Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f621a61e-f66c-4a08-a4ce-b89dba570b2c.roa
File:                     f621a61e-f66c-4a08-a4ce-b89dba570b2c.roa (raw, json)
Hash identifier:          gGMeNE/GNVAanBRLg5h88ie+lTIVVGZux9300fT4ZmQ=
Subject key identifier:   52:14:D2:F2:4B:E0:F6:5D:6F:D3:F0:42:08:EE:35:15:60:F2:A1:7E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       170EE6E0CC114F9917BD57CD9A02C8EC14EBE678
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f621a61e-f66c-4a08-a4ce-b89dba570b2c.roa
Signing time:             Thu 21 Jul 2022 00:00:00 +0000
ROA not before:           Thu 21 Jul 2022 00:00:00 +0000
ROA not after:            Sun 24 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:0e:e6:e0:cc:11:4f:99:17:bd:57:cd:9a:02:c8:ec:14:eb:e6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 21 00:00:00 2022 GMT
            Not After : Jul 24 23:59:59 2022 GMT
        Subject: serialNumber=2ac3ddfa7939de4f917c660c391467c93b0d9e52737e126f1a3686e74df1811b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:75:ca:ac:95:d1:4a:f2:26:66:25:38:8a:
                    a8:7d:cc:6b:56:a1:61:e0:6b:68:b7:2d:fa:e0:e5:
                    da:2b:ce:78:c7:36:c3:14:ae:02:17:a0:72:28:ad:
                    8b:a4:fc:c7:e2:f5:95:32:36:ea:20:52:e3:b3:7f:
                    9b:16:28:2c:36:3d:18:5c:3c:30:3c:37:0e:ee:42:
                    b0:2a:39:17:48:30:37:e2:92:23:4e:c1:83:1f:d1:
                    14:fc:92:94:06:5d:92:86:8b:22:61:bb:69:ed:d7:
                    af:3e:89:97:6a:3d:50:53:c6:c1:f9:05:ed:30:94:
                    38:32:24:b1:f0:3f:48:1b:57:ac:32:5c:04:b8:62:
                    30:f8:5a:25:34:11:be:c9:a2:74:6b:6a:23:66:13:
                    74:f2:71:68:e8:4e:56:f5:ad:8d:de:6d:98:a0:a0:
                    14:ed:a2:c2:76:c7:0d:3c:fe:ee:c0:06:12:85:f5:
                    8b:75:73:40:24:1e:9a:26:af:cd:c7:ed:6c:ec:8e:
                    82:20:04:e3:16:e0:e1:76:ad:70:eb:50:79:10:cc:
                    97:7d:ff:b7:b1:d7:75:fd:89:67:79:65:b0:9d:b4:
                    48:39:c5:84:7a:7c:a3:e7:c1:1b:40:5b:9d:26:62:
                    d1:ea:c1:3b:80:6d:ef:75:14:4c:72:f8:fd:ca:b8:
                    ea:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:14:D2:F2:4B:E0:F6:5D:6F:D3:F0:42:08:EE:35:15:60:F2:A1:7E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f621a61e-f66c-4a08-a4ce-b89dba570b2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:56:85:6a:fe:2d:a0:35:1b:53:f8:71:00:83:24:79:f1:08:
         fa:c1:fe:4d:91:3e:09:fc:d0:24:e0:0d:5e:31:9b:00:d5:12:
         02:34:48:ea:7b:1d:8b:b5:06:23:67:e7:0c:4b:82:e8:81:ff:
         36:c1:75:f6:22:17:19:82:ca:22:a6:a6:c0:5f:eb:b6:b5:bc:
         e6:17:f9:55:4c:b5:48:9d:dc:e3:83:e0:f4:0d:59:18:c2:19:
         d0:15:63:17:1a:df:90:a7:d4:98:a6:72:8d:3d:98:8a:78:59:
         3f:e5:e9:10:9d:7a:35:05:61:cf:25:84:2c:3f:84:f1:78:ce:
         34:e7:36:78:88:84:e3:5b:ed:2c:e3:d7:7a:94:e6:e6:ac:2d:
         45:a6:df:1c:45:6d:34:ab:3a:bb:a2:41:4d:ef:01:ec:b8:92:
         9f:fb:7a:3f:ea:d3:5f:e8:eb:e0:e8:9b:e4:e4:1d:5a:08:f3:
         46:87:5e:51:92:71:a1:a2:79:ac:0d:70:a0:c8:ae:88:e2:7f:
         69:46:20:37:11:fa:3d:3b:f4:c3:7c:08:61:52:5e:a7:23:f0:
         93:4e:52:97:f3:cc:48:84:b0:a2:a3:91:70:1a:6a:82:db:b3:
         d7:b0:38:00:c0:0e:7f:2c:23:b4:90:c1:ff:3f:99:2e:f8:46:
         17:e3:8e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----