Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d7c6ea75-5bdd-4d00-8594-c587d4e84adc.roa
File:                     d7c6ea75-5bdd-4d00-8594-c587d4e84adc.roa (raw, json)
Hash identifier:          wJeKNW22foQk4Q2kFeeX6TqK0BMVAzP5pjoMC4rCOd4=
Subject key identifier:   A9:EA:75:73:41:D7:7C:92:DD:56:C6:96:A8:5C:D5:0A:01:03:AF:05
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       40FA8C4573C007C1C1672AC4BBB30937948A1673
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d7c6ea75-5bdd-4d00-8594-c587d4e84adc.roa
Signing time:             Mon 15 Aug 2022 00:00:00 +0000
ROA not before:           Mon 15 Aug 2022 00:00:00 +0000
ROA not after:            Thu 18 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fa:8c:45:73:c0:07:c1:c1:67:2a:c4:bb:b3:09:37:94:8a:16:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 15 00:00:00 2022 GMT
            Not After : Aug 18 23:59:59 2022 GMT
        Subject: serialNumber=a374257c37377b257555d3ab85dd212610a0f2a5892df9d309a3ddb0e07203e3, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6d:df:45:2f:43:4b:45:a9:c7:29:01:19:f5:
                    84:31:71:ca:24:4c:fc:b7:a6:b4:b9:2a:e2:9e:5d:
                    0e:7c:90:19:3f:e9:ae:5e:f5:82:af:ae:c7:46:e8:
                    14:42:57:ee:ee:10:c9:35:8d:dc:98:c9:1e:b2:6c:
                    e0:b4:fd:04:a3:ec:0b:69:c1:56:ae:27:ce:54:e3:
                    6d:ce:18:6a:a6:41:93:5d:ce:d3:1c:31:1f:b4:e5:
                    97:45:b7:ae:e3:74:96:68:f6:c9:d0:56:d8:a6:92:
                    b8:98:af:00:73:10:9f:d9:85:b4:50:14:73:87:cf:
                    b1:62:b6:5e:05:10:1c:f6:71:5d:b7:b0:14:0c:9e:
                    80:42:72:fe:6a:1a:b8:c3:13:12:d3:f1:0e:ee:bd:
                    20:04:b3:5c:c1:de:96:21:bc:57:64:4b:f6:00:0d:
                    49:15:65:e9:64:e0:d7:b9:4a:56:ff:04:ad:64:f3:
                    bf:cf:be:bf:05:9e:25:96:ca:92:a2:a7:32:70:1b:
                    7b:c7:00:84:a1:b3:98:07:8a:0c:5c:5f:3b:72:88:
                    d1:47:0a:e4:b8:11:01:bf:cc:4d:b0:a6:73:7b:e4:
                    b0:31:12:12:0d:38:64:d7:85:9f:29:f5:89:86:fc:
                    b1:a9:b3:0e:b8:86:1d:37:71:26:44:4f:21:4f:bf:
                    4a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EA:75:73:41:D7:7C:92:DD:56:C6:96:A8:5C:D5:0A:01:03:AF:05
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d7c6ea75-5bdd-4d00-8594-c587d4e84adc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:d6:fb:c4:69:3b:93:37:54:e9:83:63:bb:c1:79:2d:34:06:
         86:9d:8c:ed:d9:3e:e8:50:ff:22:8b:46:0c:d1:0f:81:b4:76:
         04:4b:b7:dd:6e:ba:da:a6:8f:32:88:3b:56:47:2d:dd:58:76:
         0b:e6:5f:d2:02:62:fc:ea:71:da:25:c9:b3:a7:be:3b:ef:68:
         bf:7e:bb:30:c4:ac:30:ad:71:fe:72:f0:2e:a6:03:0c:f7:46:
         87:ae:b8:4b:76:5f:4d:05:03:e3:1b:19:a0:21:f3:80:6f:d4:
         b9:47:52:b6:b2:4b:2a:62:24:b6:cf:43:50:ad:a8:70:a0:57:
         1b:fa:a6:d4:26:9b:96:10:f6:5e:7b:71:f9:98:6d:52:a1:cf:
         a3:6d:6f:87:35:6e:11:d9:e7:44:48:3d:9b:55:79:d2:cc:2f:
         86:da:a3:12:eb:67:ff:90:6e:d4:7e:01:dc:a2:a1:dc:0c:51:
         dc:c7:b4:62:6f:09:1b:60:5c:7f:63:fb:2d:35:9e:4e:49:99:
         e6:2b:bf:ec:53:b6:a5:0e:7b:95:ab:28:a1:c4:38:80:92:62:
         3a:e5:ef:53:d3:38:5c:90:f0:3a:90:1e:52:f4:b3:6b:8f:e1:
         08:8b:70:41:49:6f:5d:cd:70:b4:dc:0d:14:3e:be:c2:92:2d:
         2a:98:d3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----