Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/db258dec-848e-49db-99a7-ebafc684a962.roa
File:                     db258dec-848e-49db-99a7-ebafc684a962.roa (raw, json)
Hash identifier:          E6Li9m4c3R2SXgQjSit/p6H2Rv3hxOxSAkPUC841qwg=
Subject key identifier:   E2:C5:E0:C6:A8:35:01:91:C8:2B:B3:B7:91:B0:3F:78:5A:D2:E7:77
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6455A0F0BF90441FDD6A02DDEB5BC446BC432B9E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/db258dec-848e-49db-99a7-ebafc684a962.roa
Signing time:             Sun 17 Jul 2022 00:00:00 +0000
ROA not before:           Sun 17 Jul 2022 00:00:00 +0000
ROA not after:            Wed 20 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:55:a0:f0:bf:90:44:1f:dd:6a:02:dd:eb:5b:c4:46:bc:43:2b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 17 00:00:00 2022 GMT
            Not After : Jul 20 23:59:59 2022 GMT
        Subject: serialNumber=afba3b67f8c78ea2d67cb71bdbe4f71da735e5f1ea514ddf5db1ed7ad80a6ed0, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:28:d2:3a:2c:ee:3c:5f:c2:39:85:51:69:8f:
                    3d:9c:b4:30:a4:68:91:f9:ee:ac:2b:14:10:c6:a6:
                    d4:04:d7:ee:ae:38:24:91:80:98:0a:13:c4:28:98:
                    0b:ba:55:40:cb:4b:18:76:f9:df:07:12:6e:d8:6f:
                    d2:d6:3c:5b:2c:a6:15:93:74:d0:f2:6c:dc:87:c4:
                    81:66:f4:50:b7:af:2f:a2:53:06:5f:5b:e3:24:d4:
                    72:d0:11:4e:1a:ca:a9:b3:41:32:ad:7d:71:8f:43:
                    bf:8c:f9:8f:0e:ee:f0:5d:63:3c:aa:ba:91:77:b2:
                    4d:d1:f2:0f:20:e9:70:17:44:65:d8:e9:c9:a8:ed:
                    57:6c:69:e0:1d:af:33:a2:ab:69:b5:d8:1c:12:e1:
                    e7:7b:f7:fd:eb:1a:09:92:98:2d:bd:89:e5:b9:bc:
                    76:87:1f:a0:2b:44:03:4a:f7:4b:3b:a3:93:03:d9:
                    d7:3a:f3:e8:03:61:67:fa:70:a8:f8:46:d3:3e:d0:
                    e0:c0:81:30:3e:b5:e6:3a:ba:f6:fe:4f:10:3b:5a:
                    53:fb:1a:74:7b:b1:4c:02:47:22:c7:bc:cb:1a:14:
                    b7:70:99:86:1f:e4:0c:7e:ba:63:91:76:bf:0d:e1:
                    c9:90:00:5f:3e:d5:ab:c6:f0:24:c5:41:12:a8:10:
                    85:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C5:E0:C6:A8:35:01:91:C8:2B:B3:B7:91:B0:3F:78:5A:D2:E7:77
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/db258dec-848e-49db-99a7-ebafc684a962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:9f:c1:73:f7:f0:50:cb:3d:af:56:60:ca:7b:88:1a:58:91:
         8a:fe:fb:f6:fc:01:74:f2:b7:1e:89:8a:92:cc:eb:af:fd:f2:
         84:3c:a1:f6:95:58:9a:50:13:82:96:4e:d6:cb:a1:69:af:27:
         fc:ad:ec:88:1b:47:94:29:a7:14:02:e5:0c:e8:3f:98:26:c3:
         02:ab:df:d5:a3:d3:a1:a3:0b:43:25:40:ea:4a:49:31:6d:60:
         06:1e:55:1f:fd:15:bd:2c:bf:5a:b5:5d:22:4c:86:85:e2:ea:
         6c:d1:09:f9:be:ab:c6:42:51:9d:d5:25:43:3e:79:c0:56:5c:
         d8:3b:c7:62:a3:82:08:ce:a9:bf:c1:fb:4b:74:cf:63:33:e4:
         45:a9:d0:3f:25:90:7b:79:1f:f4:84:33:e9:cc:5e:c8:2f:db:
         7c:41:37:7f:64:fa:ac:f5:da:d3:67:79:d4:f0:24:97:fb:e8:
         b5:44:c1:7a:6a:a9:99:71:39:3d:bf:bb:ac:5a:e9:4e:82:66:
         ab:c1:49:6c:24:00:84:f5:d6:e7:b9:ef:f8:4d:b3:3b:06:1e:
         c8:37:9f:e9:3f:3b:96:40:89:42:a8:15:97:7a:bd:4b:6d:d2:
         3d:91:cc:4a:7e:36:fd:db:88:de:be:ba:7a:66:98:10:39:7d:
         94:96:63:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----