Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c01989f2-3c89-45ed-a255-d6eb9f873d50.roa
File:                     c01989f2-3c89-45ed-a255-d6eb9f873d50.roa (raw, json)
Hash identifier:          CLYhJpf3EDe2KSyAqM0EcNz+eS8CIyrkVgHnKHMiR3s=
Subject key identifier:   3B:3A:AD:47:BC:7A:96:45:3D:74:19:87:AD:B5:64:08:79:BE:54:5F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       31C0241A51F247153F17D86C4A935A2C5F7A4B53
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c01989f2-3c89-45ed-a255-d6eb9f873d50.roa
Signing time:             Thu 18 Aug 2022 00:00:00 +0000
ROA not before:           Thu 18 Aug 2022 00:00:00 +0000
ROA not after:            Sun 21 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c0:24:1a:51:f2:47:15:3f:17:d8:6c:4a:93:5a:2c:5f:7a:4b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 18 00:00:00 2022 GMT
            Not After : Aug 21 23:59:59 2022 GMT
        Subject: serialNumber=396656ecf5e4bae39988f2d21db66a25fb61a6babe5f6a44644b93eb64d3b7ca, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:23:81:09:6f:4b:90:ea:91:50:b4:6d:f1:16:
                    53:a1:f8:98:54:68:bf:35:21:89:e2:18:cd:bb:dd:
                    d3:7e:31:43:2a:75:ba:97:04:29:19:e7:11:08:8e:
                    bd:ca:40:a6:7a:5a:85:a4:4b:f2:58:c4:dc:70:99:
                    2d:b3:71:17:fb:34:bc:a6:c0:99:53:34:b9:ed:00:
                    ba:8e:15:8a:12:df:5a:5b:88:23:ff:d6:4a:1b:ec:
                    7f:02:e5:20:97:90:62:3e:e9:f9:b4:10:c5:39:8f:
                    0c:97:b1:9a:d2:8c:db:f1:5e:1c:a7:50:37:1c:65:
                    6d:65:ce:19:61:74:b8:9f:20:ce:4d:78:d4:c1:18:
                    5a:af:9e:95:a4:63:32:b9:ba:de:44:5d:2e:b4:fe:
                    5f:e7:f4:1e:6c:4b:dc:00:b9:a1:e4:2f:2e:da:9d:
                    a7:37:1c:ec:60:b6:50:cf:a6:1f:41:65:d3:0d:24:
                    ba:dc:47:99:d0:7a:52:4f:98:0e:04:fc:e1:d0:00:
                    63:37:45:49:47:0e:cf:b0:b2:11:dd:75:23:50:eb:
                    d4:38:68:4f:41:20:c2:8d:35:63:b7:ad:3d:53:90:
                    54:e7:2d:a4:26:63:d6:39:d8:05:35:d1:3a:91:64:
                    e2:49:4b:63:f6:6d:15:ad:04:9a:8d:87:c5:c8:41:
                    46:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3A:AD:47:BC:7A:96:45:3D:74:19:87:AD:B5:64:08:79:BE:54:5F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c01989f2-3c89-45ed-a255-d6eb9f873d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:09:ad:a0:8a:c2:57:ba:84:ea:ce:e0:38:1a:fd:69:2f:f7:
         2a:c2:6d:3c:b2:65:01:51:5e:aa:75:34:1d:b1:af:77:25:44:
         38:ed:1d:af:f2:e2:3e:19:cd:6a:b5:33:be:2c:d9:1e:dd:b3:
         58:62:d1:cc:f0:f6:9d:c7:6c:0f:f6:5c:a3:fb:70:15:a8:bb:
         b3:c3:67:b9:59:f4:cd:b8:61:ec:08:9b:77:75:15:1f:3e:63:
         10:15:7f:f3:24:95:f7:d7:ba:53:68:5f:f8:14:33:4b:74:1a:
         f3:e0:fe:9b:a1:e9:43:91:87:5b:fa:a2:a4:3c:b6:22:92:50:
         f5:9f:c2:f4:7c:64:58:02:5a:26:5d:b6:1e:5d:67:07:5e:51:
         ac:46:80:8e:6c:61:9d:7e:a6:bc:d1:9f:fe:1e:45:23:e6:1d:
         c3:1a:c7:29:e1:56:76:4e:28:4f:ac:a8:e2:71:00:77:d3:57:
         c1:05:15:6e:b4:2e:1d:cd:aa:d0:6c:94:d6:15:6f:01:2d:c8:
         91:69:74:87:e9:01:0a:27:8e:db:71:51:20:e4:8f:66:27:6c:
         e1:dc:b1:2b:86:90:4d:f9:20:12:e7:13:4b:98:93:57:9c:3e:
         d9:20:e9:16:87:20:2f:2c:0e:27:39:fb:58:ee:a2:e3:fe:79:
         e7:04:49:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----