Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4ac375d8-4e50-47a7-b63e-e37ec8596999.roa
File:                     4ac375d8-4e50-47a7-b63e-e37ec8596999.roa (raw, json)
Hash identifier:          j/npdFHKOy35wxSIjvrmlITy8uLzVGZkrhp/2H4p9og=
Subject key identifier:   4A:75:40:F4:49:AA:5F:0E:2D:6D:91:35:F1:7A:09:16:F1:94:D8:32
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7A874A416B97C5BDBCB1D827DCCE413C9A2E9964
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4ac375d8-4e50-47a7-b63e-e37ec8596999.roa
Signing time:             Wed 17 Aug 2022 00:00:00 +0000
ROA not before:           Wed 17 Aug 2022 00:00:00 +0000
ROA not after:            Sat 20 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:87:4a:41:6b:97:c5:bd:bc:b1:d8:27:dc:ce:41:3c:9a:2e:99:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 17 00:00:00 2022 GMT
            Not After : Aug 20 23:59:59 2022 GMT
        Subject: serialNumber=a5216546134990e4aa46d2e82e641257acbec6c94bd958829438486c8700f44a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:71:6f:1a:0e:63:c7:a9:98:7f:16:69:73:
                    2c:13:fb:64:3d:36:47:3f:af:1d:00:ae:e1:82:d8:
                    6e:ab:ff:bf:f7:dc:c8:d4:5c:b6:25:a4:e0:0c:81:
                    fc:b0:3c:d6:3d:9e:99:0f:48:03:a9:ba:e9:fa:94:
                    e3:ce:53:df:58:cc:c3:1b:a0:9f:1c:8e:eb:ac:23:
                    8d:49:62:a2:c3:1c:fa:4f:d7:20:41:fd:de:e0:17:
                    b8:18:e9:4b:5a:fd:37:56:48:99:93:3f:3c:29:d9:
                    ef:fc:b3:2f:50:02:88:1c:2c:fb:f4:19:5e:94:f8:
                    d9:ae:00:8e:40:16:c1:7c:43:d3:5e:8d:2e:d5:b8:
                    8f:2c:29:88:a2:60:6c:59:f5:0f:f1:84:23:fc:0e:
                    9e:c1:8b:de:f3:dc:43:3d:30:34:00:aa:23:49:40:
                    91:ae:74:b0:a6:d3:4e:44:09:5f:2f:2d:c5:b1:82:
                    0b:92:c8:3f:0a:b1:00:51:7b:da:55:bd:82:25:0f:
                    4e:43:14:63:7c:19:da:a2:76:17:c3:19:88:af:77:
                    c8:04:c6:9c:b8:6b:c9:f3:72:e3:0a:50:fd:b6:d5:
                    48:49:3f:7c:90:5a:a0:52:9e:c0:ec:39:1d:c3:5c:
                    11:c7:6b:c7:da:23:3b:21:83:7f:af:2b:1c:7a:0e:
                    0f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:75:40:F4:49:AA:5F:0E:2D:6D:91:35:F1:7A:09:16:F1:94:D8:32
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4ac375d8-4e50-47a7-b63e-e37ec8596999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:b4:a9:83:bb:84:97:27:ba:3c:8e:f2:54:56:76:6f:21:fd:
         29:03:1c:0b:d8:fd:6b:e7:d1:76:e1:9b:cf:39:d8:a7:35:b8:
         97:8a:df:32:3b:81:a2:85:a5:c0:5a:50:15:e1:a0:e1:87:92:
         d2:2e:1f:84:ba:38:21:d3:9f:94:fe:29:c5:08:09:33:c7:9f:
         35:b3:b3:9a:7e:2a:12:06:0d:1b:fd:dd:5f:05:f5:97:09:36:
         66:02:79:c8:dd:6b:6e:8d:cf:ef:74:66:a8:89:eb:ce:0d:34:
         d0:d7:29:62:85:4f:58:ae:c0:cc:fa:ac:88:ca:0b:6b:a4:cc:
         4b:28:d1:fc:34:ed:99:8f:f1:2b:9b:23:ea:0c:76:9b:7b:b3:
         e1:68:46:f4:97:98:c9:71:1f:f6:c3:40:a0:39:cb:87:88:55:
         bf:e0:db:fd:09:8d:1e:71:2a:2f:00:f4:8e:2d:6d:ec:f4:e6:
         0a:40:6e:65:ad:06:64:c1:ee:b0:ee:1b:f5:1a:4f:9c:e9:ac:
         36:99:5c:4a:6e:25:90:94:7c:77:b0:b7:d4:2a:2b:e1:9b:c2:
         44:4b:f5:f3:af:7b:d6:86:c9:0a:d0:cc:77:0c:fd:b3:12:a0:
         8a:30:51:b3:e3:ac:c2:f2:f7:2c:f7:cc:f0:98:c7:70:9e:3f:
         e0:01:f0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----