Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0d6a5afe-1843-4496-8d0a-35992aa83902.roa
File:                     0d6a5afe-1843-4496-8d0a-35992aa83902.roa (raw, json)
Hash identifier:          shj4iPZ47wkMn9ROa+usQilyPkiFse9dHcuYcY+S9FQ=
Subject key identifier:   22:C1:C4:97:9A:41:72:F6:D9:6D:0A:1A:0C:85:7A:F8:90:C7:6E:79
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1BE0062FFAA3D8C4FB3A52A1EB65923729DE516A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0d6a5afe-1843-4496-8d0a-35992aa83902.roa
Signing time:             Tue 13 Dec 2022 00:00:00 +0000
ROA not before:           Tue 13 Dec 2022 00:00:00 +0000
ROA not after:            Fri 16 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e0:06:2f:fa:a3:d8:c4:fb:3a:52:a1:eb:65:92:37:29:de:51:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 13 00:00:00 2022 GMT
            Not After : Dec 16 23:59:59 2022 GMT
        Subject: serialNumber=e33bbd6255282f96ea44e0b4848670eff188b6cc2da5c005bd80edba40dc8a79, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:38:dc:85:14:6b:34:1e:70:d6:a5:37:8c:8a:
                    c8:6a:48:10:9c:50:ab:0f:9a:ed:6c:d9:5d:1b:e1:
                    44:fe:53:9b:d7:9e:a7:79:85:48:cb:bb:b2:8e:dc:
                    71:90:88:d7:8e:cc:ed:f7:cf:f2:e8:16:8a:83:20:
                    4b:62:ef:09:e2:19:6e:58:1e:2b:c6:15:d2:0d:91:
                    03:60:d7:83:3d:81:9d:03:fa:30:90:e7:50:af:9a:
                    bf:15:a7:54:38:7a:cf:f3:2d:c0:5c:fe:2e:4f:b5:
                    ae:95:73:eb:f5:fd:ab:ef:dc:04:8a:c4:72:9f:90:
                    5c:b2:54:f5:85:c4:6f:9d:ba:69:b8:6b:de:f4:f2:
                    af:32:fb:ab:e4:6b:9a:d9:ee:23:57:35:31:b0:55:
                    aa:9e:81:aa:80:be:15:f9:2c:31:ff:e7:f2:a8:d8:
                    e9:b1:29:85:25:c6:c9:cd:c8:d2:65:77:ea:18:45:
                    f7:38:62:b5:0c:ed:71:68:0e:aa:d5:ff:ff:2d:39:
                    99:ad:d0:79:ae:9f:e8:51:63:79:9f:43:32:c6:45:
                    35:2b:1e:cb:76:9e:e4:24:60:ee:ed:d7:de:d1:85:
                    d6:48:38:8c:d4:d5:ee:a2:e6:75:73:c9:42:6e:f3:
                    68:e6:55:6b:e6:91:08:3e:73:f9:f8:c3:dd:c0:be:
                    1b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C1:C4:97:9A:41:72:F6:D9:6D:0A:1A:0C:85:7A:F8:90:C7:6E:79
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0d6a5afe-1843-4496-8d0a-35992aa83902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:26:14:e8:b7:de:1a:0a:41:76:ce:34:fb:c4:53:68:77:01:
         6a:9b:20:94:5f:6d:3f:46:00:65:0e:d6:38:50:ff:c4:e1:7a:
         5f:ee:d9:22:36:f3:23:40:b6:99:46:ac:62:e2:74:95:2e:c1:
         be:c2:6c:b5:c6:96:9c:68:4b:4a:59:95:cf:5e:cc:6a:50:4e:
         cd:6e:ce:db:bd:22:7a:70:7e:73:6d:2c:a0:12:8a:29:fe:a6:
         28:32:0c:a9:9d:ae:0f:25:5c:1b:5f:c8:98:25:64:80:df:4e:
         6a:de:a8:a1:47:1b:20:86:1b:59:4f:e8:01:f4:3c:99:4a:13:
         e9:78:ee:ed:32:26:dd:11:8d:06:5a:55:da:af:14:77:29:fa:
         b6:62:ea:75:11:92:7c:17:0a:74:80:9a:e3:d2:74:40:56:e5:
         69:69:a9:60:ab:d4:73:48:e4:0b:ff:ac:0a:f3:5e:cb:1f:0a:
         61:df:c5:e9:68:37:be:1a:49:73:53:e5:1b:8c:fc:9f:eb:db:
         59:63:f9:7d:4f:e9:cb:22:c7:3e:51:44:db:18:b2:69:45:5b:
         ae:15:0d:7a:13:84:05:3a:41:75:9f:ef:c2:94:b6:9a:92:dd:
         83:7e:de:c2:6f:79:60:fd:92:f6:e8:b2:3c:3e:11:47:2b:27:
         0e:3f:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----