Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/52087783-c624-43f5-825c-9cffee08efc4.roa
File:                     52087783-c624-43f5-825c-9cffee08efc4.roa (raw, json)
Hash identifier:          Fx36OpvPgp1c+mRWPwJrLTxRsotH6653sItI5F3uZX8=
Subject key identifier:   26:95:BE:35:A4:94:14:F4:4A:0E:59:41:E0:B5:EE:04:DA:83:8D:AE
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       12AE2026EC842B7055FAB0BE3FAB018945C379F2
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/52087783-c624-43f5-825c-9cffee08efc4.roa
Signing time:             Sat 21 Jan 2023 00:00:00 +0000
ROA not before:           Sat 21 Jan 2023 00:00:00 +0000
ROA not after:            Tue 24 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ae:20:26:ec:84:2b:70:55:fa:b0:be:3f:ab:01:89:45:c3:79:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 21 00:00:00 2023 GMT
            Not After : Jan 24 23:59:59 2023 GMT
        Subject: serialNumber=ed1634334a933c3d6daaded253964c8be3d63f3b29ab50452704f4ae2779d5e4, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9a:a3:ed:f6:02:c6:86:89:ab:6d:df:69:de:
                    0b:1a:6a:0e:e2:70:05:79:7f:1a:40:cb:c8:10:17:
                    86:fc:3e:df:7c:d9:a3:52:71:85:65:53:f3:d7:5f:
                    5d:52:e6:fe:0d:77:11:08:14:c1:cc:5f:64:00:16:
                    40:7c:75:b7:ae:8c:91:24:1a:b4:4b:53:b4:33:02:
                    27:b8:84:12:11:0e:05:0e:63:38:23:44:88:95:af:
                    15:b5:5f:e9:9a:f1:38:c6:81:08:7f:7d:a2:07:4e:
                    3f:3a:2d:61:b5:6d:56:93:3b:5e:6a:25:26:2f:73:
                    f9:0e:3d:47:12:81:f6:4f:6a:f7:11:64:b9:be:8b:
                    93:d2:fc:81:15:18:d3:15:5a:be:2b:68:0b:df:02:
                    a8:14:92:37:d1:f5:6a:f6:d6:03:40:c3:3c:bc:19:
                    c9:22:2a:07:c0:ab:0c:f2:f9:ed:46:ea:d8:b7:94:
                    66:e0:c5:5e:fc:ac:d7:2f:00:a5:2f:87:01:71:0a:
                    33:36:69:d9:34:ef:21:c0:06:85:9a:67:34:b1:c4:
                    a3:22:4f:86:69:5b:89:30:97:00:4a:64:a6:62:c1:
                    f5:ff:5a:30:e3:57:49:3c:0a:54:44:72:a5:31:7c:
                    be:b5:d4:9e:11:23:12:9e:3e:62:1f:f3:6c:20:59:
                    01:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:95:BE:35:A4:94:14:F4:4A:0E:59:41:E0:B5:EE:04:DA:83:8D:AE
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/52087783-c624-43f5-825c-9cffee08efc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:a6:8c:7b:9d:cd:c3:61:bb:9f:62:21:e2:16:f2:1d:3a:01:
         b4:18:ea:40:32:6e:81:d5:16:e9:f1:62:b8:bb:83:50:0f:ee:
         22:44:af:82:48:36:fd:ed:3b:cd:97:2b:35:5d:e7:3c:79:db:
         48:1b:08:c9:6f:8f:3e:36:97:fa:71:81:e2:ad:d0:0d:86:8d:
         50:d2:91:f9:ae:7e:bc:b8:4a:a6:33:12:a2:da:7e:9b:f0:7e:
         9a:75:45:fa:f6:f3:ce:77:b5:5a:a1:f6:6c:bd:e0:db:58:98:
         93:a6:c0:44:87:d5:86:b9:fd:e3:22:6a:ee:93:0c:be:06:d3:
         95:dd:91:cf:c4:4d:04:b3:b1:78:44:38:c5:e5:f9:1d:1d:a0:
         f2:2d:72:c9:a6:e0:ee:c0:17:58:38:30:af:90:8e:9d:c9:58:
         01:9f:e8:5c:b2:43:7f:b0:1e:30:17:11:58:a9:b3:ba:78:98:
         b3:5d:02:ca:02:53:09:fc:63:44:77:5e:9c:d7:e0:22:b1:7b:
         e7:cf:0e:f6:52:e7:de:72:4e:6c:b9:ac:e1:38:3e:5f:41:c7:
         5c:bc:1b:fb:0c:ce:83:8e:f5:86:75:f9:e7:6e:5a:a9:d3:7b:
         4c:79:c7:83:2b:40:1f:3c:1b:46:d0:de:7d:8e:bf:4e:94:c2:
         1a:d6:60:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----