Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5b7772b6-040a-4524-b129-9d38b0155985.roa
File:                     5b7772b6-040a-4524-b129-9d38b0155985.roa (raw, json)
Hash identifier:          6rArRTfRtA5S3G7CDxR3f+HGssy2v6l2egbbh7pwPfw=
Subject key identifier:   D9:45:F6:01:22:FE:AD:27:7E:96:3F:60:6F:57:3F:98:D1:4C:29:58
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       18E99F471EC338A7E1CFC9CFAB7CC9C6A0F9EE3E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5b7772b6-040a-4524-b129-9d38b0155985.roa
Signing time:             Thu 11 May 2023 00:00:00 +0000
ROA not before:           Thu 11 May 2023 00:00:00 +0000
ROA not after:            Sun 14 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e9:9f:47:1e:c3:38:a7:e1:cf:c9:cf:ab:7c:c9:c6:a0:f9:ee:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 11 00:00:00 2023 GMT
            Not After : May 14 23:59:59 2023 GMT
        Subject: serialNumber=ca7a53a56d3db4c96c1456aba9e8c58f96617a051fa719a86921b43923e2b2b5, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a3:c3:c8:67:df:d5:d8:90:aa:ec:a6:77:06:
                    4c:85:3a:96:dc:e1:3b:34:54:2a:b1:fe:b7:52:27:
                    d1:60:f9:b9:f1:91:44:49:d2:55:f3:ea:d6:55:93:
                    26:d1:61:0a:76:24:88:f7:2b:70:b9:9f:37:c1:1f:
                    f9:bd:dd:fc:6d:ca:18:1f:d8:3e:88:60:ea:13:6b:
                    b9:ce:67:68:a1:ef:12:43:fc:fa:69:cb:8b:c2:08:
                    40:34:bf:8f:47:14:04:85:65:7c:53:72:6a:ac:22:
                    ac:a2:f4:ee:c2:e2:21:c4:af:93:2f:e7:76:88:aa:
                    1e:47:75:2d:34:f9:f6:46:21:67:d8:44:e0:5c:ce:
                    f1:5e:d2:bb:5e:0f:fa:81:f4:ad:81:44:56:ba:44:
                    f6:03:7f:50:30:77:1d:ce:56:c5:9e:b8:89:a1:0d:
                    fa:0d:ae:79:7c:4f:37:b8:7b:4a:65:3d:80:79:25:
                    71:48:c9:d5:34:50:dc:3c:38:2d:eb:76:15:04:2f:
                    d7:60:27:93:40:d2:8f:0f:e5:ed:f8:73:c8:6f:e5:
                    0e:d4:8c:24:4a:4c:c1:e8:56:97:7a:57:03:8f:74:
                    b4:dc:17:9c:0e:af:3b:ca:56:9c:f5:37:ca:a7:15:
                    f9:ba:85:19:58:0c:ee:20:06:06:e3:6f:2b:05:38:
                    39:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:45:F6:01:22:FE:AD:27:7E:96:3F:60:6F:57:3F:98:D1:4C:29:58
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5b7772b6-040a-4524-b129-9d38b0155985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:38:11:c2:87:41:e4:38:4b:8b:88:71:9d:92:4a:28:94:ff:
         19:20:d1:7c:41:e6:fb:a3:ea:0e:5d:49:ab:6b:ec:30:f7:1b:
         e4:b0:72:99:9d:02:4e:0d:1a:79:cc:c1:ff:50:fe:37:9b:29:
         e6:a6:56:8e:aa:cc:ae:37:2c:67:bc:3f:ca:96:c6:bf:6f:65:
         36:85:4e:52:84:08:5d:ae:c0:84:7c:bd:ac:9b:31:bd:8e:d6:
         3c:2b:48:78:bc:e7:39:57:7e:3a:53:bd:7c:c0:85:ac:99:9f:
         b0:10:6d:4a:13:31:f4:80:32:84:cd:cc:06:05:b9:33:0e:89:
         83:f8:bf:26:5f:3f:0e:25:d6:6e:1d:fc:78:93:12:b9:22:f8:
         73:43:9c:94:12:d3:00:c3:eb:9a:34:04:3f:d3:02:13:74:26:
         95:0c:12:86:35:84:1c:70:51:c7:98:5b:e8:1d:cd:8f:8c:9c:
         62:9b:8b:f5:41:e0:50:58:71:95:e4:c1:dd:b5:9e:b7:c9:da:
         9b:44:11:b4:32:69:23:11:cf:08:c1:df:02:da:f1:e8:42:5e:
         a5:9a:bb:27:04:cc:c0:cf:1e:c9:40:95:7c:61:ac:7f:e9:9a:
         4f:ca:37:5a:88:9a:40:1d:f0:0b:8c:82:6b:fc:18:78:2f:62:
         41:b7:90:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----