Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c6e90a5a-c661-40d3-aab8-d69e2e4b7818.roa
File:                     c6e90a5a-c661-40d3-aab8-d69e2e4b7818.roa (raw, json)
Hash identifier:          KYjEw64YojckkbXSBb7VkUgF4mubVkitXnqoNCm/+N4=
Subject key identifier:   93:50:0B:2C:49:78:6E:B7:33:B7:1F:27:25:F4:A0:10:CB:ED:AA:45
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       567D1C4C32CC784615A9D1997480D59B5069CFCA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c6e90a5a-c661-40d3-aab8-d69e2e4b7818.roa
Signing time:             Sun 28 Aug 2022 00:00:00 +0000
ROA not before:           Sun 28 Aug 2022 00:00:00 +0000
ROA not after:            Wed 31 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:7d:1c:4c:32:cc:78:46:15:a9:d1:99:74:80:d5:9b:50:69:cf:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 28 00:00:00 2022 GMT
            Not After : Aug 31 23:59:59 2022 GMT
        Subject: serialNumber=a51d81d994b6cb173199649f1ab44f2824228c44022ffbd4d812a7e89d851d15, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f1:6b:d2:83:29:a9:1b:43:27:c6:24:ad:55:
                    51:fa:12:ca:ea:d2:b1:86:e9:4b:36:24:25:ae:71:
                    10:ee:eb:90:d1:2c:94:03:3f:48:17:72:af:73:71:
                    b5:3d:b5:a5:a5:3f:4c:f0:01:e9:c1:0d:6f:bf:b0:
                    38:f7:5c:ca:62:83:b4:00:a0:8f:e5:31:cd:dd:3f:
                    40:eb:bd:d3:cc:af:60:ff:62:d3:36:77:f7:00:69:
                    2e:bc:b3:63:83:ad:c2:37:f3:e4:e5:ad:0a:73:6e:
                    80:5f:75:9e:06:c0:df:cd:9c:32:1c:64:2d:df:23:
                    b5:f8:48:46:6e:3e:aa:9e:72:0e:49:44:f5:c4:a9:
                    d0:d2:8f:a9:ac:85:22:09:52:0d:c7:60:0a:64:d8:
                    9e:dc:d9:e0:9a:e8:de:d9:11:f0:d3:5c:32:c6:45:
                    0a:c9:93:74:ab:21:79:c5:f5:d2:d1:84:d7:ff:d1:
                    13:6b:49:30:f6:bd:c2:85:d2:a2:0a:9a:46:47:20:
                    9a:78:90:c0:03:71:57:ed:be:f0:da:ad:57:ce:a2:
                    f0:3e:74:c0:5f:6e:d2:33:df:ee:b7:35:54:5e:e6:
                    88:a1:e6:22:0d:87:38:6f:c2:5e:28:76:b2:09:2c:
                    b4:c6:6f:ec:7c:8f:c2:9e:4a:cb:85:e9:43:59:15:
                    11:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:50:0B:2C:49:78:6E:B7:33:B7:1F:27:25:F4:A0:10:CB:ED:AA:45
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c6e90a5a-c661-40d3-aab8-d69e2e4b7818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:63:56:af:d4:5c:94:95:22:59:5d:9c:9d:84:03:81:2c:98:
         75:0c:ec:0f:4c:98:e7:f4:3a:47:44:b8:81:18:c3:d3:0f:fc:
         cc:f4:b3:4f:f7:59:35:bf:5b:fc:a3:ea:61:e7:4d:9a:4c:db:
         be:d7:55:22:ee:f0:1d:76:5f:6b:cc:a7:ba:78:a0:cc:45:ff:
         55:6f:f0:93:c5:f5:1a:2b:4b:16:24:59:78:b4:20:dc:f5:6c:
         a3:7f:ba:70:47:8a:49:a9:f7:ee:ea:b8:e0:73:1e:43:69:78:
         0f:36:0a:56:bb:2b:b2:d2:ab:b4:d5:6f:81:be:b8:f5:4c:93:
         37:fa:35:24:00:23:db:7b:1e:b9:e0:3b:94:28:e7:98:87:8a:
         bc:f5:58:6e:ff:9c:0d:32:15:82:48:13:c8:a0:9b:99:1c:1f:
         9a:c6:b2:44:b9:99:20:97:51:1f:1b:cb:ff:28:19:c5:b8:60:
         c6:74:21:11:ac:50:e5:ef:3d:63:ee:d4:1e:cc:f5:c9:bc:32:
         06:d4:41:3c:d3:1b:71:39:81:78:d0:9c:ac:9c:00:91:a7:00:
         97:3b:e7:1f:00:1a:f9:1d:a8:43:b4:81:90:42:88:0a:a2:fc:
         1c:20:b5:46:5b:c8:57:2e:b2:2d:db:34:4b:b4:71:7b:7e:65:
         77:6d:4d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----