Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e32638c1-fd91-46c3-a510-5661bdc1fa95.roa
File:                     e32638c1-fd91-46c3-a510-5661bdc1fa95.roa (raw, json)
Hash identifier:          +CNCZTio/uPhnsRoh+ZJy4f850Vg0d+nU6e7Tbv+diE=
Subject key identifier:   3C:31:6C:D4:AA:97:60:3B:42:7A:FB:FC:8B:E6:CE:03:99:1E:A9:C6
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       569BD143E1D33763FB347459D3254B7A1246BFD1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e32638c1-fd91-46c3-a510-5661bdc1fa95.roa
Signing time:             Sun 28 Aug 2022 00:00:00 +0000
ROA not before:           Sun 28 Aug 2022 00:00:00 +0000
ROA not after:            Wed 31 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9b:d1:43:e1:d3:37:63:fb:34:74:59:d3:25:4b:7a:12:46:bf:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 28 00:00:00 2022 GMT
            Not After : Aug 31 23:59:59 2022 GMT
        Subject: serialNumber=4e9801abb39c63c3e004b8a87142a9c1069b09a78b639bb228b75da605549153, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:70:eb:c0:dd:79:ac:ed:66:1f:89:ce:f5:b7:
                    60:80:79:3e:6a:6e:dc:c5:f9:2b:d2:68:48:6d:77:
                    e3:a3:88:ea:b4:e3:e5:7b:ca:6e:89:4c:d7:05:b3:
                    3e:d8:c6:a4:aa:ea:38:ff:76:79:42:b0:d6:5e:fc:
                    0e:f9:73:9b:62:9a:b4:13:1d:f2:5c:2d:6c:c9:2d:
                    30:dc:40:58:21:85:ca:33:70:70:63:09:ef:c8:b0:
                    6a:a6:d7:32:f6:c1:e8:7e:71:0a:3e:5e:6a:e9:55:
                    fa:04:e7:d4:1a:e5:7c:be:f0:fb:de:53:02:be:56:
                    95:5f:6c:e2:bc:d2:82:a0:69:d7:69:d4:7e:fc:56:
                    14:38:fb:66:ad:88:0b:a7:99:3b:a5:b4:77:cb:89:
                    84:95:f4:9a:3a:92:fc:7e:c4:2a:64:86:fb:a7:77:
                    76:a0:75:12:c6:b0:db:90:d7:28:fa:d3:dd:ba:01:
                    d6:2a:58:25:7c:07:91:f8:18:cb:0a:ed:c2:9c:1b:
                    a3:18:49:d5:5d:48:cb:cd:15:80:94:ea:3a:11:10:
                    e3:53:71:22:0f:fd:d7:db:5c:ba:6c:a5:ac:12:df:
                    2e:9a:32:4f:2d:a6:7e:a5:e5:ab:68:f2:c2:b6:62:
                    f4:73:08:ff:da:a2:4c:9b:a2:b5:24:85:b0:6e:a6:
                    4d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:31:6C:D4:AA:97:60:3B:42:7A:FB:FC:8B:E6:CE:03:99:1E:A9:C6
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e32638c1-fd91-46c3-a510-5661bdc1fa95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:06:1a:95:91:e5:ca:41:d2:4c:a6:43:b5:a6:57:a8:06:1f:
         51:2f:99:7e:bd:c9:5e:0b:14:24:a0:ae:f5:a0:28:ae:ad:e7:
         a4:4e:df:8d:64:e5:4c:01:77:b8:8e:22:dd:8f:33:1d:49:b9:
         58:c7:4b:0f:27:0a:98:11:43:e0:e8:37:af:05:69:c9:18:cb:
         13:3d:cc:3f:6c:68:6b:08:05:09:a4:b4:d5:ac:fe:1e:5a:76:
         a3:ae:7a:31:98:b8:c3:c0:7f:cc:db:8b:a7:b0:00:7d:b4:51:
         af:22:4f:db:f9:89:e4:b2:eb:60:b7:9b:00:93:69:04:53:fa:
         75:87:66:2e:1e:1f:16:24:cd:20:f7:24:c0:c3:6b:8f:b1:1e:
         7f:78:9d:43:19:39:f5:ce:62:52:e3:9c:6c:fd:92:c7:58:cf:
         4b:51:70:29:15:88:79:b7:4e:f4:47:9c:05:b7:74:2d:69:d0:
         63:bc:57:63:0f:75:cc:14:7b:2e:65:ae:30:9a:64:21:35:62:
         61:77:0d:8f:d3:52:7a:3f:d5:30:76:5b:52:ee:b9:92:da:98:
         31:ba:da:23:d7:d1:cd:3d:38:90:45:74:3a:6e:03:76:31:9e:
         94:be:c5:f5:04:4d:12:02:14:fd:be:a5:35:9d:3d:43:fe:32:
         81:a2:73:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----