:76:88:7d:fc:85:53:c7:3b:a7:cf:5a:2e:1c:7e:fd:3c:
         26:fb:6a:dd:ad:f8:2b:f9:44:9b:64:a7:41:3c:3a:8a:4d:6d:
         15:4b:66:eb:49:04:f7:06:b2:12:a4:4d:05:74:4f:a6:aa:34:
         5a:3b:28:06:56:1e:a9:f5:18:17:6b:b5:9e:6f:11:8a:fa:c7:
         10:e1:97:b7:d2:3c:ee:75:69:67:e6:4a:16:36:b8:85:b7:e1:
         f6:09:40:2c:7b:bb:59:3a:96:79:44:b6:23:80:f9:4d:73:f4:
         99:e2:75:6b:ef:f1:a4:50:20:1d:23:d7:cd:1e:3d:5a:9a:20:
         e0:23:34:ab:62:1f:1f:46:92:83:a3:08:15:7a:a8:6e:13:0b:
         7a:a1:70:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----