Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2ceb1623-742e-4d77-91ca-01d9ec8bc2cf.roa
File:                     2ceb1623-742e-4d77-91ca-01d9ec8bc2cf.roa (raw, json)
Hash identifier:          ES//60j8dPnypek9aZK5h8vGl8jPkRQeM7AUtxH1Mnk=
Subject key identifier:   DF:97:E0:B5:25:77:C7:AD:C9:C7:F2:00:AD:89:57:2C:1D:B5:FF:89
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       198970E535B3626DFCA7E104CD81C304EB13D0B6
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2ceb1623-742e-4d77-91ca-01d9ec8bc2cf.roa
Signing time:             Fri 23 Dec 2022 00:00:00 +0000
ROA not before:           Fri 23 Dec 2022 00:00:00 +0000
ROA not after:            Mon 26 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:89:70:e5:35:b3:62:6d:fc:a7:e1:04:cd:81:c3:04:eb:13:d0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 23 00:00:00 2022 GMT
            Not After : Dec 26 23:59:59 2022 GMT
        Subject: serialNumber=361a40e3e0d4abc6de3e379aa8aa51e07110f086b9fd5a1fa179996a75396b00, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f0:ee:54:0d:4c:de:71:93:2d:66:ab:3e:15:
                    1f:5a:f4:21:12:bc:90:52:be:12:c8:59:07:21:bb:
                    68:45:79:b3:33:10:82:02:44:0b:7e:9e:80:a5:90:
                    f6:fa:6e:25:9e:bc:ae:76:0e:ad:32:1b:c4:28:2c:
                    2d:d5:a0:38:62:d4:97:1a:57:83:04:8f:22:2a:bd:
                    9e:2b:e2:02:fb:c1:87:fb:c7:ce:f5:7e:36:ff:84:
                    9b:6e:1a:aa:8a:da:dd:51:35:f2:e8:0e:b0:51:ad:
                    4d:bd:5c:a2:f6:65:54:a0:1e:46:01:94:e1:cf:62:
                    d6:b5:0b:3c:74:6f:d5:a7:1a:ab:bd:a2:07:7b:e7:
                    cb:00:b0:42:aa:1e:fe:f8:54:26:8c:a5:c6:2b:ba:
                    f6:64:ca:4b:f8:58:6c:bb:95:9d:d0:02:c0:36:cd:
                    5a:14:26:f4:78:7d:12:e6:eb:4a:17:aa:e0:46:2f:
                    00:47:00:28:68:25:66:be:ad:50:58:58:63:20:09:
                    27:bc:a1:31:93:e7:0b:77:f9:f5:65:b8:95:3b:51:
                    07:ac:a9:fc:88:c0:68:e8:35:86:0c:a6:42:5b:7e:
                    7c:dd:a1:00:04:f4:ca:1d:c1:e6:52:e0:db:61:dc:
                    55:aa:e3:56:c0:65:b8:3e:5c:87:cd:52:bf:63:ef:
                    ba:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:97:E0:B5:25:77:C7:AD:C9:C7:F2:00:AD:89:57:2C:1D:B5:FF:89
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2ceb1623-742e-4d77-91ca-01d9ec8bc2cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:0b:01:dd:d5:4c:40:a4:02:61:40:2c:bb:be:34:72:f0:48:
         da:32:0a:c6:18:dd:4c:65:c7:8d:0f:8b:bb:24:6b:a8:bc:79:
         cf:82:0c:be:73:27:e6:a6:c3:de:55:19:a8:14:fe:95:27:25:
         10:bd:9c:90:6a:c2:66:df:94:23:92:d9:c6:6e:fd:27:4d:5f:
         30:de:2a:89:6e:60:b3:ff:3e:d9:55:a1:2b:d0:5a:b2:0b:c6:
         fa:1c:83:2a:4a:a6:d2:c4:0d:41:e4:d1:40:2b:b1:3d:90:a1:
         ae:df:7c:64:a6:c9:f8:4f:da:c2:99:a8:d9:20:47:a0:89:3f:
         a6:1f:bc:4c:3e:79:f7:2f:1a:4b:f1:c3:41:43:11:68:67:a4:
         c1:af:ee:95:bd:94:d4:c7:3f:ff:20:17:a9:c0:a3:fa:31:10:
         02:aa:e0:b6:7f:58:6e:20:64:d0:76:1b:0b:28:ea:09:30:5a:
         b3:e9:76:16:66:5d:47:94:41:20:91:fe:9b:20:ea:4c:7c:75:
         e7:50:03:1d:df:c5:9e:cb:eb:e9:c5:e7:79:17:8e:3f:44:48:
         8c:79:eb:d4:a1:09:a2:1b:9b:96:ca:cb:c6:61:36:36:03:0f:
         9b:25:6e:f7:fb:50:08:8b:b8:0c:ee:d9:e3:86:bd:fe:6c:65:
         a7:b6:c3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----