Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c40ba781-e3c0-4623-8c13-442a49c13eb0.roa
File:                     c40ba781-e3c0-4623-8c13-442a49c13eb0.roa (raw, json)
Hash identifier:          IhxF9VUgjCRn092+/KZyUNA/Q1athDlGi2PtOJm7Jw4=
Subject key identifier:   52:3C:56:86:C6:AE:4D:AB:A6:1B:B1:C3:CE:77:B1:D3:2D:70:36:0B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0C3A1D363C5898126F9CF4780E4DFF4ACEE9B943
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c40ba781-e3c0-4623-8c13-442a49c13eb0.roa
Signing time:             Fri 05 Aug 2022 00:00:00 +0000
ROA not before:           Fri 05 Aug 2022 00:00:00 +0000
ROA not after:            Mon 08 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3a:1d:36:3c:58:98:12:6f:9c:f4:78:0e:4d:ff:4a:ce:e9:b9:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug  5 00:00:00 2022 GMT
            Not After : Aug  8 23:59:59 2022 GMT
        Subject: serialNumber=e171e31f6d4eb2e7c6ecc81bd88037baf4a7bd9d5ba8ca6c7d38aa92922d68df, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d5:37:61:eb:3d:92:dd:14:e6:a6:74:05:95:
                    75:11:56:ef:ad:b7:7a:9b:8a:b9:02:5e:d0:30:6f:
                    11:b7:1f:02:c9:bd:11:c9:d2:19:27:c4:d0:91:9c:
                    26:35:7a:e2:60:d1:d0:a6:9d:08:f1:33:da:45:71:
                    62:07:ca:74:34:a9:52:68:6b:cd:73:c7:54:15:df:
                    52:70:8a:31:26:d8:de:ff:31:a9:c7:6c:a2:87:16:
                    f3:7e:1b:08:95:0f:13:9d:98:18:93:2e:ef:1b:fa:
                    fe:99:60:69:7f:71:a7:9a:50:a7:9c:91:7d:72:40:
                    d5:4e:d2:a4:ee:17:b3:d4:6b:6f:35:6e:33:0f:25:
                    03:54:3c:0a:5a:30:0b:06:fa:2b:a3:2b:b4:f2:4f:
                    c3:77:55:c5:c6:92:1a:2b:81:b6:9a:4d:ac:e5:22:
                    f9:42:51:50:2a:ba:df:96:0c:08:a9:97:f9:c8:a0:
                    85:37:e9:9d:1c:48:13:7c:66:5c:4f:8f:66:7a:1d:
                    f4:e2:be:43:b0:e6:56:d4:e7:d6:47:53:e4:e7:fd:
                    48:67:67:f2:1c:d1:c9:b8:a2:53:63:6b:4e:be:65:
                    68:b6:c0:b2:07:31:eb:8a:9f:ce:14:da:e2:35:c0:
                    0c:99:f0:1e:3d:6c:1e:9b:c6:2b:79:19:f4:c2:54:
                    8a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3C:56:86:C6:AE:4D:AB:A6:1B:B1:C3:CE:77:B1:D3:2D:70:36:0B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c40ba781-e3c0-4623-8c13-442a49c13eb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:06:d7:86:b0:16:a4:24:a2:f7:9d:4f:e9:e4:f5:bd:f3:44:
         7f:76:db:7b:a5:56:4e:90:42:e7:61:6a:40:62:48:0e:8e:47:
         ef:82:d0:35:46:cf:94:f2:fd:20:36:1a:e9:c4:26:c5:77:1a:
         ec:92:94:70:01:9b:4f:1c:3c:96:24:36:f8:0c:28:36:c7:2f:
         69:1c:21:27:30:97:9e:58:06:81:e5:6d:f9:eb:bb:85:42:ee:
         ca:ab:f6:a5:8d:eb:ca:f9:33:7d:20:9f:3c:bb:51:a2:29:a3:
         41:8e:e8:5b:9f:8e:73:79:e8:fb:94:59:ac:0e:f9:9e:68:95:
         2f:2f:47:57:14:24:6b:c4:2f:8e:39:06:67:9a:d9:88:d5:48:
         aa:23:b5:8a:0c:d4:bd:bf:2e:5d:63:dd:de:df:d5:ec:1d:68:
         86:7e:6b:5c:32:09:51:b9:06:72:13:e8:f8:c4:38:8c:5a:36:
         37:d8:2e:b9:1b:9f:18:ef:13:04:90:18:8a:9b:ed:de:58:cd:
         58:c3:d9:4c:aa:95:42:bd:32:44:d8:67:5a:a2:85:91:27:cf:
         7f:16:d0:0a:4b:63:e2:ab:80:c4:fc:32:b9:16:03:ad:d8:27:
         d6:ff:4a:11:ce:71:b3:1e:19:61:eb:95:32:b9:15:4e:a0:39:
         01:8a:ec:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----