Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/779074d0-939b-4b35-a8c0-a109acbdc475.roa
File:                     779074d0-939b-4b35-a8c0-a109acbdc475.roa (raw, json)
Hash identifier:          G1ShgKqkuRXZx5ArqestaBU1Zlcdmjr8+Fj5qS1CFyQ=
Subject key identifier:   6C:DC:B2:B6:0F:29:CA:34:7D:BB:C0:40:2F:93:44:48:08:BB:6C:45
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       43B384A7694F9B939EA6169E6916D7989ECD8B81
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/779074d0-939b-4b35-a8c0-a109acbdc475.roa
Signing time:             Thu 20 Apr 2023 00:00:00 +0000
ROA not before:           Thu 20 Apr 2023 00:00:00 +0000
ROA not after:            Sun 23 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b3:84:a7:69:4f:9b:93:9e:a6:16:9e:69:16:d7:98:9e:cd:8b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 20 00:00:00 2023 GMT
            Not After : Apr 23 23:59:59 2023 GMT
        Subject: serialNumber=bf81889c2662f1d3b1c3e9e566ca5ab75ab06115256761e75d99f2c5ead43d9b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a1:18:ac:21:b5:0b:34:33:f1:e1:d7:9c:e3:
                    01:53:62:99:12:61:21:a5:bd:6f:44:66:00:e6:60:
                    cb:a9:66:55:e8:ac:34:cb:60:7f:ef:da:32:ae:5d:
                    58:87:c3:67:9a:da:bc:5e:51:f4:57:36:d0:cc:50:
                    65:ad:eb:38:25:ff:26:54:1a:6f:22:6c:f6:c2:dc:
                    4f:57:92:02:66:ec:39:5f:0c:56:0e:01:3c:ac:50:
                    26:58:b2:f6:64:ff:19:7e:57:1d:17:8d:ad:e0:83:
                    dd:a3:df:92:f9:a3:a4:6e:a5:14:a0:e1:2f:0a:f1:
                    6e:e4:51:83:18:06:ba:19:31:f1:32:66:4e:12:11:
                    61:b2:8d:a2:88:a3:42:d3:81:93:99:31:89:5c:75:
                    86:1f:12:0a:d7:f2:6b:64:ac:7e:d4:81:9c:b2:d4:
                    e7:e8:c5:7a:66:ce:fd:c0:6e:00:41:0c:1e:d6:2f:
                    4c:0a:58:92:c3:41:42:60:e3:2d:ff:6b:67:29:46:
                    09:ed:1f:76:a1:94:89:15:75:94:88:c0:e7:df:a8:
                    a2:f4:29:92:42:a8:28:8e:0d:76:04:a6:03:8d:4d:
                    b7:53:94:7d:38:d4:02:a5:58:a4:72:02:71:10:8a:
                    ac:b7:f3:49:64:7d:c4:07:f7:a7:05:2c:cf:52:13:
                    95:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DC:B2:B6:0F:29:CA:34:7D:BB:C0:40:2F:93:44:48:08:BB:6C:45
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/779074d0-939b-4b35-a8c0-a109acbdc475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:9f:a7:ca:97:d8:c4:57:57:af:18:a1:b7:6e:ad:87:26:5f:
         ad:d0:1e:1e:60:02:ce:3f:20:1d:d4:3a:24:87:9b:1b:65:83:
         dc:24:f8:6c:7a:4e:0c:55:fd:46:2e:57:a2:55:18:3d:00:06:
         c0:40:ce:94:2a:f0:03:60:90:89:6c:5d:c0:ac:61:35:6d:f8:
         5d:88:b2:68:49:ab:be:29:41:2f:6c:1f:ba:97:89:6a:0e:6b:
         e4:5a:77:60:2c:fe:fc:09:65:af:3f:3d:02:8d:af:4c:0f:59:
         8b:10:e8:3f:63:64:6c:d0:3c:a6:8a:ec:4d:7f:d3:bb:60:03:
         bc:58:fa:c8:59:45:ff:83:37:54:7f:83:0e:1e:7a:01:9f:de:
         b9:49:9f:5f:fe:6c:d1:2b:44:33:84:85:fd:03:c5:0c:d2:21:
         33:ce:61:e7:17:4c:3b:69:ed:59:5f:fd:d0:35:6c:90:b4:12:
         32:e3:d8:07:48:8c:0d:e2:a2:ac:62:02:99:92:0f:28:24:af:
         82:eb:54:e4:71:da:4c:be:02:f1:dc:dd:04:bd:34:75:7a:8a:
         67:91:85:02:4f:8e:b5:23:74:3e:61:95:f4:2d:90:aa:2d:ee:
         06:7d:4f:08:44:c7:6f:da:3d:3e:3c:a2:a6:1e:b3:f1:ce:56:
         5b:26:95:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----