Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/dd645991-c374-4120-96bb-c73236951e55.roa
File:                     dd645991-c374-4120-96bb-c73236951e55.roa (raw, json)
Hash identifier:          n5XRvFvghYbk6ExfG30MDSgw8t0s5oNagU17eigYZCs=
Subject key identifier:   2C:1C:57:A9:EF:C1:DA:D9:57:E2:3E:5A:3A:C3:E3:66:F1:A4:19:75
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7FF136BC3CC72C867BF914706D4507595A3A22CE
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/dd645991-c374-4120-96bb-c73236951e55.roa
Signing time:             Mon 17 Apr 2023 00:00:00 +0000
ROA not before:           Mon 17 Apr 2023 00:00:00 +0000
ROA not after:            Thu 20 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f1:36:bc:3c:c7:2c:86:7b:f9:14:70:6d:45:07:59:5a:3a:22:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 17 00:00:00 2023 GMT
            Not After : Apr 20 23:59:59 2023 GMT
        Subject: serialNumber=598717c99180d9ae99f705221b6fb2f4063f989a9bda77520ca6cd96922706c6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:12:ca:5f:63:10:5f:80:cc:c4:00:34:4d:37:
                    f5:e6:00:19:d4:57:1a:21:5c:19:4a:2c:70:7b:79:
                    20:e3:fc:73:8e:bd:82:b2:49:16:4e:1b:92:bf:7b:
                    7e:41:c0:5d:a5:6b:84:42:17:90:cd:c1:a6:5a:f1:
                    c7:6a:ba:72:50:f5:c7:15:b2:34:3c:34:75:86:fe:
                    cc:67:10:c6:8e:4c:d6:11:bf:83:25:c7:d8:12:38:
                    c1:f3:48:ec:18:e1:e1:98:09:40:ea:38:e3:2c:bd:
                    82:dc:73:1f:55:08:7f:78:ac:ff:11:d5:2d:70:d2:
                    f1:55:85:ea:2d:6b:ed:6a:0c:0c:f9:3e:6b:d0:10:
                    ba:03:60:0e:66:ad:f4:d3:a9:09:46:bb:3c:f8:00:
                    80:c3:51:a8:bd:33:c6:01:b9:42:e8:ea:07:fc:bb:
                    1a:9d:df:cf:26:a4:cd:30:15:c0:07:33:e9:a9:d9:
                    5d:63:d6:ab:10:c5:2a:46:9c:96:b8:29:59:e7:a0:
                    2f:79:bc:66:2e:26:b3:b8:87:6a:76:49:93:c9:94:
                    d0:ec:37:ee:2a:a4:1e:4a:b8:a8:4a:6a:f1:04:b6:
                    7e:96:76:26:9e:3b:45:c0:a2:48:2a:30:b6:e6:7b:
                    df:ea:07:51:e2:5d:ef:36:a5:9c:83:57:08:c4:fb:
                    83:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1C:57:A9:EF:C1:DA:D9:57:E2:3E:5A:3A:C3:E3:66:F1:A4:19:75
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/dd645991-c374-4120-96bb-c73236951e55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:48:e5:ad:ef:60:e3:ab:ee:bc:11:41:ed:27:23:ed:06:f1:
         33:93:9d:eb:f0:ac:91:c0:25:55:0c:c9:6c:75:89:61:c3:6b:
         b2:d1:d9:3a:f3:31:62:4b:ea:c0:f4:fb:89:af:60:10:82:c3:
         66:e7:d5:c9:f0:7a:9d:a7:14:89:58:34:72:e1:c7:16:ea:fa:
         03:5a:4a:94:ef:a7:20:e2:f6:3d:f8:06:23:12:55:b7:10:04:
         d5:0a:9e:78:49:3e:38:ff:93:fa:d1:31:57:58:db:a3:45:23:
         29:cd:1f:01:70:b4:72:d9:8d:28:ef:2a:79:01:43:3f:9d:a1:
         70:31:f3:f4:da:d2:fe:fa:53:b5:03:bf:7d:3b:c0:78:4b:9f:
         71:78:ac:f9:01:b5:01:23:8c:ea:56:dc:3e:85:50:1a:d3:e1:
         88:6b:ee:a5:96:64:38:7a:8f:98:d6:72:dc:a5:50:a9:34:0c:
         78:d2:ca:21:af:ec:ed:ac:94:a5:69:a2:f4:0f:5f:5c:7a:36:
         84:a6:31:53:0a:fb:a9:ed:dc:cd:cd:43:35:c5:40:a0:6d:9e:
         69:4c:32:c6:ea:dd:bb:c9:2c:92:20:8c:57:75:5e:bf:42:6c:
         b3:ab:6b:00:d5:19:58:50:d7:b3:41:6a:72:cd:5b:e7:d6:05:
         42:97:a0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----