Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d7280adc-24f7-4dbb-876a-de70519a8607.roa
File:                     d7280adc-24f7-4dbb-876a-de70519a8607.roa (raw, json)
Hash identifier:          arZrF+VtpDnm9wlXLsoC5GjupYETL+TdnuTBZGcwwj8=
Subject key identifier:   B7:54:8B:29:3B:85:E6:58:87:33:66:6D:B7:BB:85:4B:F4:81:C1:A7
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1DEBAEC94C378D06685028E917E0EC2066AED7DB
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d7280adc-24f7-4dbb-876a-de70519a8607.roa
Signing time:             Sun 31 Jul 2022 00:00:00 +0000
ROA not before:           Sun 31 Jul 2022 00:00:00 +0000
ROA not after:            Wed 03 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:eb:ae:c9:4c:37:8d:06:68:50:28:e9:17:e0:ec:20:66:ae:d7:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 31 00:00:00 2022 GMT
            Not After : Aug  3 23:59:59 2022 GMT
        Subject: serialNumber=fc67ce849a3a6e9f82d0963e392a7e4f2a125d67d8d227d82677e6e439d29e74, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:27:bc:57:f8:a7:0a:27:be:bd:40:bb:fa:51:
                    56:05:84:be:02:99:95:59:2c:29:61:81:63:9a:aa:
                    9b:a9:4b:ec:e5:68:c5:e9:62:29:b4:fb:5e:62:86:
                    4b:f7:8e:ec:dd:fa:db:f6:f1:57:94:2f:c3:58:a2:
                    45:f7:f7:9e:1f:d8:02:d6:34:86:29:37:6f:6d:0d:
                    88:57:0e:3b:b5:01:6a:44:42:b7:e8:a4:3c:ca:32:
                    77:8e:ea:1d:19:8d:23:a2:2b:74:51:db:3c:ca:33:
                    82:a5:b9:d0:40:ad:46:5f:ee:54:3a:9c:89:6f:f9:
                    4e:7b:2f:85:76:4a:40:63:65:7b:c5:02:c1:34:a1:
                    ae:75:89:81:b9:7f:3f:5c:24:b1:17:4e:34:66:37:
                    f7:0f:75:e5:7e:c6:ec:72:48:4c:c3:c2:81:8f:3b:
                    17:e1:a3:01:a1:21:57:de:8a:ab:8b:f3:4c:96:84:
                    0a:39:9e:59:86:62:15:a1:e5:8d:e0:a9:08:81:18:
                    d1:8d:56:df:2f:c4:75:82:7d:b4:c8:53:30:31:dd:
                    26:82:ca:11:04:dd:f7:bf:1e:93:df:3f:82:9e:c9:
                    f6:23:38:d5:62:99:4e:64:3c:8e:69:37:59:0a:41:
                    5a:06:a0:07:75:df:11:bd:e4:d4:7a:ae:d1:d0:39:
                    97:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:54:8B:29:3B:85:E6:58:87:33:66:6D:B7:BB:85:4B:F4:81:C1:A7
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d7280adc-24f7-4dbb-876a-de70519a8607.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:a4:e2:8c:a5:4d:1c:86:01:d8:5a:0a:44:68:50:74:20:4e:
         04:1f:de:57:3f:cc:43:a7:63:c3:cb:20:b0:8c:6b:e4:4b:b8:
         2d:85:86:ad:c6:85:9e:f9:fe:40:14:f0:4d:f4:d3:47:95:45:
         3d:7b:a4:89:c0:51:f8:72:06:2b:85:be:d5:5c:6b:13:d7:3d:
         73:f7:fa:b5:9d:5f:fe:2d:2c:38:4d:1e:21:c8:c5:3c:ad:0c:
         bf:3a:55:2e:d7:39:cf:15:4e:37:15:e9:17:d0:a0:88:f4:8b:
         20:a5:b0:73:b3:07:f8:d1:cb:1f:f8:60:72:aa:eb:35:54:e4:
         ba:0b:d0:65:f7:ea:b0:60:1e:44:81:5c:34:b2:73:1b:89:24:
         c5:37:2f:ea:88:16:fd:2d:ac:ae:be:0a:23:e6:fb:b6:8b:81:
         96:eb:91:63:b4:80:f2:b5:73:d8:95:15:bf:6c:12:eb:f7:9a:
         15:c5:c5:1a:c2:b2:c6:f6:a1:6d:a4:a2:5d:72:7d:29:f3:76:
         d8:0f:a9:1d:f0:30:fd:1e:6c:4e:02:f8:47:f1:93:d4:c5:c4:
         0c:96:40:0d:b5:26:68:17:5b:9b:5a:30:66:b7:70:0b:01:6b:
         97:f5:67:0b:b6:77:c9:76:c8:01:7e:14:9a:cc:70:68:5c:fc:
         8c:92:25:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----