Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f96101a2-be2a-4e2b-a9dd-b824697aedc3.roa
File:                     f96101a2-be2a-4e2b-a9dd-b824697aedc3.roa (raw, json)
Hash identifier:          WjaQAGUwpfeW0JHEm9y0aiB5DxMdCJJRarLCgruZDoY=
Subject key identifier:   75:AE:58:0C:BD:D1:EF:8C:F3:0C:48:49:AD:72:CE:97:7E:43:78:07
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       639570CEA91B83B71CE95874A77329E7326DB07A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f96101a2-be2a-4e2b-a9dd-b824697aedc3.roa
Signing time:             Sat 13 Aug 2022 00:00:00 +0000
ROA not before:           Sat 13 Aug 2022 00:00:00 +0000
ROA not after:            Tue 16 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:95:70:ce:a9:1b:83:b7:1c:e9:58:74:a7:73:29:e7:32:6d:b0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 13 00:00:00 2022 GMT
            Not After : Aug 16 23:59:59 2022 GMT
        Subject: serialNumber=6ffbeb1064e626c5edcd5cb67f1a61787de1651a246defd3206b57486fa7b78a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8f:89:04:c9:1b:b3:d3:1b:02:37:2f:5e:8a:
                    11:32:58:80:05:e9:92:87:51:82:9e:3a:52:8e:98:
                    06:38:7e:41:37:6d:4b:c6:d3:35:f2:f7:03:9a:9d:
                    ef:f9:1c:1d:e6:14:30:f4:b7:a8:21:22:12:67:f9:
                    3a:42:5e:b3:56:d8:cc:d4:cb:4b:ff:2f:14:5b:6d:
                    02:cc:0d:d8:de:49:39:7b:f6:41:97:a0:22:fd:90:
                    8c:aa:bc:aa:f2:d3:ea:30:d1:e9:96:72:14:9e:16:
                    ae:37:6c:7d:2d:e7:29:72:13:0d:13:28:d3:59:20:
                    d3:8e:cf:dd:9c:d4:5e:16:b7:bc:52:1e:25:1c:11:
                    6e:2e:88:b1:54:2c:e9:d6:9f:ca:4a:d1:88:8a:5d:
                    2e:91:bd:b3:73:af:1f:a0:1c:3d:4a:e4:5a:76:6f:
                    90:9d:a8:cc:29:e0:3b:ef:4d:8e:64:2d:f8:df:16:
                    7f:46:5b:dc:f5:04:ba:af:13:18:e7:aa:8a:58:fe:
                    b1:cf:72:0a:c0:fe:c6:9d:1f:e0:a4:33:5b:5d:92:
                    94:33:ec:cb:b5:c1:b6:2e:ea:5a:8b:71:69:da:75:
                    30:62:6f:21:21:1a:1c:4b:53:71:63:cd:72:2b:4e:
                    bb:c2:3e:31:af:23:31:b4:d4:64:f0:ca:fe:41:c9:
                    dc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AE:58:0C:BD:D1:EF:8C:F3:0C:48:49:AD:72:CE:97:7E:43:78:07
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f96101a2-be2a-4e2b-a9dd-b824697aedc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:99:f1:ba:90:cd:2b:6e:e1:91:28:85:48:28:59:e2:1b:dd:
         04:7c:bd:78:ab:aa:12:fa:d3:a8:0c:e8:fe:88:0d:73:eb:4d:
         65:6b:1d:36:fe:42:c8:52:8f:db:52:20:35:14:d2:59:f1:43:
         ec:67:36:81:f0:b0:90:bd:80:55:3d:a1:4d:ae:e0:91:5b:61:
         e1:a6:c8:ce:0e:2d:77:30:a9:96:2b:1c:1a:cc:57:ea:73:02:
         3b:7a:f7:11:a9:3b:b4:9c:07:36:cb:fb:ec:fd:7f:4e:f6:47:
         ea:e3:8a:ff:c6:88:4e:03:3b:8d:55:42:4b:ec:14:04:23:53:
         dd:92:24:6b:1c:94:38:6c:66:8a:70:b4:61:77:60:ab:fd:a3:
         0e:79:74:d1:08:47:83:5b:66:8e:cb:7f:75:53:7f:63:76:82:
         8e:2e:d5:7d:db:64:f3:6f:c3:e5:29:0c:3c:58:26:28:a2:ae:
         8f:00:7f:5b:7b:49:ed:cb:c0:43:68:ca:17:10:78:d1:f2:9d:
         be:08:57:ac:fc:f3:21:fa:b8:54:3e:aa:a6:bc:5f:48:f7:f7:
         6f:33:dc:1e:39:87:33:e1:dd:e4:73:57:53:84:a2:b9:00:fe:
         a6:27:f9:c5:93:28:27:b9:54:6c:cf:f7:53:dd:b6:9b:b4:dc:
         14:ae:dd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----