Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ed18d1e5-7587-4fe1-ac0b-ed67973fe2d6.roa
File:                     ed18d1e5-7587-4fe1-ac0b-ed67973fe2d6.roa (raw, json)
Hash identifier:          WutLepOBcfKhTLHmM+DzMWRvIShJFs+8R8sgceD5QM0=
Subject key identifier:   33:14:6C:53:BE:B4:49:45:F2:26:92:FA:5A:56:8C:AE:70:80:D1:F7
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       210D1DF32D4BE682523C2B13CCAA6920E49999E1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ed18d1e5-7587-4fe1-ac0b-ed67973fe2d6.roa
Signing time:             Tue 19 Jul 2022 00:00:00 +0000
ROA not before:           Tue 19 Jul 2022 00:00:00 +0000
ROA not after:            Fri 22 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0d:1d:f3:2d:4b:e6:82:52:3c:2b:13:cc:aa:69:20:e4:99:99:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 19 00:00:00 2022 GMT
            Not After : Jul 22 23:59:59 2022 GMT
        Subject: serialNumber=10a484c432955a30395462d6e2c30609573df0ed999fca9067005699c955ca07, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c7:fc:c8:9e:45:bb:70:68:01:1f:e6:a9:0e:
                    52:b5:55:65:d0:39:0f:b6:7a:da:b2:82:97:b8:49:
                    ea:ae:12:ad:07:55:cf:2a:11:f3:34:2e:de:ca:91:
                    dd:3e:a8:76:d3:bd:6b:4d:2d:46:84:67:5f:78:e8:
                    02:fe:2f:62:d4:0e:b8:9f:37:b8:9e:07:f6:c4:8b:
                    f7:62:bc:e5:26:38:67:45:98:0e:41:88:75:7f:65:
                    a5:4f:4a:59:5e:f6:fa:81:a9:57:65:5b:29:86:c1:
                    b3:cf:9a:3f:6d:b2:a3:99:81:05:41:c2:dc:d5:71:
                    50:9b:46:8c:78:22:32:db:16:fe:8f:9e:72:dd:61:
                    fc:33:6d:7a:c6:5f:b6:55:6a:f3:df:29:43:df:25:
                    4e:f3:f2:d9:37:1b:76:15:fd:d9:ad:dd:f7:fd:96:
                    d7:31:33:33:5b:be:52:e9:9e:f4:bc:ad:e2:e1:63:
                    d4:1d:02:74:97:d7:97:2b:7e:32:39:48:ef:72:6d:
                    9d:dc:b7:6d:07:ee:d4:c1:8b:c1:92:97:da:46:02:
                    ce:26:b7:37:f4:d9:23:18:86:49:1f:37:5c:66:b9:
                    92:03:ca:e8:df:93:23:66:fa:6a:65:6d:cd:bc:d4:
                    22:db:f0:95:84:2a:d3:d3:ea:e5:57:1c:48:a0:03:
                    85:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:14:6C:53:BE:B4:49:45:F2:26:92:FA:5A:56:8C:AE:70:80:D1:F7
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ed18d1e5-7587-4fe1-ac0b-ed67973fe2d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:58:9c:39:6d:cb:aa:88:8c:1d:5a:2d:71:13:0f:63:a4:c5:
         4c:7b:c8:ea:a6:59:03:40:f7:61:c8:a0:ae:74:1d:19:14:c1:
         cd:30:05:7a:6e:6a:c3:93:30:1a:1d:69:59:b7:cd:38:37:b6:
         04:28:93:9c:67:64:94:7f:3b:4d:d6:83:4d:5f:39:85:89:46:
         d2:55:c9:e6:8f:6a:bc:1d:73:da:3c:66:84:32:da:ce:ea:ab:
         48:93:12:fc:48:6f:58:36:cc:b7:c0:4c:45:e3:3d:be:03:4b:
         c7:e2:36:73:3a:8b:d7:70:be:70:96:ad:62:8f:14:50:b4:4b:
         72:f3:63:1f:f9:e1:dd:7f:d9:55:4b:3e:4d:ba:87:54:7e:11:
         6c:11:97:d1:f7:f1:5e:cd:b1:65:5e:5d:f5:1e:c6:cd:6c:fa:
         e9:7b:03:e8:71:6e:2e:84:85:b6:d9:41:ea:fb:44:47:68:23:
         d6:31:94:37:16:1c:f1:f8:30:7e:42:14:71:1e:1e:98:eb:65:
         23:1b:4a:fb:5d:9d:88:6a:c8:66:fc:32:32:92:a2:91:d5:72:
         13:84:39:fc:a7:48:66:dc:ce:31:40:af:b6:0b:8f:d2:20:6e:
         12:c4:47:59:d5:6d:6b:c3:ea:54:c5:30:f6:db:f1:b2:37:0b:
         a2:7b:b5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----