Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f8cce4ea-99d1-47bd-a63c-afda44cf817f.roa
File:                     f8cce4ea-99d1-47bd-a63c-afda44cf817f.roa (raw, json)
Hash identifier:          yUKLCGrKnZ3ZmNabQ9977W0K05VURQ8moHqWeVpU1fU=
Subject key identifier:   C4:68:2F:0C:16:91:95:9D:45:A3:4B:2E:73:3C:19:F4:9B:92:DB:F5
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5D5DF4A31318514A2142BBF5315F80F90C25CFE9
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f8cce4ea-99d1-47bd-a63c-afda44cf817f.roa
Signing time:             Mon 11 Jul 2022 00:00:00 +0000
ROA not before:           Mon 11 Jul 2022 00:00:00 +0000
ROA not after:            Thu 14 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:5d:f4:a3:13:18:51:4a:21:42:bb:f5:31:5f:80:f9:0c:25:cf:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 11 00:00:00 2022 GMT
            Not After : Jul 14 23:59:59 2022 GMT
        Subject: serialNumber=33a8aa61dd86dbfc70aadf99400f4310377432df21f7f418dd3cf6407ef4fb61, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5c:e7:d9:43:70:cc:9e:99:4f:58:1b:43:ef:
                    d8:c0:e5:ba:32:70:f4:c2:8f:01:ae:6f:dd:ee:59:
                    ae:2d:20:ce:ef:ef:98:de:20:74:a4:92:17:55:75:
                    e6:0f:eb:4a:8c:c3:68:87:f9:9a:39:8e:fe:09:d1:
                    60:11:9d:91:e3:14:b8:6e:6d:c2:35:0b:25:2a:b2:
                    57:71:fa:66:4f:90:f2:fc:b1:de:36:ad:36:08:27:
                    b5:6a:ed:cc:7e:e2:4a:27:ef:8e:b0:68:da:4c:a1:
                    c6:53:7a:fa:88:3f:d4:b0:24:80:65:24:21:bb:61:
                    98:d4:5c:67:a8:3f:b7:7e:ae:d8:01:9b:26:83:68:
                    18:3b:a9:cc:70:49:b1:92:19:87:bf:bc:bf:d0:b8:
                    ef:2e:95:77:79:57:2a:9d:91:10:e5:a0:f5:40:5a:
                    fa:3c:17:52:5d:0a:69:3d:49:4d:a8:b0:63:8b:30:
                    3a:e0:72:71:ce:40:19:57:24:7b:35:37:e8:cd:4b:
                    d2:07:85:cf:3b:65:72:3f:22:8d:cb:97:aa:09:a4:
                    09:ee:02:5b:e3:50:8e:c7:7b:ca:96:63:4d:7b:50:
                    ed:e2:fa:3b:ab:c6:79:95:12:4d:15:08:11:e6:27:
                    c1:2b:9b:4a:07:94:f1:41:ef:94:69:b6:58:0c:3c:
                    37:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:68:2F:0C:16:91:95:9D:45:A3:4B:2E:73:3C:19:F4:9B:92:DB:F5
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f8cce4ea-99d1-47bd-a63c-afda44cf817f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:6e:68:1f:e2:c3:3b:32:ff:06:d5:3f:42:10:df:3e:f2:69:
         5c:0a:e9:ed:9e:54:45:f8:4e:e7:7b:4c:1f:60:89:c6:ce:fc:
         fe:22:ae:80:31:63:a8:4a:12:71:da:00:c0:f8:50:44:68:79:
         93:87:62:68:95:52:de:5f:5f:33:99:d3:e4:27:d2:f6:92:2d:
         69:68:04:5c:05:d3:33:fe:5f:a8:c4:df:48:bd:24:81:c5:aa:
         05:4d:66:8e:8d:e6:47:00:b3:9b:a9:9c:91:f0:26:d5:fe:10:
         0d:75:6c:1c:fa:32:f7:c9:23:8a:db:2a:ca:56:cc:ab:08:8d:
         74:dd:87:e4:1b:af:26:2d:4b:6e:0d:48:4b:23:9e:af:61:c1:
         36:55:a5:92:4f:97:5e:82:02:5d:a1:3a:c2:2d:bf:f4:6c:52:
         23:16:a9:41:e9:02:44:7d:2b:ad:ef:65:4b:1d:e1:2d:8c:05:
         a9:6e:32:a7:c9:86:eb:90:25:25:78:7d:41:bd:06:45:85:52:
         1a:6b:2a:4f:8b:8e:1e:7f:7a:74:b2:3a:9a:ff:a1:af:c3:4c:
         e7:5b:65:0e:42:a2:dc:91:7b:41:5e:b5:49:a6:83:75:cd:b7:
         b9:29:42:38:e8:0d:39:d0:0b:5e:6f:aa:44:90:82:db:2e:63:
         11:de:0a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----