Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/176faac6-f157-43be-b663-6015422c0632.roa
File:                     176faac6-f157-43be-b663-6015422c0632.roa (raw, json)
Hash identifier:          PB7dA/P2HGyc5L07PpJiRqTQOSZSv/+3ySGxKAMIslg=
Subject key identifier:   9E:B4:21:8D:F4:6A:1C:0E:C5:53:D6:53:A3:9C:A0:B7:76:48:3C:1A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2BE903EA77DFB488049F6D096110F36E28A0DA56
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/176faac6-f157-43be-b663-6015422c0632.roa
Signing time:             Tue 13 Sep 2022 00:00:00 +0000
ROA not before:           Tue 13 Sep 2022 00:00:00 +0000
ROA not after:            Fri 16 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e9:03:ea:77:df:b4:88:04:9f:6d:09:61:10:f3:6e:28:a0:da:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Sep 13 00:00:00 2022 GMT
            Not After : Sep 16 23:59:59 2022 GMT
        Subject: serialNumber=51c19c2fa42d46808d98efeb45c6aeef07672982b08a446c14c0eeed25a97204, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:36:8d:1a:98:5b:48:b2:e1:0c:e4:f9:7d:
                    21:40:7e:7b:2a:c1:72:46:a0:32:66:fd:e7:35:8f:
                    23:ec:0d:56:d1:5b:c3:a8:a9:88:b1:c0:e0:de:4a:
                    f4:f3:74:80:15:c2:8e:8d:9a:46:0a:24:8e:de:81:
                    31:39:5c:d1:0b:37:89:ea:83:32:25:65:b3:90:67:
                    df:a9:4d:b0:25:9f:78:60:5a:29:b2:d1:4c:5b:87:
                    ef:fb:2a:34:20:a9:05:fb:b9:e0:d1:0b:86:ae:7c:
                    7b:ee:d5:65:14:7b:a2:81:66:25:c1:1d:82:73:1c:
                    32:5d:2b:4e:c8:c1:16:6a:be:b5:ad:7a:0b:2f:57:
                    6b:1a:c4:81:c7:aa:8e:11:0f:dd:eb:21:d7:d4:1d:
                    95:b8:35:c1:82:a8:ea:e6:ed:ec:88:4f:82:8a:7e:
                    b3:bd:da:ad:f8:8a:1d:62:ee:6c:6d:e2:ab:74:87:
                    f0:30:12:1f:91:03:25:37:12:87:b5:c8:5a:a1:7c:
                    81:e0:f3:18:00:1a:a9:f2:eb:d5:48:f9:68:88:32:
                    5e:86:2d:83:24:79:b0:a9:93:7f:46:82:32:ae:3c:
                    76:7b:9e:c6:bf:91:c5:46:5a:c7:72:7d:43:a8:5c:
                    1e:62:f8:07:7a:95:18:c9:cb:85:eb:d4:12:50:7d:
                    fd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B4:21:8D:F4:6A:1C:0E:C5:53:D6:53:A3:9C:A0:B7:76:48:3C:1A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/176faac6-f157-43be-b663-6015422c0632.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:46:98:4f:ed:4a:ad:02:3a:91:64:ad:ab:8b:33:b8:48:98:
         1e:ef:80:cd:cb:9b:24:fc:c7:13:b8:58:01:b1:5b:4d:08:84:
         9d:d2:3a:77:87:c6:b9:2e:c3:e5:da:7b:51:40:10:18:ad:03:
         0f:42:b7:75:8a:91:06:5e:0b:a3:c4:3c:c6:82:62:f9:a1:79:
         87:20:19:a8:84:f9:bd:a8:0a:77:ff:73:87:ab:42:95:ee:02:
         a9:25:fd:7d:d0:e6:48:b1:0c:f8:fe:36:ef:ca:d9:bb:01:d5:
         cb:19:df:14:91:44:fc:63:b4:90:5b:64:60:5d:36:97:82:6a:
         82:72:4a:34:97:75:ef:a9:90:be:ef:19:a3:2e:2c:98:4e:6b:
         fa:c9:38:33:7f:7f:2e:5b:f3:98:d1:99:be:39:80:ad:bc:58:
         f6:49:32:8f:31:6b:57:b3:ff:6c:84:77:de:8c:a0:71:28:53:
         53:2d:59:00:b0:99:61:18:7e:12:de:1e:ab:42:ba:8d:64:66:
         39:35:06:fb:11:72:47:87:89:6c:6e:6d:56:ba:f8:35:3a:67:
         9d:d4:63:ca:b5:f0:e5:3f:ea:ed:c5:8b:25:60:14:66:cd:f7:
         3b:50:98:5c:7a:dc:fa:04:50:2f:48:21:96:a1:79:0b:41:9a:
         5a:a9:76:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----