Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/76dc8738-19b6-4c19-be19-2ea661f83856.roa
File:                     76dc8738-19b6-4c19-be19-2ea661f83856.roa (raw, json)
Hash identifier:          s4VzmS6f527/3BOMpdd231My5NTLE/rOhzjR+2XVlp8=
Subject key identifier:   2F:2B:74:21:A0:E9:C1:8E:5A:70:FB:C2:D4:91:35:19:19:8A:8A:94
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7A24308405695A0FABB372F607B9853215B025BE
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/76dc8738-19b6-4c19-be19-2ea661f83856.roa
Signing time:             Fri 21 Apr 2023 00:00:00 +0000
ROA not before:           Fri 21 Apr 2023 00:00:00 +0000
ROA not after:            Mon 24 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:24:30:84:05:69:5a:0f:ab:b3:72:f6:07:b9:85:32:15:b0:25:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 21 00:00:00 2023 GMT
            Not After : Apr 24 23:59:59 2023 GMT
        Subject: serialNumber=bd4e1c1d653b4e36819071b41102d2736c68067a431d60679ef65645b20f7808, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:52:20:f0:61:fe:6a:05:f7:83:2f:14:9d:14:
                    fe:62:e6:2d:67:44:bd:57:84:64:cb:2b:56:5a:7a:
                    63:d9:a2:da:a6:d1:9b:d9:f4:fb:26:5d:2b:dc:16:
                    4a:1b:c6:12:00:0f:f2:31:ba:1b:3c:92:3f:60:b9:
                    ce:2e:5b:e4:04:ad:1d:76:8d:98:7b:b8:cc:0e:98:
                    d6:e8:8e:49:41:4f:3b:17:d7:2c:5f:48:e5:0b:9c:
                    76:d0:b8:29:87:c0:61:48:fe:9a:41:c0:41:df:ab:
                    06:c1:bf:5e:f2:13:1d:ff:db:b2:f7:ac:bf:39:69:
                    14:aa:02:33:0f:a6:f5:38:ee:42:a6:fc:63:91:4a:
                    c1:b5:4e:cd:b6:2f:a8:2a:9b:b3:c8:f4:7d:2a:38:
                    78:84:3f:48:54:0e:f8:20:bf:73:59:45:c9:05:10:
                    71:7d:55:ad:fb:9f:78:b1:87:7e:2b:33:fc:cd:5c:
                    00:f3:07:0c:65:61:f1:83:fc:4c:ff:1d:ba:5e:c7:
                    cf:69:58:0e:3d:cf:8e:11:93:f4:2c:54:ee:69:8c:
                    09:70:b8:8d:41:dd:90:a5:33:8f:62:76:03:ab:45:
                    7f:6f:dc:74:a4:6d:cc:f7:5c:5c:ec:76:bb:63:6a:
                    97:34:3c:a2:8c:80:3b:67:91:3d:59:08:cc:0f:ca:
                    28:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2B:74:21:A0:E9:C1:8E:5A:70:FB:C2:D4:91:35:19:19:8A:8A:94
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/76dc8738-19b6-4c19-be19-2ea661f83856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:37:34:39:5f:67:b7:23:fc:27:83:c7:ea:8c:6a:bd:2b:18:
         e9:7d:fa:d9:c3:4d:32:5e:a4:64:10:c1:f6:84:58:08:5d:56:
         cd:2d:5e:b3:29:3b:7f:25:36:37:6e:19:ed:49:88:22:63:fd:
         cc:3e:d9:74:9b:34:4d:a2:05:5b:6a:89:a8:49:c8:15:7f:20:
         aa:8d:b1:04:1f:42:12:36:c8:1a:97:58:24:96:67:9b:77:bb:
         66:2e:aa:d3:d9:e7:13:3f:79:16:d6:37:f9:a4:a8:82:ab:b6:
         f8:41:6a:d8:32:a6:c1:6d:22:10:0a:89:dd:17:8d:16:a5:87:
         21:2c:a3:a5:70:67:bd:34:49:ef:63:22:49:c1:de:74:64:bd:
         ad:fb:26:e2:36:34:57:a7:06:a6:6f:9b:78:5d:31:11:97:54:
         25:ef:92:93:93:28:2f:b7:3a:87:e4:fc:b0:a9:0e:d3:0a:a5:
         a5:39:83:79:d4:ee:38:7e:9f:31:e2:b0:45:30:11:80:97:c0:
         aa:fd:bd:a0:ae:0c:53:c6:d4:23:a9:6d:d1:60:29:98:f9:5d:
         5c:7e:ea:97:40:13:82:b4:60:f9:be:7f:a9:7e:b6:76:79:c6:
         95:49:e1:14:8e:cd:97:47:a0:70:1a:b6:cc:db:8b:16:85:aa:
         41:85:25:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----