Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4443f25e-95ad-4db2-a4de-42ca470c3cea.roa
File:                     4443f25e-95ad-4db2-a4de-42ca470c3cea.roa (raw, json)
Hash identifier:          mgDAQPTMesDjxGwJELpesLoCWPgP4Mk+ifSCQcBScdk=
Subject key identifier:   D9:22:79:46:E7:CF:E4:87:07:52:FF:39:3C:CD:92:26:19:EF:01:82
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0BC1D1F7FFE2CB05E087C2B92C4A29F725B96336
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4443f25e-95ad-4db2-a4de-42ca470c3cea.roa
Signing time:             Sat 16 Jul 2022 00:00:00 +0000
ROA not before:           Sat 16 Jul 2022 00:00:00 +0000
ROA not after:            Tue 19 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c1:d1:f7:ff:e2:cb:05:e0:87:c2:b9:2c:4a:29:f7:25:b9:63:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 16 00:00:00 2022 GMT
            Not After : Jul 19 23:59:59 2022 GMT
        Subject: serialNumber=b06731d6bee634387c1ed3617383bbb6cad4728c242efebb78fbced04870e712, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a5:ec:96:28:79:24:86:b3:4d:a7:41:86:bb:
                    09:61:54:33:ff:6e:c8:19:9a:e3:11:b4:0a:46:26:
                    d0:a0:63:be:f5:48:26:4b:08:8f:3d:ca:d8:47:d3:
                    5b:07:da:68:93:7a:fc:1d:5e:70:5c:3d:00:4e:c7:
                    61:5f:a0:8d:5b:d8:6e:cc:57:ab:32:cd:b5:e4:32:
                    37:57:9e:91:66:20:eb:b9:81:d5:5b:66:7b:2b:a2:
                    0e:a5:44:be:af:df:3b:eb:31:6c:6f:c7:42:b0:e3:
                    35:f7:7b:9f:4d:04:b0:49:a7:3d:59:54:ba:f5:fe:
                    c9:b9:bd:7a:d3:0c:55:70:74:8b:db:43:cd:8d:dd:
                    af:67:00:5c:cb:88:fe:f1:ac:2d:7c:f6:84:9d:17:
                    b9:66:2c:62:13:e6:5d:11:e0:25:e7:19:83:cf:0d:
                    d3:48:8f:fa:9d:e7:f0:d9:e4:ea:29:4d:13:3e:9a:
                    6c:e0:38:08:44:0a:f6:f4:1b:4a:cb:75:6a:3a:9e:
                    31:b0:45:f6:f0:51:71:55:aa:9d:0d:a8:13:26:2b:
                    7f:04:15:35:29:c1:3f:c2:63:fe:a8:4b:9d:ff:c1:
                    40:2e:ff:a0:10:f8:d2:27:d6:6a:9c:37:11:fa:78:
                    17:63:d5:b0:8d:be:d6:c7:ef:02:68:cc:1b:2c:ff:
                    5a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:22:79:46:E7:CF:E4:87:07:52:FF:39:3C:CD:92:26:19:EF:01:82
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4443f25e-95ad-4db2-a4de-42ca470c3cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:a8:c8:d8:af:ce:db:3c:ce:50:3d:76:13:20:f4:41:95:5f:
         29:0f:0a:e1:ab:b6:b2:17:a7:43:8b:96:a1:51:74:ee:0c:b3:
         d8:5e:d1:d2:2d:d9:67:11:89:22:3c:8c:1b:bc:71:62:f7:2c:
         0a:8c:8e:cf:9e:00:95:02:98:e1:05:2d:74:bb:0f:bd:ea:85:
         e4:34:e4:9d:bc:c3:88:dd:e4:6d:ba:c5:5a:dd:89:60:2a:c5:
         00:b4:d6:93:77:5f:68:ff:d2:75:09:18:78:e0:db:d3:2f:e6:
         e4:f9:ee:d9:f0:77:e6:56:34:3b:e4:b1:97:5e:a4:03:f4:bc:
         76:9b:68:6d:fd:77:ce:fb:f8:f8:80:e8:6c:82:c4:e9:e1:8a:
         42:70:7d:78:aa:8d:5e:58:d9:e6:85:42:8b:a2:1b:5d:37:24:
         0a:ca:8c:27:3f:4e:aa:26:aa:ae:7a:57:e2:3e:26:7c:7a:60:
         96:f9:05:7b:ca:0b:1e:cb:7b:e1:59:b6:da:1d:d5:67:e4:27:
         2c:92:20:00:ff:02:d9:28:5d:2d:1f:58:9a:6e:96:90:68:85:
         a4:d2:d1:78:f4:8c:bf:a7:b3:1c:e2:d3:c5:93:bc:2a:92:c7:
         53:63:70:65:95:64:4a:dc:f6:93:4f:88:37:6d:46:a4:e1:f4:
         77:50:d7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----