Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0d4f0b19-876a-4f4a-bacd-8e54a56a11ac.roa
File:                     0d4f0b19-876a-4f4a-bacd-8e54a56a11ac.roa (raw, json)
Hash identifier:          ebuxAZMlVuG+m/jTmzkheqIRn5ECZonQznjdfJ7EZDc=
Subject key identifier:   8B:7C:9A:AB:DB:FA:46:39:28:5C:9F:D9:55:5F:A7:E8:40:84:D1:B8
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2C46F370FFC50B589669A9A36F366F445AD9B365
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0d4f0b19-876a-4f4a-bacd-8e54a56a11ac.roa
Signing time:             Sun 31 Jul 2022 00:00:00 +0000
ROA not before:           Sun 31 Jul 2022 00:00:00 +0000
ROA not after:            Wed 03 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:46:f3:70:ff:c5:0b:58:96:69:a9:a3:6f:36:6f:44:5a:d9:b3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 31 00:00:00 2022 GMT
            Not After : Aug  3 23:59:59 2022 GMT
        Subject: serialNumber=14eb3dc04f076228d649d0f861a1f59e93df355f78409563a0778f38bc93a461, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b0:b1:86:9e:17:72:eb:7d:6d:d3:68:e9:84:
                    79:29:88:ed:52:05:62:74:c9:4b:c1:21:28:37:6d:
                    ad:07:e1:e4:61:35:38:bf:e8:58:c3:0f:da:c8:ea:
                    54:36:d1:ae:fc:a4:ba:08:78:ae:0e:1d:8c:09:7e:
                    9c:19:61:86:11:9d:34:da:ac:84:20:3a:8a:75:26:
                    75:f1:5f:00:3a:92:46:6f:88:5c:f5:0e:69:06:8d:
                    87:7c:8b:8f:9c:08:63:ff:7d:44:84:90:4f:a6:45:
                    a7:d3:42:aa:f6:8e:7a:b9:94:ba:8c:36:e8:42:9f:
                    27:48:02:14:e9:d0:2a:11:f8:2d:64:8d:73:1c:38:
                    6a:f3:e4:79:46:fa:a9:84:ed:a4:5e:6e:dd:c4:cf:
                    0c:13:7f:bc:5f:32:a8:61:3e:fd:bb:69:1a:a0:6a:
                    64:8b:a7:db:f6:c5:78:e1:aa:ea:43:82:fb:3f:42:
                    9d:0f:ff:70:e9:c9:c8:dd:7d:d5:49:8d:84:83:ac:
                    02:47:88:87:84:07:55:5b:3d:3a:6e:fd:52:f3:f3:
                    11:1a:af:24:fa:21:41:a0:66:fe:99:06:83:11:33:
                    ec:21:95:58:86:9b:0d:e5:fa:69:86:60:84:1c:9b:
                    56:8f:3b:cf:f7:2f:df:c7:83:35:99:69:8e:34:e5:
                    96:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7C:9A:AB:DB:FA:46:39:28:5C:9F:D9:55:5F:A7:E8:40:84:D1:B8
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0d4f0b19-876a-4f4a-bacd-8e54a56a11ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:ca:9f:5d:98:75:e5:ec:4f:df:db:cb:21:39:9c:4f:c3:db:
         47:3e:0d:09:3b:40:c8:44:9f:db:d1:2b:e8:ad:f9:b4:73:6c:
         52:f1:09:fb:62:91:44:a9:56:c3:ec:55:60:f8:cc:31:35:66:
         ae:f8:c8:39:a0:db:e9:1e:de:06:b5:3f:6b:87:b7:00:d8:9d:
         24:64:b6:3d:10:a4:02:63:19:ef:02:b6:ab:35:bd:1f:2c:58:
         f8:0a:8f:a4:45:66:7a:11:d2:13:8f:18:80:84:76:1d:70:b1:
         bb:09:ae:52:7e:dc:8e:aa:e7:f0:c4:c6:99:c2:0a:c9:38:c6:
         25:55:9d:1b:df:a2:a2:73:04:17:72:8e:d4:f2:30:7e:b6:35:
         af:82:bd:f0:63:a5:24:1e:a9:0a:bf:46:92:db:43:d0:5d:71:
         8d:82:04:af:57:22:5f:9c:32:e9:f1:cd:08:16:2b:82:3b:72:
         c0:2e:15:a1:ca:a2:52:4e:15:4b:26:c8:c1:a5:ae:d9:cd:d5:
         20:24:1c:89:da:88:31:c3:c9:e4:0b:39:fc:7c:6f:8a:74:4a:
         38:31:e1:da:8e:a6:56:e7:5d:0c:fe:05:1e:69:b0:d5:28:7a:
         5d:ff:90:aa:bf:d5:91:1d:7b:0f:7d:d5:6f:01:a7:cd:29:04:
         a3:d7:34:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----