Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/130624d1-86ba-41e4-8560-3cfe418ea419.roa
File:                     130624d1-86ba-41e4-8560-3cfe418ea419.roa (raw, json)
Hash identifier:          fbD9xqYUOfcSrFTbo2GNQCRJk4oC9Sp5fEi0LmOnWRU=
Subject key identifier:   9C:34:EF:91:79:2A:34:FF:7D:94:73:2D:CD:E2:66:B7:E6:F7:9C:17
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4615E087FC11B3F6179BD744E6432A1773FDF2E5
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/130624d1-86ba-41e4-8560-3cfe418ea419.roa
Signing time:             Fri 24 Jun 2022 00:00:00 +0000
ROA not before:           Fri 24 Jun 2022 00:00:00 +0000
ROA not after:            Mon 27 Jun 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:15:e0:87:fc:11:b3:f6:17:9b:d7:44:e6:43:2a:17:73:fd:f2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 24 00:00:00 2022 GMT
            Not After : Jun 27 23:59:59 2022 GMT
        Subject: serialNumber=333095716b88cb1ac64ba20e672342cb773c9d12d7b2dc57e337085e6944febd, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a2:71:70:a3:f2:a2:ae:fa:e4:58:b6:a3:5e:
                    ea:4d:52:7c:b1:69:eb:3f:5c:87:09:64:f1:86:0f:
                    54:56:60:ea:14:ae:b4:d6:c2:c4:c5:2f:01:42:d8:
                    cc:2e:95:c7:d7:79:3e:7f:c2:c7:f0:27:3e:17:92:
                    8d:df:cf:e7:b6:68:fb:ff:ab:04:6e:4e:ba:c2:e4:
                    0f:f5:e4:1b:ec:51:bd:9a:73:a2:6d:8c:77:85:33:
                    01:da:7f:3d:7f:2f:63:3c:6a:aa:8c:f1:7e:6e:1e:
                    2e:d1:bb:31:f7:b8:7a:b9:9d:14:b8:91:52:38:35:
                    c1:c3:03:b7:fb:8e:27:c6:be:e2:87:d0:35:5e:9c:
                    9c:f7:91:82:9c:ad:31:22:dd:9d:f9:9e:ba:0b:2b:
                    d9:8d:79:df:ba:9e:0e:f7:13:b7:83:e6:77:de:3d:
                    66:1f:19:02:36:bd:8a:ce:90:74:4f:03:be:02:25:
                    8b:90:13:6a:47:6e:54:69:81:96:b0:ab:f7:1a:cb:
                    bb:9a:3c:59:33:44:a1:67:c7:35:a3:8c:18:61:99:
                    2e:3c:5d:aa:6d:d2:0d:83:35:af:8b:29:0b:86:30:
                    1d:24:f5:83:32:9e:07:75:10:f5:72:e0:7b:cf:78:
                    6d:1a:72:bd:62:6c:24:76:31:51:f6:e0:1a:e9:85:
                    36:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:34:EF:91:79:2A:34:FF:7D:94:73:2D:CD:E2:66:B7:E6:F7:9C:17
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/130624d1-86ba-41e4-8560-3cfe418ea419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:56:cb:ae:f8:ea:19:6f:a0:f8:95:b0:b6:86:6d:a5:bd:8b:
         40:ed:f6:f6:bd:e2:46:63:47:01:ab:e0:80:f4:58:0c:c6:2d:
         ee:5b:77:e1:a1:18:52:c3:41:a8:7a:7c:92:9e:9f:bc:5f:d4:
         99:f5:3e:ab:aa:0c:90:bf:9f:2a:d8:ec:83:75:62:46:83:b3:
         ba:8c:7b:be:04:d7:73:59:c6:db:3e:e0:1a:3e:8e:93:29:0b:
         a5:51:22:2b:90:d4:a7:88:ae:1c:ba:2a:53:68:37:5a:63:fc:
         8b:41:14:fb:a7:1a:18:58:b4:4f:2e:e8:07:6b:3e:a0:3f:aa:
         5b:1e:7a:4c:ee:c8:fa:c3:bd:f2:df:91:fc:33:b8:3a:b9:59:
         21:32:f8:5b:b5:21:14:fc:0d:77:9f:63:15:fe:cf:53:c4:03:
         3c:ef:d5:b1:0a:dd:1d:99:06:95:b0:17:a0:77:cb:0e:c7:7f:
         af:67:b7:70:5a:b3:71:b6:35:99:58:28:97:46:5c:21:b0:14:
         2e:92:b9:7c:26:15:1e:45:b2:ee:60:83:8b:4e:95:65:c9:4f:
         b7:b9:1f:74:87:32:91:c9:db:2d:b6:27:c6:a4:97:aa:4a:d1:
         ca:2d:03:86:44:db:62:7e:02:0a:f5:76:0a:58:79:f3:8b:3b:
         7b:82:06:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----