Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ec41fba5-b515-42d7-b1f1-1b7465f61e78.roa
File:                     ec41fba5-b515-42d7-b1f1-1b7465f61e78.roa (raw, json)
Hash identifier:          YE6ORn8ZhLCpXI3C08tvOdHrCowzBM8So+43DE6MBEU=
Subject key identifier:   3E:D6:A2:B7:2F:18:00:70:A1:57:A8:DA:1D:E8:80:25:E5:51:93:34
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3ED74290E310DD4F6E94EAC1C7F21AC23280068C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ec41fba5-b515-42d7-b1f1-1b7465f61e78.roa
Signing time:             Wed 17 Aug 2022 00:00:00 +0000
ROA not before:           Wed 17 Aug 2022 00:00:00 +0000
ROA not after:            Sat 20 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d7:42:90:e3:10:dd:4f:6e:94:ea:c1:c7:f2:1a:c2:32:80:06:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 17 00:00:00 2022 GMT
            Not After : Aug 20 23:59:59 2022 GMT
        Subject: serialNumber=83f28a868d2a07c03603acc2f55f0c30bb95917a26e459e6f8f6d2b54faa2af6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:33:f3:f2:be:57:a4:bf:2f:01:d0:96:fe:c1:
                    81:86:7a:51:c8:b4:4c:20:23:ce:00:d4:99:18:ad:
                    37:e0:b3:2e:e0:23:04:09:a0:46:30:3d:be:23:6f:
                    9c:43:80:0d:53:c1:a0:dc:a8:20:39:19:f8:59:77:
                    d5:69:01:ad:e9:bd:02:7a:02:3c:82:9a:f9:ff:1c:
                    14:d2:3d:d5:9e:d4:21:f9:25:70:cf:92:a1:af:3c:
                    2f:98:84:78:1f:0a:d2:d5:c8:f2:b4:97:ad:e3:42:
                    30:38:92:62:78:29:f0:c4:75:81:bd:f5:a1:33:1f:
                    ff:60:46:48:be:02:d1:cf:ee:dd:5e:99:76:4e:c3:
                    6c:1e:ec:33:b1:73:7c:9e:76:27:94:9c:52:a0:18:
                    1c:41:f7:05:82:e7:12:55:78:03:21:40:16:89:e7:
                    a5:2e:b7:e1:f3:6e:0c:e6:03:4e:98:e6:f5:6d:55:
                    98:34:d1:f7:4b:10:f7:ef:25:bf:ec:98:87:e0:87:
                    d9:06:c4:07:0c:92:b5:2f:2f:26:53:d5:e2:a9:c4:
                    b1:bc:47:4e:f0:31:7a:a5:6b:52:c4:4c:fa:ee:1d:
                    8c:aa:e7:b1:7c:28:6a:96:04:87:c8:d0:fa:15:92:
                    42:db:a0:0c:d1:b2:8c:5a:76:8c:77:cf:b1:eb:66:
                    3e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D6:A2:B7:2F:18:00:70:A1:57:A8:DA:1D:E8:80:25:E5:51:93:34
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ec41fba5-b515-42d7-b1f1-1b7465f61e78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:08:13:a8:45:f6:97:b3:58:9b:ef:80:ac:ea:b4:c7:98:9d:
         29:20:cf:03:db:de:38:f1:84:32:22:df:5a:f7:e1:33:c0:15:
         aa:39:4b:0f:6c:02:52:f4:65:7c:6d:7c:f5:18:92:76:45:52:
         10:83:e2:dd:32:70:80:10:da:59:f3:fc:b9:ed:3d:c3:44:01:
         96:c8:03:e7:22:b4:fc:00:c3:dd:ba:5c:fd:17:99:1f:56:4a:
         52:6f:12:2a:f7:03:91:ee:8c:bd:cb:f3:95:00:b4:99:ad:98:
         be:b7:25:3a:d6:12:62:40:4d:af:40:68:1b:58:84:40:d4:e2:
         53:e4:40:57:68:40:19:b9:e8:42:88:cb:10:5e:51:3b:a0:f5:
         6d:48:b4:fb:77:41:28:92:c9:f1:e3:67:3c:40:99:b7:65:61:
         f3:7f:8f:1f:1a:27:a5:7a:c2:a4:43:b9:e1:aa:7c:3c:8e:fc:
         5f:21:60:a6:19:06:7a:b0:c5:2a:ce:16:33:5e:f9:e6:6c:d2:
         f4:62:d5:c4:d5:8a:82:33:07:48:df:76:67:b0:86:5d:17:e0:
         a5:4b:0a:da:12:53:04:41:41:13:21:94:55:6f:41:f5:26:df:
         be:4e:27:36:81:e0:3c:fc:5f:b6:0f:4c:a7:c9:df:da:5d:c9:
         00:81:7d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----