Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/451035a0-9a47-4943-9466-b007047c4bd4.roa
File:                     451035a0-9a47-4943-9466-b007047c4bd4.roa (raw, json)
Hash identifier:          IqyZe4IGoD6lu1dricxRaeXsSRqC88VA9fIONDZXI10=
Subject key identifier:   E8:9A:AF:C4:B6:AB:97:E5:71:CB:D7:AF:18:6F:C9:FC:1F:1E:35:F4
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1B9C4F82BBBE8F6E4DE5CAC4225908CD3FE80985
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/451035a0-9a47-4943-9466-b007047c4bd4.roa
Signing time:             Sun 03 Jul 2022 00:00:00 +0000
ROA not before:           Sun 03 Jul 2022 00:00:00 +0000
ROA not after:            Wed 06 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9c:4f:82:bb:be:8f:6e:4d:e5:ca:c4:22:59:08:cd:3f:e8:09:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul  3 00:00:00 2022 GMT
            Not After : Jul  6 23:59:59 2022 GMT
        Subject: serialNumber=199f46a63c131f7846fbf56b296d8d2d83d31a6129b380ffc2be65528293ec6f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:32:cf:ed:75:fd:b7:14:de:dd:14:ca:3f:5b:
                    03:56:83:6a:72:a6:be:a7:f6:e4:b9:2b:5b:69:d9:
                    8c:72:bf:cb:3a:20:15:d4:df:11:4b:b7:03:bc:0a:
                    6e:11:27:60:b8:9a:da:56:d2:86:73:0c:fb:e5:ca:
                    51:2e:d7:09:ee:8f:65:67:23:11:98:64:c7:89:de:
                    d0:f1:70:ea:00:18:fb:b1:17:ef:41:37:5a:96:c4:
                    da:af:06:c7:bb:f7:e0:c1:a7:4e:6b:19:5e:4f:05:
                    16:d7:6e:46:fd:e7:98:0d:61:ea:0e:3f:53:c7:66:
                    a6:33:47:52:f1:83:52:b2:a9:db:4d:50:e2:0c:bd:
                    bd:14:88:96:8f:3b:f6:a6:3d:e7:b1:a5:72:81:ce:
                    47:8c:4b:d2:27:7c:b4:ff:ea:ee:bf:e7:a3:0d:da:
                    ba:fd:d5:7f:32:e6:17:d9:8f:d2:a5:56:9b:33:fc:
                    51:41:d1:ad:21:51:ef:35:c5:63:6f:6b:8c:db:c5:
                    b6:ae:31:2c:15:d8:fe:78:a8:b6:6a:4d:e6:2c:f7:
                    aa:56:37:a3:ea:67:3d:3b:0e:24:7a:d6:5c:b3:ad:
                    b6:84:5d:01:bc:dc:14:5c:c5:df:c4:14:a7:08:8c:
                    f7:f7:7b:94:79:05:30:a9:8c:fb:16:d1:67:b6:68:
                    78:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9A:AF:C4:B6:AB:97:E5:71:CB:D7:AF:18:6F:C9:FC:1F:1E:35:F4
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/451035a0-9a47-4943-9466-b007047c4bd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:d9:0b:c4:cb:55:c6:aa:0c:b9:69:eb:3a:8e:28:34:0a:88:
         11:72:2f:83:be:c3:f4:1b:d3:98:19:ff:d1:e6:5e:dd:2d:8e:
         d5:33:4e:e3:76:03:25:32:df:e2:3f:03:a8:e2:d8:79:c7:c8:
         9a:26:f4:be:09:01:78:7a:e7:6c:44:79:22:db:a8:96:50:d1:
         77:ef:3e:68:78:fd:cf:19:d4:97:fb:a8:3a:e9:73:8a:bc:99:
         71:c4:e8:02:c9:61:4f:db:76:4b:c8:1b:b5:77:88:cc:fb:1d:
         57:46:3e:41:c1:d0:b2:f0:24:9d:ea:24:db:1e:6e:c5:f9:a9:
         9f:05:4f:76:2b:c4:6a:b0:f6:d3:2b:00:c1:37:d9:da:3b:8a:
         18:df:01:d0:46:8d:98:14:59:f0:9e:76:3e:44:d0:b5:1c:ce:
         92:52:fc:ae:79:bc:14:46:93:79:50:2c:b9:2d:43:5e:26:b3:
         5f:66:aa:3a:34:dd:77:16:90:6f:c7:89:1b:ba:11:4f:6f:2e:
         f5:16:73:70:d2:1a:db:1f:fa:83:16:cb:cf:a5:38:a9:a1:a1:
         a2:ed:30:fa:be:79:95:78:d3:b9:3a:a3:6e:3d:6f:06:31:7f:
         19:40:53:2b:b0:94:39:9c:80:88:19:ed:c6:2b:ae:4d:a4:cb:
         94:7c:f0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----