Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f74c3204-76c4-4569-8bae-6a036134cab4.roa
File:                     f74c3204-76c4-4569-8bae-6a036134cab4.roa (raw, json)
Hash identifier:          TqyQu68KuWTuxL2+oRGE/UCknw/dw2fJmxEYNsM4rJg=
Subject key identifier:   E3:A4:8F:E0:DC:BA:77:88:37:B6:10:02:BD:14:12:B3:13:7A:7B:8C
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       79EEB658ADD332FB9A5DE77ADF812DD037750124
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f74c3204-76c4-4569-8bae-6a036134cab4.roa
Signing time:             Sat 11 Feb 2023 00:00:00 +0000
ROA not before:           Sat 11 Feb 2023 00:00:00 +0000
ROA not after:            Tue 14 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ee:b6:58:ad:d3:32:fb:9a:5d:e7:7a:df:81:2d:d0:37:75:01:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 11 00:00:00 2023 GMT
            Not After : Feb 14 23:59:59 2023 GMT
        Subject: serialNumber=cc8049c6000412b844fbf9764eb7935341766a616958b881a9214416615ce95d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:86:e9:3b:78:83:02:2a:fb:5b:1d:83:c0:
                    b7:b7:2b:4b:e7:01:7d:73:c9:b7:32:5f:5b:5d:9a:
                    66:9b:fa:8b:ed:5d:76:e6:3c:2c:66:e7:47:f4:88:
                    8a:17:18:36:bb:b9:02:f9:61:6d:bc:94:38:ca:b2:
                    09:55:b7:a9:bc:dd:67:b2:aa:ed:3e:f8:43:b6:e8:
                    02:12:39:88:d6:3d:d9:00:08:a0:9c:d7:1a:d4:05:
                    2e:06:30:73:61:7a:52:36:a6:60:11:bc:dd:15:d9:
                    89:e0:66:ce:64:e8:c5:09:38:d9:3f:74:01:c2:dc:
                    99:0e:e2:38:8a:c7:0c:c7:ae:b5:3b:6a:07:f1:c9:
                    f0:3a:ea:d1:52:1e:ad:c1:ed:f9:c6:72:8a:c5:3a:
                    da:0f:61:91:24:a8:d8:ba:f9:39:1a:ff:40:de:95:
                    f7:b3:60:06:ba:ee:f2:21:1c:f2:a5:1d:ec:cb:d7:
                    1e:84:6d:66:d8:a5:24:83:b5:c3:74:30:76:44:ac:
                    94:98:0b:04:c1:18:60:a8:73:2e:60:55:12:44:6c:
                    84:ba:3f:62:bf:0e:00:08:b4:33:7f:d7:9d:9e:99:
                    18:14:16:07:f5:77:c4:84:41:31:e1:eb:ba:c5:74:
                    d0:b9:a0:bd:ec:3a:b3:ae:5f:e0:a5:37:ae:0a:38:
                    93:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A4:8F:E0:DC:BA:77:88:37:B6:10:02:BD:14:12:B3:13:7A:7B:8C
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f74c3204-76c4-4569-8bae-6a036134cab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:86:63:b9:a0:b2:64:ae:3d:c1:0e:09:3c:a9:c5:68:56:45:
         47:7a:44:ee:1d:a3:a4:e6:b4:f2:6d:5b:34:07:1f:8b:16:c0:
         ec:02:2a:78:c9:bb:84:2b:c3:53:5a:b6:f0:2d:1c:a9:77:59:
         41:b2:35:4f:9f:ac:c3:f7:84:0c:62:cf:a9:a1:f8:3e:bb:b7:
         1a:4a:8f:40:c6:29:a4:bc:96:9d:36:5c:b9:23:25:90:e2:97:
         a8:1b:61:20:f8:09:2b:d1:06:d3:d1:7e:b5:43:50:33:9e:32:
         b2:17:06:ea:eb:1c:78:00:c7:fb:2e:1b:5e:33:36:0e:35:eb:
         a3:ab:ec:0e:1e:0f:51:9a:7a:b0:b0:4e:b3:20:30:d8:7d:23:
         35:85:5b:07:55:50:5c:13:bc:ba:ab:13:76:cd:a6:f9:34:e3:
         72:d9:17:85:70:06:d2:f3:cd:fc:b2:9b:a0:b0:60:04:20:80:
         c4:cb:4f:7c:99:11:df:6c:5d:b3:5e:08:02:38:57:60:ce:b2:
         db:ab:58:4c:ab:90:55:9a:89:c0:5c:d1:fb:44:de:ea:a6:25:
         18:8b:f3:30:98:aa:1d:ff:65:7b:e7:b3:28:22:79:8d:7a:d9:
         b6:8c:c4:bd:46:8b:63:ff:25:09:9d:fa:c5:c4:4e:3c:e1:98:
         b6:bb:41:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----