Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c5a76777-d3e4-4067-8129-d71adf17ee34.roa
File:                     c5a76777-d3e4-4067-8129-d71adf17ee34.roa (raw, json)
Hash identifier:          ZnGXydekaW++JdwAzs4dCz1yErWuDpGk/VrUEHKBZLY=
Subject key identifier:   4E:77:76:AA:A5:E2:91:56:76:6A:87:8C:C0:91:2B:CD:6D:54:BD:A1
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2D57845B747C04534856E85F5F05335862226EFA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c5a76777-d3e4-4067-8129-d71adf17ee34.roa
Signing time:             Sun 19 Feb 2023 00:00:00 +0000
ROA not before:           Sun 19 Feb 2023 00:00:00 +0000
ROA not after:            Wed 22 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:57:84:5b:74:7c:04:53:48:56:e8:5f:5f:05:33:58:62:22:6e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 19 00:00:00 2023 GMT
            Not After : Feb 22 23:59:59 2023 GMT
        Subject: serialNumber=c84fefea85384221ec0e234eb7bdb48f4e0227149bd4093b1e3c370e04c280d8, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1c:c2:7b:80:71:58:f4:13:78:37:5e:98:aa:
                    13:29:ff:2c:26:b7:81:cd:c5:b2:59:cd:2f:00:4d:
                    c6:9b:43:4a:1b:cc:27:75:ab:36:9b:af:a5:7a:15:
                    40:18:af:f0:f4:f9:e1:19:b5:dd:67:6c:8d:11:ce:
                    ea:42:98:14:8e:af:7b:4b:e0:3b:a5:30:cb:42:f4:
                    77:07:89:31:ca:59:10:a3:47:eb:78:d3:8f:8c:e4:
                    27:f0:7e:8c:1d:6a:c4:e4:43:d2:59:ca:ca:c6:0c:
                    d0:fa:47:0f:c2:9b:53:b6:a1:8d:cc:db:15:ec:1c:
                    16:14:76:de:a4:db:fc:b1:3a:35:50:6c:0e:98:ff:
                    b2:09:63:5e:94:d0:f7:36:3b:ff:45:93:e2:79:96:
                    fa:93:cd:67:fc:4b:88:19:06:2f:e0:9e:75:db:2f:
                    66:90:30:55:8d:0b:1d:34:80:c9:f8:c1:88:78:40:
                    47:82:7a:b5:5f:f2:c9:66:f9:61:e7:41:2f:5f:79:
                    45:a3:6f:79:28:94:a7:18:d6:c8:33:98:a0:e2:a8:
                    5f:93:4e:c5:b2:76:0e:b9:76:c6:72:53:81:77:07:
                    39:42:65:da:fa:e9:dd:e3:4a:b1:15:19:46:60:7a:
                    12:5c:fb:e7:01:80:b3:d2:e1:26:bd:c5:c8:12:12:
                    33:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:77:76:AA:A5:E2:91:56:76:6A:87:8C:C0:91:2B:CD:6D:54:BD:A1
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c5a76777-d3e4-4067-8129-d71adf17ee34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:4c:60:96:2c:a8:12:65:cb:d4:ee:ef:fb:b2:41:9f:72:31:
         2d:8a:13:89:ec:d3:b9:44:86:06:a1:bc:73:4a:d2:49:f5:80:
         b4:93:30:50:b9:10:e1:60:aa:b8:17:dc:9e:7e:e3:c3:16:b0:
         37:5a:fa:5e:8f:e5:59:de:de:15:e1:d2:ba:a5:29:b0:7b:bd:
         04:55:07:17:9d:f1:d5:40:d3:78:fb:9b:22:45:6e:e6:13:1b:
         64:a8:1c:fb:63:7b:e8:b4:b9:c6:64:1b:12:26:af:32:fb:83:
         ac:73:eb:b2:29:11:bd:d8:e6:5d:54:b1:2a:5e:1c:b9:0c:62:
         33:e5:09:7b:bf:c3:cb:c9:1e:e7:fe:af:3a:e5:87:09:b6:9a:
         5e:96:dd:fb:f4:1b:ab:02:1e:18:07:db:45:6e:60:29:3f:b0:
         dd:f9:22:90:bc:20:91:db:11:59:ee:3f:f2:fd:15:0d:f3:c4:
         81:91:b3:5c:32:a6:79:c6:ec:9f:38:be:a9:bb:1c:e7:83:57:
         b8:30:0f:0b:87:f3:2d:ae:bd:20:8f:7e:ab:b6:41:d0:f3:d2:
         d2:1b:08:b1:12:17:90:54:b0:02:04:ce:ed:6b:4b:c9:12:d5:
         7f:ec:e4:84:c6:e2:81:10:f4:b4:b8:9c:23:6a:2c:2e:73:36:
         2e:d4:a3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----