Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1f7c53b2-f6fd-445c-bc67-cbb4cd92439e.roa
File:                     1f7c53b2-f6fd-445c-bc67-cbb4cd92439e.roa (raw, json)
Hash identifier:          jzWlLQI+Gkm3z1R8tmImLiXWkoOfLYa7w0S+b/5H/ZE=
Subject key identifier:   9C:55:FB:54:2B:91:9D:96:FB:58:FA:2E:30:6F:F8:69:74:12:72:4A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2B197CD806C4DE9B16BD092299C8BB3E0F596171
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1f7c53b2-f6fd-445c-bc67-cbb4cd92439e.roa
Signing time:             Wed 21 Sep 2022 00:00:00 +0000
ROA not before:           Wed 21 Sep 2022 00:00:00 +0000
ROA not after:            Sat 24 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:19:7c:d8:06:c4:de:9b:16:bd:09:22:99:c8:bb:3e:0f:59:61:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Sep 21 00:00:00 2022 GMT
            Not After : Sep 24 23:59:59 2022 GMT
        Subject: serialNumber=f8fa344c8a32afaf7e69da740cb4aa9413897abd25ae2b7f34838fb5f19be54c, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:f3:b3:c0:a8:63:1e:85:d4:a9:94:fa:94:
                    17:ba:e4:a5:b9:61:72:3b:50:38:d7:a8:6b:89:3c:
                    4e:2a:81:75:69:1a:b0:f4:0c:d9:95:09:2a:e7:3f:
                    e8:58:f1:11:cb:33:f9:82:e5:60:eb:00:54:3e:c1:
                    bc:dc:a0:8c:0d:a1:23:6c:d3:7a:a5:ff:d9:c2:1f:
                    14:3f:08:3c:13:37:4e:76:c7:02:b7:8a:43:44:3d:
                    bd:eb:5c:4c:80:f2:14:e8:e1:96:7e:58:ed:f2:cd:
                    6d:ea:10:0a:6a:b3:9a:7d:d3:00:1c:0f:68:a4:27:
                    27:70:66:8d:e0:02:15:20:9f:11:95:27:70:61:a7:
                    5e:53:c4:eb:a2:c1:8d:46:27:98:a3:8c:c6:00:08:
                    9f:9c:cc:bf:13:c1:b2:27:69:ed:da:cb:d1:eb:92:
                    c7:e1:60:20:cd:90:67:32:12:8d:2f:fd:1d:6d:37:
                    b5:e2:d8:d6:fa:3c:6b:6a:a9:61:4a:48:38:2f:cd:
                    20:83:cf:e6:67:9c:fc:26:16:09:c8:3b:07:c9:0a:
                    2b:cf:12:1c:a3:f8:6b:02:8e:a7:cf:72:0a:ce:e1:
                    4e:b0:97:ae:9b:41:6d:c1:5e:86:e2:f2:dc:bd:8f:
                    b6:f2:46:2b:96:d1:94:b1:91:7a:88:a3:cf:2f:06:
                    f0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:55:FB:54:2B:91:9D:96:FB:58:FA:2E:30:6F:F8:69:74:12:72:4A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1f7c53b2-f6fd-445c-bc67-cbb4cd92439e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:44:84:9a:5b:bd:85:2a:db:c1:df:0d:6c:1a:23:e2:bb:48:
         0a:8a:83:e7:21:a5:cb:00:b5:ad:ee:86:2f:79:3d:2d:49:8a:
         d4:13:7a:42:f1:22:f4:52:e2:ec:89:c8:a3:8a:e1:c6:48:55:
         ed:f2:70:ff:2d:6c:ca:f8:70:84:4e:a7:54:08:e8:ff:d8:bd:
         a3:94:01:d9:da:e2:4b:e7:6d:da:3f:0b:a6:61:e6:7e:9c:0f:
         65:2e:ee:d0:70:73:3b:48:b9:e2:bd:aa:bd:c4:1d:a1:4e:f0:
         b5:d3:e8:0e:fd:bd:0b:08:91:d4:7b:75:82:7f:b0:df:2e:c1:
         5d:e8:9e:45:65:f2:e9:fb:ad:ef:80:80:31:2d:af:c0:ab:3f:
         72:73:8c:4a:a7:a1:93:4b:80:ce:4e:ab:55:f8:39:1d:c0:23:
         51:bb:e5:c2:67:fd:0a:cf:21:02:24:2e:ec:d4:ae:be:f6:98:
         a3:35:1a:e7:6d:69:3c:c6:c9:66:2b:1d:e3:cf:a2:be:01:16:
         23:2a:0a:14:3a:7a:ec:52:db:c8:93:73:92:df:f7:7d:25:6b:
         f3:3c:ce:e8:29:54:88:6b:fc:99:93:93:01:2e:1f:ce:5e:fb:
         33:7a:6a:7f:dd:61:2c:10:9e:01:2d:05:ad:d9:b4:23:89:3e:
         57:c5:0f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----