Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c66214aa-ce6e-4e79-ba17-3a7741cd281d.roa
File:                     c66214aa-ce6e-4e79-ba17-3a7741cd281d.roa (raw, json)
Hash identifier:          Err17OqzWKuswgsV1KvKvnrukRnBeuab+00pyOS472Y=
Subject key identifier:   12:33:06:A5:62:E1:2D:7F:94:E9:30:37:38:B8:CC:94:34:B7:17:38
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       19CDE9AAA91AF4B0662B9B12FD6D89625C2AB795
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c66214aa-ce6e-4e79-ba17-3a7741cd281d.roa
Signing time:             Sun 31 Jul 2022 00:00:00 +0000
ROA not before:           Sun 31 Jul 2022 00:00:00 +0000
ROA not after:            Wed 03 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:cd:e9:aa:a9:1a:f4:b0:66:2b:9b:12:fd:6d:89:62:5c:2a:b7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 31 00:00:00 2022 GMT
            Not After : Aug  3 23:59:59 2022 GMT
        Subject: serialNumber=e9d264977f1d03a6c4ebcf94b129eeea1931a6d192a84545658c167686b9c999, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:36:60:31:b1:1d:d7:17:0e:25:38:8d:7d:48:
                    9c:4a:79:c9:1d:26:c7:56:36:62:4c:a1:9b:f4:2e:
                    03:08:dc:5e:26:6e:8c:1b:cf:16:73:87:5c:dc:bd:
                    5d:67:38:81:33:fa:b1:81:7c:09:60:b3:5e:62:e8:
                    25:fb:85:37:ef:38:8f:f7:07:4a:e8:9d:aa:15:ef:
                    db:98:6b:a1:f1:3d:c0:e6:fa:6d:17:07:bf:5d:e1:
                    6f:68:be:e9:01:b8:4a:87:16:1c:0b:d7:08:59:63:
                    c4:c6:4a:60:f0:aa:61:a7:ea:ed:7a:df:56:3b:41:
                    3d:dc:21:b1:a4:50:4e:65:db:f9:22:4a:0a:aa:05:
                    4a:1e:2a:31:af:ad:74:6e:d2:fb:ec:e8:7f:da:fd:
                    f2:1c:6b:b4:a9:79:95:a8:b0:db:4e:53:f5:29:e6:
                    2d:40:52:d4:b4:5a:30:e9:6d:bd:04:2d:27:52:f7:
                    4a:ac:d4:1e:2b:0a:ab:a3:6f:15:48:77:1a:dc:2d:
                    a4:bd:e7:0d:e6:96:cb:06:d2:7e:62:b7:3a:57:c3:
                    59:99:bf:34:03:96:da:5e:a9:07:14:f0:34:7e:ae:
                    6a:37:c4:72:1e:e1:be:40:4b:dd:27:85:7b:21:3b:
                    60:69:65:4d:0b:5d:a9:06:3a:1d:1b:ff:8b:81:14:
                    c6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:33:06:A5:62:E1:2D:7F:94:E9:30:37:38:B8:CC:94:34:B7:17:38
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c66214aa-ce6e-4e79-ba17-3a7741cd281d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:a2:f4:7d:4f:0d:c7:7b:01:cd:6f:bf:e8:81:b4:1e:17:cc:
         0a:6e:e7:b8:60:6f:97:06:b6:3c:a6:98:5e:22:0b:ff:7e:22:
         52:ae:37:41:5e:ba:2d:55:33:70:5b:97:72:ff:69:01:f7:ab:
         ff:23:75:91:38:bc:3c:6a:e3:24:cc:26:a7:c2:13:04:36:55:
         ab:bd:d5:0f:b7:8c:ba:da:c8:3c:6a:8e:99:a6:76:4f:db:9f:
         61:ba:fa:3d:e4:29:fa:55:2b:ec:b5:51:89:a2:7b:0b:64:42:
         21:08:2e:6a:7a:02:70:cf:38:d1:d2:56:9b:bf:60:9f:f0:79:
         8d:78:9d:25:0c:29:0c:c0:5b:d8:9e:4c:89:03:96:a8:8c:7b:
         ca:2a:18:19:7d:02:13:9e:66:61:c9:fd:82:6f:78:74:cc:42:
         1b:04:54:af:6f:37:56:c3:23:fc:13:67:e9:21:68:31:45:d5:
         b9:3e:9c:56:c6:19:9e:b7:c0:6c:31:ee:35:d8:9e:6a:4b:89:
         42:b2:15:a1:da:b8:e9:f9:a2:fa:9c:cc:2a:a4:a2:07:6a:51:
         51:e0:0f:ec:b3:50:c7:57:5d:b3:2b:a3:ca:5c:a1:7c:b4:0d:
         82:9a:53:33:eb:01:4c:83:b4:00:6e:7a:67:71:28:3c:84:7a:
         7f:54:49:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----