Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fae1b528-3e1c-4068-a00c-a1f3e2605305.roa
File:                     fae1b528-3e1c-4068-a00c-a1f3e2605305.roa (raw, json)
Hash identifier:          YV+o1zKQN3x2d5aHKDxoquGoFyaTzsQj2WIoGyaLEec=
Subject key identifier:   06:03:84:46:E9:28:91:FA:F9:41:03:20:E2:F8:18:DA:91:21:A1:4C
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       78C17B672D33BB5B6EF60F8F22CC12603EF12C92
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fae1b528-3e1c-4068-a00c-a1f3e2605305.roa
Signing time:             Tue 26 Jul 2022 00:00:00 +0000
ROA not before:           Tue 26 Jul 2022 00:00:00 +0000
ROA not after:            Fri 29 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c1:7b:67:2d:33:bb:5b:6e:f6:0f:8f:22:cc:12:60:3e:f1:2c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 26 00:00:00 2022 GMT
            Not After : Jul 29 23:59:59 2022 GMT
        Subject: serialNumber=de538e9331b3c1855bc313f7639c29f2188ab71ca6a57f6451dc5a626f3133d6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:c5:71:c7:9b:b0:d0:cc:1a:60:41:ef:11:
                    82:bf:14:32:6a:63:73:10:a1:3d:de:ff:04:f9:e2:
                    65:11:7d:3c:9d:00:ab:f9:30:84:29:b3:82:59:67:
                    52:36:1c:e0:88:c1:b2:8f:0e:ed:8c:fe:02:64:60:
                    e2:40:46:6d:aa:88:a5:9d:b8:69:bd:10:93:86:95:
                    9e:58:4f:29:e8:32:f4:83:f3:b7:13:12:43:dd:39:
                    e2:4d:5b:67:5e:90:9b:48:e1:e1:eb:0f:7c:1c:50:
                    af:ad:ac:19:6d:79:4e:3f:48:90:41:06:dd:8e:b0:
                    9c:c8:73:7a:9d:32:37:5c:8e:b9:ef:59:5a:ed:aa:
                    70:c1:e3:6a:e8:b3:b9:be:0a:64:9f:e1:e2:7f:cd:
                    c1:6e:37:00:91:10:16:a8:56:63:66:59:2d:ca:f7:
                    33:aa:f9:b5:7c:9d:33:68:ec:d2:40:ff:a2:5c:d3:
                    da:2c:e4:84:af:e6:a5:a2:84:63:01:a8:04:1e:3a:
                    1a:df:d2:35:7d:56:c6:61:11:1e:29:c7:a7:e6:95:
                    fe:e5:b6:40:80:63:b4:57:7d:8a:43:2e:f0:4c:3f:
                    81:7a:4d:02:4e:3f:56:ae:40:b9:ca:7d:cd:8e:88:
                    3f:fa:ed:c2:ba:d8:2d:f8:e1:b9:af:27:c0:35:f3:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:03:84:46:E9:28:91:FA:F9:41:03:20:E2:F8:18:DA:91:21:A1:4C
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fae1b528-3e1c-4068-a00c-a1f3e2605305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:9b:29:fc:b9:f1:f1:dd:13:ff:db:b8:cd:a1:43:2a:89:31:
         69:26:26:ae:48:8b:09:0f:fd:f3:d3:73:27:81:86:20:bf:d2:
         4a:0c:d2:f8:2d:91:b5:bd:b5:c4:40:78:5f:90:e9:a6:7e:98:
         ab:5f:e5:8e:84:cc:8d:ee:a8:f8:43:df:f8:4b:6a:a5:d1:ea:
         19:2a:b3:19:cb:e8:22:51:8c:d6:3e:43:ac:a6:a9:5d:40:e2:
         b4:3f:9a:e2:3d:27:a5:39:e4:88:78:82:8c:25:5c:3e:46:5e:
         95:69:e8:5d:1d:10:61:b2:8c:dc:da:71:7a:3f:5b:a2:e0:68:
         68:e9:f1:d2:4a:a6:c2:05:93:62:38:0f:01:d1:b3:a6:a0:f0:
         56:80:10:8a:a2:2e:1f:74:78:15:d3:36:1d:a7:e3:da:be:d5:
         ea:ca:80:f3:59:70:6b:88:83:31:99:23:74:76:09:d0:39:53:
         4c:c9:9a:a3:71:58:f8:39:65:be:1d:09:2a:ae:31:5f:92:a0:
         44:31:41:ab:fc:1e:7f:58:cf:02:bc:4b:24:e2:79:a4:e4:05:
         e8:5d:71:8e:40:15:ca:f2:4f:27:3d:6b:c5:a2:b9:7b:78:a3:
         bc:c4:4e:dc:a6:9a:fb:b4:74:9d:fe:78:8e:e7:1d:01:de:fe:
         19:31:79:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----