Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6390387f-2010-407a-ab5e-e5802f125391.roa
File:                     6390387f-2010-407a-ab5e-e5802f125391.roa (raw, json)
Hash identifier:          ZRVqkPXkQOIpNJuR8r5NpVPJJXabg4ncDbYuKC81kzY=
Subject key identifier:   3C:61:34:93:B8:A7:C2:79:B6:B3:D3:9D:58:13:F2:E4:45:E1:A5:B4
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       76C6074D8316E4434578260E9A1E6D7E9AEE5FA7
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6390387f-2010-407a-ab5e-e5802f125391.roa
Signing time:             Sun 19 Feb 2023 00:00:00 +0000
ROA not before:           Sun 19 Feb 2023 00:00:00 +0000
ROA not after:            Wed 22 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c6:07:4d:83:16:e4:43:45:78:26:0e:9a:1e:6d:7e:9a:ee:5f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 19 00:00:00 2023 GMT
            Not After : Feb 22 23:59:59 2023 GMT
        Subject: serialNumber=078bf6bf7ac67ac43d1bf97ab352f3c69fe005bc0f5058d22c7d9a08affa0986, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:65:4d:87:ed:63:c6:ca:97:76:fe:23:b9:
                    3f:fd:c0:9c:52:88:7d:04:4d:8f:2a:fe:b2:86:58:
                    ab:1e:cb:a2:e1:6a:77:be:67:0f:68:e1:56:43:fd:
                    84:42:f6:e3:7b:4a:58:ae:68:f3:90:87:63:6d:7a:
                    ea:87:fc:f8:d7:12:a5:e9:7a:ea:0a:9b:a6:58:c7:
                    6b:d4:43:7f:39:ea:a4:64:04:32:47:ac:9f:8e:c3:
                    3b:66:e0:cf:79:60:8a:c0:b2:03:db:21:d5:66:5e:
                    00:2d:6a:fb:65:50:e3:fc:d9:c0:82:2f:1a:85:e9:
                    67:11:a0:e5:29:53:4d:b1:97:cf:e1:3f:62:53:75:
                    2d:d0:c2:20:cb:ab:ee:3e:d0:5c:ed:30:e5:5f:69:
                    42:85:e6:8a:0a:37:8c:93:99:b2:b9:d2:75:e9:bb:
                    5d:14:5d:36:1f:95:a1:b3:9e:a4:3f:ba:88:9e:18:
                    91:2b:90:77:fc:8c:5d:91:2e:99:e9:a2:d3:0e:2c:
                    77:0a:ea:d3:eb:f5:10:e2:d2:06:2e:9e:56:ca:a5:
                    18:44:a4:f2:14:a8:66:1a:22:01:6d:ff:05:4f:5a:
                    58:71:70:e0:a1:18:a7:2b:ae:e1:d4:0f:a9:86:b6:
                    a6:0c:ac:9e:76:41:53:52:c2:9d:49:a5:2d:bf:48:
                    84:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:61:34:93:B8:A7:C2:79:B6:B3:D3:9D:58:13:F2:E4:45:E1:A5:B4
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6390387f-2010-407a-ab5e-e5802f125391.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:f7:fa:16:d1:40:63:58:f3:9e:21:29:bf:0f:91:e5:17:97:
         65:3c:29:c1:b9:d1:2d:e8:0d:92:f9:6d:bb:f0:16:5d:2e:11:
         2d:62:6b:c7:99:bf:68:43:82:1d:d3:7b:6a:ea:b2:ab:44:8e:
         ac:9b:63:08:1e:0b:c4:e9:7c:ee:3a:36:aa:2e:d7:f3:88:05:
         03:3e:af:ae:4f:c4:94:69:5b:8f:07:6a:3a:0e:5e:36:28:e9:
         8e:7a:9f:29:69:2e:b6:10:5c:9f:cb:cc:5a:74:95:8f:d9:5c:
         b9:08:73:9e:42:53:cb:a3:24:7f:dc:1b:40:0e:33:7c:f6:d1:
         11:da:91:d0:f2:7a:1d:27:16:b2:06:3d:b6:50:58:9c:79:b5:
         63:a4:c2:10:ed:13:1c:49:fd:a7:83:59:58:fb:e9:ee:ae:3c:
         02:26:f3:d5:f9:01:09:ae:4b:5f:35:f1:18:4a:9a:2e:95:6c:
         06:0d:29:3c:46:c1:0b:f2:40:98:b0:60:e0:17:86:30:db:64:
         2d:78:e0:7e:f4:1d:63:57:81:09:c3:65:d7:10:86:48:f6:69:
         b6:4d:84:70:a9:e3:88:c5:9c:cf:0f:d8:53:91:c6:a1:69:11:
         f6:9a:6d:50:1b:92:a9:c2:89:82:d0:81:b0:ee:f4:b1:c4:1d:
         b0:39:8f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----