Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cd3760c3-0b07-410d-b1d3-673c3295ce83.roa
File:                     cd3760c3-0b07-410d-b1d3-673c3295ce83.roa (raw, json)
Hash identifier:          DRxBCbglcYq84rNogQs1dXhA6ULPjtiV1+uKlFBXfUs=
Subject key identifier:   E1:19:5A:06:02:48:23:F1:57:A4:99:E7:AF:B2:85:0C:61:F9:9F:BB
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3F4DED7D252E4EAB2E064AFEB00BCF704EE1CC0E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cd3760c3-0b07-410d-b1d3-673c3295ce83.roa
Signing time:             Sun 17 Jul 2022 00:00:00 +0000
ROA not before:           Sun 17 Jul 2022 00:00:00 +0000
ROA not after:            Wed 20 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4d:ed:7d:25:2e:4e:ab:2e:06:4a:fe:b0:0b:cf:70:4e:e1:cc:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 17 00:00:00 2022 GMT
            Not After : Jul 20 23:59:59 2022 GMT
        Subject: serialNumber=a39e669ab221fa0e93272fb464e3884462a8f98845eced95ca869644b161e4c0, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:5a:57:21:4d:0f:18:28:8e:28:61:f8:11:e2:
                    d9:33:5f:f0:ea:1d:c0:54:a3:d7:ca:8e:80:14:bb:
                    11:cf:de:0e:6f:41:dd:78:88:d3:b8:70:bb:e5:50:
                    a4:27:fc:9b:ee:62:90:a0:e8:7f:0a:e3:9e:d4:7a:
                    6c:e2:24:7f:b4:b4:91:a2:1b:ee:de:92:9b:d3:90:
                    db:6f:91:ad:98:74:0f:df:9b:2e:c9:e3:e9:59:26:
                    c6:d5:d1:0e:e2:5a:c2:06:2b:8a:dc:0b:a4:8e:87:
                    54:be:9b:38:44:a2:90:98:8d:13:94:c4:f8:1c:d6:
                    c8:e2:30:27:52:28:ff:5b:dd:3d:14:f4:74:c9:16:
                    eb:4d:53:f0:f7:75:f7:b0:46:09:44:30:da:78:d6:
                    00:75:4e:f2:34:2a:e4:77:20:e2:77:40:78:d1:fd:
                    cc:e1:5e:18:13:b7:0e:d5:a4:a9:86:80:17:7b:4d:
                    b8:20:dc:b5:e5:fd:94:aa:8f:9c:6b:9d:52:7a:89:
                    ca:95:0e:8c:6c:74:01:6a:dc:1b:9b:0a:ea:fd:62:
                    8f:3f:ba:d5:1c:6b:90:f4:cd:a0:21:d1:b7:d3:62:
                    91:d3:aa:16:fc:d9:02:51:1c:da:1e:73:f2:2a:32:
                    a1:17:e7:33:34:95:ad:98:bb:a0:ab:9c:e3:c9:3a:
                    b5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:19:5A:06:02:48:23:F1:57:A4:99:E7:AF:B2:85:0C:61:F9:9F:BB
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cd3760c3-0b07-410d-b1d3-673c3295ce83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:13:ef:92:39:47:96:08:95:24:12:9c:08:33:ea:00:a1:47:
         eb:48:cd:f0:1c:a9:5e:37:d4:21:3f:a0:07:52:ec:bf:92:22:
         5b:e3:77:73:7e:2f:8a:e4:e7:5d:b9:51:dc:13:96:9b:a8:20:
         36:4d:28:30:30:5c:d6:37:50:b1:6f:eb:7f:20:04:ae:16:e5:
         39:74:ee:01:da:65:b2:3a:ed:de:77:a3:f9:0e:eb:71:aa:bc:
         56:81:80:76:ab:93:cd:57:41:b1:fb:74:74:e4:8d:9f:09:b2:
         ca:db:d9:29:e3:ae:3d:2b:15:d8:21:a4:6b:c1:08:a5:c6:d9:
         75:5c:38:71:a7:e9:55:bc:ef:e9:4a:78:6e:2c:ea:21:10:1d:
         ea:73:da:1c:fe:28:03:5a:52:f6:3a:8c:d4:53:a6:de:c2:2c:
         de:e0:1a:eb:88:b3:db:c0:23:3b:d1:2a:e0:f0:ff:09:03:36:
         0e:2c:36:30:77:e2:46:e9:b8:50:0a:ed:ae:89:1a:f2:82:be:
         2f:ef:b5:78:9c:cc:ed:3e:e8:8f:80:d8:55:45:7e:3b:f4:a2:
         2c:aa:46:fb:18:e3:cb:5c:c7:d1:a7:dd:02:5c:c9:26:54:a6:
         4a:bb:53:64:59:b3:de:b5:e0:06:e4:d8:f3:84:bf:4c:af:82:
         34:1d:d0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----