Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3b843015-f393-46d2-8494-a15706f0d70c.roa
File:                     3b843015-f393-46d2-8494-a15706f0d70c.roa (raw, json)
Hash identifier:          dm4Oh/TdF47+UYcBSsRPbyHIl2IZxVCzbxnPrRSb0yE=
Subject key identifier:   7E:CA:BF:C5:01:B3:FF:8D:C8:7C:F2:51:94:21:3F:B7:C5:38:85:54
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1B3B232077D17C047672BBED1C14FFB46DB06EFE
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3b843015-f393-46d2-8494-a15706f0d70c.roa
Signing time:             Sun 17 Jul 2022 00:00:00 +0000
ROA not before:           Sun 17 Jul 2022 00:00:00 +0000
ROA not after:            Wed 20 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3b:23:20:77:d1:7c:04:76:72:bb:ed:1c:14:ff:b4:6d:b0:6e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 17 00:00:00 2022 GMT
            Not After : Jul 20 23:59:59 2022 GMT
        Subject: serialNumber=7a25a651109a7382a77b9fb631fdd6326175a756b93313016d2b7102ed094161, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:27:1c:1a:0a:0f:2e:64:1b:71:91:e4:12:
                    b3:5d:3d:4d:a4:cd:94:87:77:f3:e4:36:22:9e:81:
                    0e:7a:b4:24:ea:65:50:52:81:9b:4b:5e:aa:fe:29:
                    5b:94:3c:0d:33:35:ba:e5:24:9e:6a:4e:b1:00:66:
                    3f:7e:44:22:e9:ee:dd:36:50:65:39:ca:c9:49:e5:
                    28:ab:9f:a0:60:7c:17:d2:32:29:40:0f:e6:d5:de:
                    f9:4a:a8:be:7f:47:e1:23:f0:f3:a0:07:00:e5:15:
                    16:e9:7a:61:16:0d:70:7a:6d:a5:f4:fd:2f:1a:03:
                    91:0d:85:c8:50:1c:95:63:51:e5:89:de:e8:81:c7:
                    5a:67:99:6c:48:81:43:ba:d0:04:1c:8c:9e:2e:95:
                    df:eb:4e:88:54:0f:33:5a:73:b4:d5:f8:b8:1b:08:
                    1c:cc:77:4a:5c:81:76:d5:e5:02:54:d5:96:94:09:
                    5f:27:a3:59:23:38:d5:48:53:92:48:b3:3f:80:b2:
                    84:a7:f6:63:aa:b7:5f:45:c0:56:2e:9b:14:c3:37:
                    d3:5f:ad:be:ff:cc:51:ae:a8:ad:e6:01:a2:5c:b1:
                    6f:ae:dd:b2:38:17:b9:8a:15:a4:26:03:44:b0:21:
                    a7:b6:9d:81:1d:07:87:fa:e9:2d:64:27:2d:a9:94:
                    a8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CA:BF:C5:01:B3:FF:8D:C8:7C:F2:51:94:21:3F:B7:C5:38:85:54
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3b843015-f393-46d2-8494-a15706f0d70c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:41:ff:29:ee:53:d9:42:c1:c6:12:af:2d:81:32:06:4e:97:
         cc:0d:17:d3:18:27:a7:3d:19:8c:f7:92:a5:d6:86:0d:c0:ff:
         44:24:be:64:87:44:2d:3f:a1:7c:ce:83:dc:95:86:68:87:c5:
         4a:88:1a:4f:53:22:3e:07:a6:d2:ac:59:67:0c:98:99:ef:e6:
         47:13:79:65:0d:7f:88:ef:9d:48:e5:b1:15:27:c0:70:84:69:
         12:40:de:86:be:59:75:5f:62:12:be:8d:94:ab:a9:fe:df:33:
         35:85:b0:d3:66:78:10:3b:e3:43:92:61:0e:b4:1e:b9:0d:4b:
         33:cc:e6:93:08:b3:b5:e4:70:9b:b0:8c:70:df:5c:7e:fd:c1:
         ea:1d:4b:fc:40:82:30:93:ef:1e:d5:3d:72:13:fc:3c:af:b6:
         32:0a:d5:12:0c:1a:c6:99:02:fb:e9:ad:f1:32:1e:9f:61:7e:
         15:fa:82:aa:dd:c0:7b:04:ad:68:d7:43:a6:b5:08:da:98:09:
         21:59:c0:fe:5c:b7:4d:5e:e4:c2:00:45:21:f9:c3:3c:4b:9e:
         c1:a4:c0:a6:a3:54:e1:f8:0a:03:4b:44:6b:0c:9a:4b:b1:cd:
         b2:8e:0d:d7:9a:92:84:6e:b0:cb:92:eb:1d:72:2f:16:4f:4b:
         be:54:47:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----