Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4b246a4d-2c71-43db-8df9-0ac83fd910e0.roa
File:                     4b246a4d-2c71-43db-8df9-0ac83fd910e0.roa (raw, json)
Hash identifier:          39nC1wvB1EHOy5dGdzHIXAVPEWJgDL1mValCXmRALzc=
Subject key identifier:   AA:C0:40:14:6B:4F:9F:FF:68:8E:D4:B5:58:FA:C1:40:90:A8:75:56
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6AA67896841756EE1D1C4AF27C376421B5F4DD68
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4b246a4d-2c71-43db-8df9-0ac83fd910e0.roa
Signing time:             Thu 30 Jun 2022 00:00:00 +0000
ROA not before:           Thu 30 Jun 2022 00:00:00 +0000
ROA not after:            Sun 03 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a6:78:96:84:17:56:ee:1d:1c:4a:f2:7c:37:64:21:b5:f4:dd:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 30 00:00:00 2022 GMT
            Not After : Jul  3 23:59:59 2022 GMT
        Subject: serialNumber=a8c46850bad793d9a3f3a904d2de1e4ee72174b01283f955348174a398bf38e8, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7f:c8:b4:f7:97:09:71:69:5d:cb:6c:f8:b8:
                    34:ad:cb:fc:5d:1a:fb:2e:7f:29:68:7e:b4:87:f7:
                    ec:7b:28:93:fb:be:99:67:62:85:b4:de:a7:b8:6a:
                    af:a7:a3:a8:68:c3:61:4d:7f:27:ab:0f:7c:83:39:
                    4c:47:2e:aa:db:44:be:9b:f7:75:cf:a4:a0:85:bb:
                    6d:26:22:19:7a:44:04:d7:99:d5:19:17:95:16:ec:
                    c2:97:d1:5b:54:23:c1:41:c2:ed:06:54:4e:5d:3a:
                    1c:fd:4a:fe:82:df:eb:bf:70:12:5e:a7:8e:5b:a0:
                    b7:34:8a:91:3c:58:5c:ec:f3:8b:18:fb:bb:63:85:
                    05:c0:a0:96:fd:94:8d:b6:be:5e:db:d8:98:66:8b:
                    08:35:b4:7d:43:71:73:93:e1:fd:14:47:d1:af:4e:
                    06:a7:f9:4b:4d:32:65:f1:c5:4b:a3:07:e9:d3:35:
                    c4:c5:65:40:f7:64:c9:5c:14:70:33:67:c4:82:f8:
                    c2:d8:1c:4b:37:01:a9:a3:e9:42:15:04:c8:ec:f4:
                    63:0c:d5:25:37:ff:38:1b:a7:5f:7f:86:39:61:4c:
                    b6:32:d8:25:34:f6:ac:48:87:c7:45:90:3e:4a:39:
                    65:8d:c8:c8:cb:ab:1a:23:77:5b:6a:6b:07:b8:5a:
                    f2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C0:40:14:6B:4F:9F:FF:68:8E:D4:B5:58:FA:C1:40:90:A8:75:56
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4b246a4d-2c71-43db-8df9-0ac83fd910e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:b7:ef:e7:8f:8c:39:1e:ee:9b:53:8f:97:58:4e:66:0e:1b:
         01:45:ea:94:26:45:f3:59:56:a7:8b:19:75:8a:9a:58:eb:c0:
         d9:63:a5:69:81:58:db:8c:0f:db:c7:7a:09:54:ca:c7:12:56:
         8a:1b:db:8c:cc:00:fa:0c:1c:6f:33:3c:da:37:ce:de:9b:fe:
         3d:40:6b:d4:8c:ac:93:7d:c3:1d:78:c1:02:95:6f:98:09:ea:
         4d:09:71:17:67:09:c4:66:8c:6b:45:97:54:61:44:37:f3:05:
         0a:ca:f3:aa:36:bf:94:7b:c3:41:c9:30:7e:ea:48:50:70:ef:
         4e:a6:1c:89:5c:50:cf:85:82:8c:64:8a:c5:07:c3:8b:7c:85:
         76:fb:0f:a9:93:27:bb:bd:2c:c0:df:6d:89:df:71:0e:8c:9b:
         3c:2e:82:21:90:eb:b1:e8:a1:ba:6b:0f:e3:c8:ed:37:c4:df:
         53:75:13:4c:2f:0f:14:eb:8b:14:07:27:66:1b:15:f0:4b:bf:
         93:6e:37:f9:13:bf:3d:33:63:20:c8:27:33:c3:bc:44:c4:c4:
         0c:23:2a:ed:a3:d3:88:b9:2a:86:ba:12:2f:93:88:0d:da:ea:
         47:bc:d1:65:7c:59:3a:74:56:a7:cc:e2:6c:41:aa:14:4b:ba:
         10:6c:fb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----