Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1f500f1c-e7c3-4d31-8f11-c4a0593cdad4.roa
File:                     1f500f1c-e7c3-4d31-8f11-c4a0593cdad4.roa (raw, json)
Hash identifier:          d7cEp1u8ufDubyxLyNIdjgqUaX29SllbmnwBUYSVpIs=
Subject key identifier:   C8:F5:CF:D6:61:17:D2:ED:59:58:20:B8:6D:B8:A5:7A:28:36:F1:F3
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1DC20849F77C228FB285D251117D1449D1C98FF3
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1f500f1c-e7c3-4d31-8f11-c4a0593cdad4.roa
Signing time:             Sun 15 Jan 2023 00:00:00 +0000
ROA not before:           Sun 15 Jan 2023 00:00:00 +0000
ROA not after:            Wed 18 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c2:08:49:f7:7c:22:8f:b2:85:d2:51:11:7d:14:49:d1:c9:8f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 15 00:00:00 2023 GMT
            Not After : Jan 18 23:59:59 2023 GMT
        Subject: serialNumber=84fe935fc7264383bf52faad4b974ca16e087967325ae34f310a2c9aeb76c295, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2d:a2:21:2c:c4:9b:03:57:15:f9:3a:ec:dd:
                    fb:a6:f3:f8:c6:88:4f:db:65:88:5d:f2:64:b2:39:
                    2e:5e:cc:d8:87:b0:ea:5f:3c:0a:f0:7e:ad:2a:88:
                    f0:e5:78:ba:5b:42:78:a0:59:d6:fe:28:b9:81:3e:
                    f7:4c:d5:4a:6c:07:6f:9d:20:69:c7:71:8a:1b:0d:
                    59:80:4f:89:82:13:6b:31:af:21:05:a0:d6:56:30:
                    52:17:c7:f4:86:7f:8d:aa:9b:33:e9:29:47:2e:81:
                    e7:ef:fc:75:7f:78:03:a9:70:87:46:f7:d7:6c:36:
                    e3:f5:0e:fc:0d:f2:89:e8:7e:a6:e8:51:01:12:f3:
                    c6:0b:f1:f4:c4:bc:e0:5c:7d:38:2d:6e:cb:f8:ed:
                    ec:2a:9f:64:72:20:94:85:b3:ba:cb:93:4f:16:f2:
                    5e:e4:58:98:59:05:48:e7:88:b8:27:b7:49:b6:91:
                    a9:18:df:d8:73:d6:9c:81:a7:9a:f1:fc:bd:8c:34:
                    7c:b3:7e:73:78:65:e6:cf:db:72:e5:17:6f:93:3c:
                    2e:7a:c3:e5:7f:18:64:58:92:12:98:2e:1f:4d:48:
                    82:ec:19:5d:88:d8:1b:e0:6e:d4:d6:0d:ff:9f:66:
                    7c:64:46:b4:e8:c6:c5:33:12:35:4c:bd:25:a0:b1:
                    8a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F5:CF:D6:61:17:D2:ED:59:58:20:B8:6D:B8:A5:7A:28:36:F1:F3
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1f500f1c-e7c3-4d31-8f11-c4a0593cdad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:5c:fb:13:8e:d8:7b:53:91:8b:d0:8f:53:ea:fc:c4:48:e0:
         d8:03:9b:b9:3c:7e:4c:35:09:85:39:30:f3:c7:b8:70:34:cf:
         ee:04:1b:d6:bf:8a:86:3e:b0:23:f7:b4:e1:9c:6c:95:81:76:
         5c:bf:19:0a:f0:bf:af:3b:63:72:d3:0f:5c:5f:52:b3:be:fc:
         bf:3b:91:ef:99:c2:b8:9d:dc:ed:48:5f:7a:b5:8a:d0:0c:fa:
         6e:6a:32:d8:2b:31:ff:23:8a:db:ca:09:7f:9a:07:c4:17:2f:
         21:72:13:f4:fc:8b:0e:e3:76:1c:4a:38:f3:c8:c3:5c:53:9c:
         28:c3:1e:6d:5d:74:8c:d8:1c:47:18:3b:12:7c:66:09:42:8e:
         68:e2:16:b2:ff:25:fd:7c:4f:8a:5a:0d:cb:9f:ea:0b:f6:b6:
         a1:50:63:40:6a:b2:4e:a9:29:7e:77:87:f9:bc:8d:dc:d3:b4:
         fb:18:e9:bc:47:be:07:83:1c:e5:69:33:ed:1c:57:0b:ef:eb:
         ce:a3:c5:84:02:27:89:6b:97:7d:0d:72:3c:a5:0a:65:a5:3a:
         14:ae:d0:b5:ae:24:0f:f1:41:99:e9:5f:34:03:f7:3e:0b:78:
         17:e5:15:c5:f8:c6:42:7e:55:4d:96:d4:cc:b1:ba:97:d4:28:
         e6:77:50:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----