Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e63b221d-9f1f-441b-a38e-6b0730da1179.roa
File:                     e63b221d-9f1f-441b-a38e-6b0730da1179.roa (raw, json)
Hash identifier:          g/O6SvsIlV1XeI2id1Bn92IjxqKu717EfPefV5Yyk08=
Subject key identifier:   94:97:22:67:86:FC:3F:5E:FE:A9:82:05:2A:7D:18:56:97:DA:6D:E5
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       209CE5E14E7C93680ECC20901E8F0316838E4C16
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e63b221d-9f1f-441b-a38e-6b0730da1179.roa
Signing time:             Mon 10 Apr 2023 00:00:00 +0000
ROA not before:           Mon 10 Apr 2023 00:00:00 +0000
ROA not after:            Thu 13 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9c:e5:e1:4e:7c:93:68:0e:cc:20:90:1e:8f:03:16:83:8e:4c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 10 00:00:00 2023 GMT
            Not After : Apr 13 23:59:59 2023 GMT
        Subject: serialNumber=f72860eb238286eebf83eb745fabbff03fe315d744b4def0323b392de78fb3a0, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:c9:c1:75:9e:da:20:a3:88:cb:12:8b:68:
                    bf:b3:b0:bf:86:00:ee:fb:02:53:25:b4:60:a2:5b:
                    6f:3e:7f:35:dc:6f:f9:66:45:b6:af:aa:11:29:c3:
                    1b:97:e7:3f:fa:28:cc:0c:38:5f:da:d4:0e:ae:ec:
                    4f:97:fa:f1:08:db:e5:1d:08:0e:89:98:e6:92:f1:
                    57:57:09:39:b4:41:fa:a7:2f:f0:70:59:d2:8a:cc:
                    70:9d:f7:d7:bb:65:7b:ce:af:5b:f3:a4:1d:98:c3:
                    86:d6:b7:cb:42:6d:d3:d5:67:f2:71:81:79:93:0c:
                    d9:ec:41:e9:67:22:7d:b2:80:4b:3b:33:5c:c4:ce:
                    21:9d:fe:26:01:b7:40:14:73:8a:17:ca:48:4a:9b:
                    31:80:45:98:c0:57:54:31:07:a6:a7:19:d8:51:d4:
                    c2:62:6e:04:34:8e:d1:4a:4a:c4:3a:cc:27:9e:ad:
                    19:3f:0c:c2:4d:ce:c0:a7:02:84:f8:d4:99:e9:c7:
                    e2:de:4c:5d:e3:08:70:a3:e3:f4:a7:46:e4:58:6f:
                    42:50:fa:ee:12:45:a9:1f:88:52:e8:f9:ae:d4:72:
                    c4:9a:10:81:cd:4f:91:14:4f:8a:52:70:c5:91:f4:
                    62:98:77:d6:e7:b9:3b:9e:7d:bd:6e:88:ba:6b:b0:
                    f8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:97:22:67:86:FC:3F:5E:FE:A9:82:05:2A:7D:18:56:97:DA:6D:E5
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e63b221d-9f1f-441b-a38e-6b0730da1179.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:b1:2d:e0:a7:74:91:c4:f6:c5:6d:33:d0:8e:11:ad:d1:f0:
         2a:e4:c7:a2:dc:ae:98:7f:74:83:41:f0:5c:fe:26:ab:6d:9e:
         4c:d8:ca:82:58:e1:40:c8:10:2a:7f:a4:db:d5:4f:34:7e:df:
         1a:89:34:59:d9:48:f7:3d:63:af:7a:7e:1e:6a:cf:4c:5d:da:
         1e:cd:e4:2b:cc:15:88:bc:fa:9a:cb:d0:22:b3:17:88:c8:8f:
         a2:ab:a4:f7:46:c2:42:7c:b3:14:a5:88:a2:0b:90:7c:50:ae:
         59:7c:be:94:f5:43:f4:3b:72:a8:8f:c1:e2:4e:81:e6:a7:c4:
         de:fb:5d:61:06:90:f9:29:e1:20:42:cf:34:ea:5f:77:26:2e:
         20:89:39:2f:4b:82:37:b4:b0:10:0b:6a:25:54:26:df:7e:36:
         6f:4c:9a:7d:50:fb:22:c4:2e:a3:c3:8d:37:d1:5d:29:94:18:
         71:17:eb:c8:46:0b:87:19:6b:e1:b3:96:59:9d:72:10:ec:9e:
         7c:85:dd:51:10:48:45:a7:5c:cc:fd:a1:fe:34:52:b3:9f:7b:
         60:93:6c:90:f2:74:3b:5f:0c:36:75:7d:5d:d3:70:8b:0e:1f:
         66:53:da:c9:2f:69:bb:ad:a4:e8:22:04:b3:dc:e8:9a:6c:8c:
         c7:cc:1c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----