Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cc369efe-1d36-4a7b-8640-0751df18fb82.roa
File:                     cc369efe-1d36-4a7b-8640-0751df18fb82.roa (raw, json)
Hash identifier:          fhLh27Qe7bu5hrMEmdQKlcHCkiFBx2576/gV1gONXWQ=
Subject key identifier:   EB:44:F4:B3:B4:C5:1B:63:A4:C7:5E:1C:6B:E6:DE:9E:6B:FC:36:96
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7B3E04E5A5ECA58EBFA8F5B94CD5E3028A83DE00
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cc369efe-1d36-4a7b-8640-0751df18fb82.roa
Signing time:             Fri 01 Jul 2022 00:00:00 +0000
ROA not before:           Fri 01 Jul 2022 00:00:00 +0000
ROA not after:            Mon 04 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3e:04:e5:a5:ec:a5:8e:bf:a8:f5:b9:4c:d5:e3:02:8a:83:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul  1 00:00:00 2022 GMT
            Not After : Jul  4 23:59:59 2022 GMT
        Subject: serialNumber=669bf634909f1c099d878013da8261a45a5da8e713b70b9029369e90ad07e98e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fd:3e:1e:cb:cf:20:9b:5c:f1:d5:ff:98:ec:
                    de:3f:98:14:ab:29:d8:10:2f:4e:1d:6f:45:14:1e:
                    00:67:af:52:29:c1:d3:c3:f3:20:e6:23:16:75:3d:
                    b7:ac:aa:26:65:d3:b6:3e:2e:98:bc:43:14:5c:f5:
                    d7:6f:dd:57:8d:b9:43:03:ce:73:5a:7c:20:ae:20:
                    6c:bb:6f:c2:14:b5:1e:77:4c:36:a6:eb:ff:c1:c8:
                    0f:55:31:f3:ed:f0:a9:5d:78:7a:c3:35:6c:bf:a5:
                    6c:89:f4:bc:cd:a1:38:b4:04:7a:5c:85:f9:36:8d:
                    b7:69:ec:d6:76:6c:8b:eb:14:ad:23:09:6c:d3:1f:
                    e0:b5:a6:18:8a:98:77:5c:d9:57:4c:88:bf:94:7d:
                    b1:1a:a3:b6:6a:e8:86:9d:cb:91:6e:6e:e0:8c:4f:
                    14:e3:ff:b0:f7:8c:9c:f6:1f:0b:68:37:51:b2:1a:
                    8b:69:ee:f9:24:bb:c6:b1:a7:60:a3:08:78:f2:5f:
                    60:df:e1:d0:a0:b8:58:ce:ca:60:7e:db:ba:61:bc:
                    33:ca:9a:a5:e7:e2:de:5c:f4:19:1d:45:0b:dc:7a:
                    f3:1a:25:f8:47:b0:eb:1b:06:08:10:2f:40:29:b3:
                    fb:28:43:9b:2e:10:95:f5:20:5e:8f:88:29:a2:4f:
                    50:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:44:F4:B3:B4:C5:1B:63:A4:C7:5E:1C:6B:E6:DE:9E:6B:FC:36:96
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cc369efe-1d36-4a7b-8640-0751df18fb82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:de:7c:48:88:21:b9:a4:3d:f7:d7:68:81:a9:c6:fb:77:95:
         9d:39:b9:f0:fc:1c:27:ef:cf:dc:1d:67:53:06:de:c9:b2:6d:
         0e:53:97:5d:fe:bb:9d:1b:c5:f3:2d:3f:ef:05:4d:45:42:1c:
         60:89:45:3c:c2:a5:b1:3e:62:a4:11:db:ba:62:1e:1f:7f:c7:
         5f:ef:82:86:7a:06:8c:46:10:39:ef:69:72:1d:42:40:49:db:
         f9:40:d5:00:89:b1:25:aa:f8:b3:65:3e:fb:af:a8:89:be:47:
         40:3e:f5:f0:1a:4d:ef:f6:c0:07:0f:4a:5b:03:d6:7c:44:62:
         b8:c3:9c:ea:f6:57:6e:ff:25:2b:fa:12:e4:db:b3:75:42:89:
         db:60:77:dd:fe:b9:f7:39:45:8a:59:81:ca:ba:12:36:4b:1e:
         84:9f:5e:27:c2:aa:d4:28:44:32:d0:55:99:d0:47:10:55:81:
         21:9f:5f:dd:74:60:14:ab:0d:1a:39:e9:c5:ce:02:4e:6d:35:
         d9:5b:53:29:bc:1b:dd:02:97:56:f3:44:66:e0:b2:13:41:3d:
         47:55:b0:53:f1:cb:24:40:48:5d:02:38:d4:c5:33:cd:e9:3c:
         bd:91:cf:6c:33:28:2a:a2:1b:40:0f:05:e8:71:fa:62:c9:7e:
         fa:34:d5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----