Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b7feb044-6c27-49d7-b4d5-cb35fe6067d9.roa
File:                     b7feb044-6c27-49d7-b4d5-cb35fe6067d9.roa (raw, json)
Hash identifier:          xvE0bG4Bld6nDemS9OQdkySxUABGIW9rY01a6OVIHBw=
Subject key identifier:   77:ED:80:36:AB:44:63:DB:2D:5E:97:51:C0:2E:29:7C:B9:A8:08:28
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7E395A5BAD71E2D1C841B22A379E5733210B2632
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b7feb044-6c27-49d7-b4d5-cb35fe6067d9.roa
Signing time:             Sun 10 Jul 2022 00:00:00 +0000
ROA not before:           Sun 10 Jul 2022 00:00:00 +0000
ROA not after:            Wed 13 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:39:5a:5b:ad:71:e2:d1:c8:41:b2:2a:37:9e:57:33:21:0b:26:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 10 00:00:00 2022 GMT
            Not After : Jul 13 23:59:59 2022 GMT
        Subject: serialNumber=9cb0f994e52cd568e0b0d6904082825a248fe3511a93a32b6acda4d79b63df93, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2b:3b:09:35:eb:a0:8c:ca:d6:b1:dc:9a:85:
                    06:2a:e0:f3:bd:87:2c:97:00:67:47:72:a5:df:17:
                    46:a1:fe:7d:ee:5a:ca:40:79:ec:8c:4c:3c:d5:d7:
                    81:0a:0f:df:b7:08:27:c2:a4:5e:a1:f0:72:d8:88:
                    60:86:01:b0:9f:10:b8:db:5a:3a:7e:41:b5:b5:1e:
                    b6:aa:27:59:a3:e1:b7:e8:18:b9:aa:6b:d8:ef:21:
                    36:54:c0:4b:76:97:34:84:72:10:04:e5:c5:c5:ef:
                    36:35:1e:34:4b:92:32:9f:5f:e4:d4:ea:fb:d0:f1:
                    94:85:f1:25:bb:59:a8:72:b9:1e:9d:83:4f:c7:ab:
                    41:25:4b:a7:9d:b3:ab:9d:7a:b1:e3:8a:69:4c:28:
                    d7:77:16:a9:44:2d:ec:90:6c:70:e4:70:a0:7b:c0:
                    01:72:aa:90:a8:51:db:b8:b9:b8:36:56:d9:f3:98:
                    a4:11:1f:17:e5:2c:ec:0c:ca:cd:6c:28:2b:8b:77:
                    2f:4d:7e:9a:f2:4c:37:b7:6d:12:cd:d5:87:9b:67:
                    c4:6e:3a:00:ce:9d:cb:03:91:03:f1:1e:56:a9:04:
                    41:cc:a2:09:61:11:8f:9c:06:3a:6c:40:43:19:14:
                    58:cc:19:e5:b4:ac:b5:52:db:b3:72:d6:c1:51:73:
                    3f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:ED:80:36:AB:44:63:DB:2D:5E:97:51:C0:2E:29:7C:B9:A8:08:28
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b7feb044-6c27-49d7-b4d5-cb35fe6067d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:df:49:13:c2:34:ff:57:c5:28:4b:13:dc:b5:56:88:9e:bf:
         30:bc:83:fd:fc:53:78:f7:ed:96:43:fa:45:9f:68:e2:1f:90:
         c5:eb:b4:43:2d:49:fc:cf:bb:6b:12:01:73:a6:a0:34:2c:99:
         01:43:3e:f1:d0:b0:5c:75:66:ad:8e:f0:bb:18:44:3f:9c:0f:
         f6:32:c6:f5:9d:0e:e1:f9:15:17:f6:a5:0c:b5:af:8e:fc:57:
         b8:a5:94:36:27:fd:82:29:cf:38:80:a5:e5:f7:33:bd:37:a0:
         cd:35:9c:f6:b8:12:a6:db:6d:4e:ef:55:55:fc:f9:c9:89:4d:
         a1:a4:66:08:6d:f1:2d:ea:63:36:2b:b2:0c:94:88:d7:1c:55:
         b6:19:fc:e4:a1:a4:0d:a5:1f:32:7e:ee:87:b0:ce:09:30:72:
         9b:b7:0b:ad:9e:27:7d:46:51:fa:1f:3b:7f:62:48:63:70:22:
         44:56:b9:f9:3e:1c:92:01:fa:97:b1:79:8c:4b:dc:b6:5a:ae:
         32:79:ea:e0:e2:e9:f9:e8:ff:da:6d:5e:6b:1e:5b:fa:7a:64:
         80:18:71:28:b8:30:b0:a1:31:5b:58:47:a6:92:80:12:31:39:
         2c:07:6c:59:31:37:e8:66:60:6a:2a:43:4a:7a:ff:f0:ea:0a:
         29:2d:ff:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----