Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4e5ae1b9-77d2-403d-892d-fc78447c009d.roa
File:                     4e5ae1b9-77d2-403d-892d-fc78447c009d.roa (raw, json)
Hash identifier:          mtP33t4Tv7bFJ2WR88V3QLfT5wXqfconz9kdQW1K7RE=
Subject key identifier:   0F:4D:DD:27:28:53:2D:0A:6C:01:EE:F7:5C:6C:47:04:79:AB:D8:AB
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4DAF7A3B3B7B82CCED9BE289524F63F18325A053
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4e5ae1b9-77d2-403d-892d-fc78447c009d.roa
Signing time:             Tue 18 Oct 2022 00:00:00 +0000
ROA not before:           Tue 18 Oct 2022 00:00:00 +0000
ROA not after:            Fri 21 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:af:7a:3b:3b:7b:82:cc:ed:9b:e2:89:52:4f:63:f1:83:25:a0:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 18 00:00:00 2022 GMT
            Not After : Oct 21 23:59:59 2022 GMT
        Subject: serialNumber=be7a209f249e0cf7ca39667221bc4fc1caf595fa532de7044f1f982705e2b6dd, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:09:a9:c0:66:a4:64:79:4c:76:e1:9b:0c:1c:
                    e5:12:a1:eb:c2:a4:04:90:64:78:79:55:4c:0d:7d:
                    ce:77:4b:f4:77:6f:82:c8:a7:20:61:28:70:07:11:
                    fc:28:f9:9b:f0:85:85:33:53:df:5c:e2:d5:63:a6:
                    94:e7:0e:65:79:a0:82:49:89:eb:31:83:ab:09:d6:
                    b4:56:ce:16:8d:18:a2:70:5e:d8:19:b4:4f:6f:9e:
                    53:04:0f:07:56:fa:ff:11:4d:fc:7a:19:9d:90:9f:
                    bf:80:04:33:e9:11:3d:48:29:ff:53:9b:55:1f:ce:
                    2c:df:a1:fa:9c:ae:ce:0f:8e:f6:82:c8:ce:27:42:
                    41:0b:57:ec:e8:a6:5e:92:7d:07:47:85:3c:03:f0:
                    97:48:98:77:bf:2a:18:28:f5:19:a2:8f:eb:c9:09:
                    37:96:d8:82:dc:e6:cf:42:12:2a:7b:db:14:00:92:
                    ce:9e:bb:a1:01:1f:1e:fa:cb:3b:27:65:81:c3:22:
                    82:08:15:d7:e7:a1:98:a0:39:fa:f1:2f:4d:55:40:
                    7f:c8:64:83:75:d7:b2:d8:72:13:75:c4:d5:e7:b2:
                    49:82:fc:7d:6a:76:4f:a5:a0:99:db:f7:98:81:49:
                    06:da:ce:38:b6:50:b5:c1:44:f2:03:ba:75:09:15:
                    e9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4D:DD:27:28:53:2D:0A:6C:01:EE:F7:5C:6C:47:04:79:AB:D8:AB
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4e5ae1b9-77d2-403d-892d-fc78447c009d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:fb:8e:cb:77:d8:3f:f0:4d:17:11:e3:8c:0e:71:68:cd:39:
         83:75:db:e0:0e:83:4f:38:94:bc:b2:21:d1:e7:8f:8d:ec:78:
         1c:8c:d2:5b:72:b9:9d:5f:c4:98:a1:24:58:b7:99:65:49:b2:
         5d:64:b1:2d:c0:02:19:a1:31:81:fb:e6:25:2c:b6:be:73:25:
         40:5b:a3:85:6f:16:fe:33:ec:86:0a:94:1e:53:1b:a3:85:db:
         0f:2b:b0:ad:b4:b5:59:a6:c9:dd:20:71:a2:8a:92:55:c4:b1:
         a7:a9:52:00:f8:20:0e:87:64:69:87:fc:ab:4e:f4:07:25:01:
         e0:69:23:44:d8:8f:04:50:e9:ed:7e:7a:65:41:be:db:eb:66:
         93:67:c8:bb:35:77:dc:71:0b:db:46:f0:49:67:21:b9:66:0a:
         4f:d9:8f:aa:7b:a2:9e:33:7d:97:d2:2d:1f:0c:1c:61:65:e9:
         db:6e:b4:03:39:34:c9:b9:e6:38:98:57:39:d1:b7:e1:76:57:
         8f:d3:33:60:86:ba:06:bc:08:54:d6:9e:3f:f1:96:fb:3f:f4:
         19:07:c1:de:d0:4a:1f:6e:32:99:3e:97:00:88:2e:de:94:db:
         46:01:37:3e:31:d0:cc:9b:46:b4:00:70:48:5d:52:6e:93:c4:
         4f:10:12:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----