Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ecbe89bd-64f1-4ab1-830b-f8bf7c09cf43.roa
File:                     ecbe89bd-64f1-4ab1-830b-f8bf7c09cf43.roa (raw, json)
Hash identifier:          QYtcI50+OixdOZJPL9GQCU3F6JbSRwxtVHicT+iy9rk=
Subject key identifier:   FA:74:7A:60:B1:E4:C5:D3:C6:09:8E:95:9B:5E:04:08:55:C6:6C:54
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       495453C6ECD62377DB9BC1630A2A361201FAC15E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ecbe89bd-64f1-4ab1-830b-f8bf7c09cf43.roa
Signing time:             Sat 13 Aug 2022 00:00:00 +0000
ROA not before:           Sat 13 Aug 2022 00:00:00 +0000
ROA not after:            Tue 16 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:54:53:c6:ec:d6:23:77:db:9b:c1:63:0a:2a:36:12:01:fa:c1:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 13 00:00:00 2022 GMT
            Not After : Aug 16 23:59:59 2022 GMT
        Subject: serialNumber=589f974f76d52c90920be6da9a5959788e320b98d280c38204b8b5d1cc386cc2, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4f:e2:47:53:96:77:46:9c:41:29:f7:a0:dc:
                    40:95:e3:37:3a:3b:ba:01:4f:3b:15:1a:5e:01:f0:
                    3d:60:c2:67:a5:0d:54:e6:d2:fa:dc:a6:6f:6b:12:
                    1d:d2:40:91:98:c2:4d:c0:ad:15:5b:08:2e:c3:51:
                    24:9e:06:f6:ff:b9:77:49:91:02:9e:ba:5f:b8:12:
                    8b:98:f3:08:8e:a5:d7:ee:60:44:a1:39:b8:36:d9:
                    9f:75:1c:f7:10:89:5a:e0:1c:7c:e9:11:71:fb:8f:
                    1a:36:2d:e7:89:df:33:c7:fb:71:88:42:60:61:e5:
                    32:a9:7d:aa:4a:48:bc:ca:5c:33:b6:7c:b2:f5:c4:
                    1c:60:ce:e2:7c:3c:e8:12:f8:76:1b:8a:b3:47:fd:
                    ee:a0:2c:a9:55:6c:11:46:47:00:37:9b:23:85:2b:
                    21:b4:3b:be:11:63:54:16:1d:db:2c:68:1c:4b:00:
                    d7:df:32:14:5b:31:be:b2:9a:88:ef:ce:1f:7e:cc:
                    58:13:de:28:91:a5:6e:64:7a:c9:e5:cf:0b:dc:1f:
                    87:0d:2e:d0:35:f0:98:43:94:31:be:c3:c9:ce:6b:
                    9e:42:c5:ea:8d:66:5f:35:b1:d6:1d:12:a6:e3:04:
                    92:ce:c5:39:92:fd:ba:d3:7c:fe:ed:47:d7:5e:32:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:74:7A:60:B1:E4:C5:D3:C6:09:8E:95:9B:5E:04:08:55:C6:6C:54
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ecbe89bd-64f1-4ab1-830b-f8bf7c09cf43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:1f:c9:24:96:b7:97:33:57:00:22:3f:03:35:d4:5d:c6:c5:
         39:78:9c:da:fe:30:3c:b0:df:cc:9d:89:26:5f:10:80:c1:dc:
         bc:17:27:b1:b2:82:39:b9:94:fb:24:6d:e7:f1:04:a6:52:9b:
         03:26:5f:8a:6e:48:89:a6:32:e8:a3:de:a0:72:90:ce:ba:d9:
         ee:58:c0:2d:6e:61:91:ce:52:94:81:36:36:72:aa:15:49:c3:
         58:bf:2c:66:05:b7:a3:19:4a:9a:b4:5b:cc:06:22:bc:59:8c:
         b2:11:bb:a1:42:60:74:7b:0f:43:de:d9:1f:95:fd:02:9a:34:
         d6:63:71:bb:8b:35:7e:2c:48:34:a3:6c:36:df:6c:a3:bf:57:
         74:63:aa:15:ca:01:b8:78:85:b6:8e:b1:be:e4:58:22:12:93:
         6e:27:93:a4:19:f0:e9:c6:d2:84:75:ab:47:b5:00:20:f2:25:
         96:75:e2:1a:b3:e2:5a:cd:1e:cb:1d:a4:90:41:c1:c7:d8:26:
         4d:41:b8:b3:4d:42:40:73:05:43:76:de:79:32:da:40:69:55:
         a7:26:78:40:82:31:d9:b3:89:24:6e:41:54:91:01:d0:44:a5:
         bb:ad:e4:1c:f7:75:85:e4:d9:14:30:c4:6c:4b:56:7f:06:f4:
         8e:5a:f7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----