Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/540a49e3-32c6-4672-b53a-ee9140dc62b4.roa
File:                     540a49e3-32c6-4672-b53a-ee9140dc62b4.roa (raw, json)
Hash identifier:          ljceiY1EcY6sCRa9Z5j5xFoI7S9yUcMvFbu+u9EV/WQ=
Subject key identifier:   7B:D3:B3:40:3F:FD:C4:B3:51:42:57:F4:4E:94:FE:33:2A:4F:59:31
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       04764A677D9AF6F301AF0F9AD0C35B44A1BCB8E7
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/540a49e3-32c6-4672-b53a-ee9140dc62b4.roa
Signing time:             Tue 20 Dec 2022 00:00:00 +0000
ROA not before:           Tue 20 Dec 2022 00:00:00 +0000
ROA not after:            Fri 23 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:76:4a:67:7d:9a:f6:f3:01:af:0f:9a:d0:c3:5b:44:a1:bc:b8:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 20 00:00:00 2022 GMT
            Not After : Dec 23 23:59:59 2022 GMT
        Subject: serialNumber=0d1eb9097deeffc652615bf9d9a92bd711c06fb2c1bfe14ca476a5888992fbd1, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1a:c2:08:6d:51:28:60:2a:c8:89:1f:28:6a:
                    f7:5d:03:08:e2:77:63:b9:04:6c:34:ca:59:73:73:
                    4f:7f:97:ec:f4:60:71:ff:02:c9:67:6e:e5:f0:50:
                    24:77:16:30:45:da:16:61:9e:1b:9b:bd:1d:e5:b3:
                    d3:bd:31:53:32:37:14:f1:fb:07:2d:de:94:46:07:
                    8e:42:62:9d:ce:a8:22:36:0c:cf:11:11:0d:de:8c:
                    d1:8f:07:90:2a:0a:89:d4:eb:6c:e5:92:38:e1:a0:
                    0e:a2:44:46:ac:0a:3f:eb:d1:63:93:f5:9f:f1:00:
                    82:d8:4b:20:cc:42:ca:63:25:f5:34:b0:dd:1a:c0:
                    c0:e8:38:f5:8a:ea:cb:a9:98:20:e4:c2:67:9f:bb:
                    31:5e:0b:be:b1:48:e8:1b:36:89:00:09:7e:c7:cf:
                    be:46:49:1f:a7:1d:9a:f6:4b:24:0c:09:9f:a7:cf:
                    3d:d5:08:06:63:92:70:94:09:67:b0:0e:80:76:fd:
                    e1:23:9d:a9:f8:2c:05:16:64:07:66:50:7e:b5:93:
                    0f:cf:2d:61:8e:12:af:aa:6a:90:84:e2:75:31:ba:
                    7e:fe:08:37:66:60:b9:2b:5e:f8:48:c8:bf:49:44:
                    41:a7:d3:ea:42:62:80:97:3b:ff:d7:00:36:e5:95:
                    9d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D3:B3:40:3F:FD:C4:B3:51:42:57:F4:4E:94:FE:33:2A:4F:59:31
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/540a49e3-32c6-4672-b53a-ee9140dc62b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:d8:9e:13:cd:29:4d:0a:dd:e4:51:8c:b5:70:41:da:a2:08:
         1f:d8:71:0a:bf:a6:0e:aa:21:7c:f5:e8:98:04:da:f8:de:74:
         99:a8:eb:59:e3:a6:74:4c:c1:81:8b:d3:d1:46:27:52:46:5f:
         76:ca:c4:dc:b4:bf:c9:e3:65:04:a0:54:4e:a0:9a:b2:12:cf:
         69:c6:fa:2d:b2:71:7f:e4:cf:fa:a9:ed:98:09:38:db:08:c4:
         72:4b:78:6c:78:88:6d:3b:53:62:46:29:89:06:92:24:9a:4d:
         30:19:2f:43:46:2a:75:c9:a0:55:3c:b4:d4:9a:dd:7d:e5:5a:
         a3:29:0e:ec:b7:14:6c:85:a8:f3:bb:1f:80:da:07:d6:c8:e8:
         69:44:f6:0f:69:70:34:9e:43:d0:55:41:55:c8:4f:13:da:48:
         cc:35:59:a5:9b:63:34:0e:ec:0a:4b:d0:05:13:a0:5f:7c:4e:
         97:26:5b:82:5b:16:65:4e:da:5c:33:75:20:35:80:53:b1:35:
         9a:a9:9c:c8:cf:43:3e:4f:53:d7:16:8f:f7:1e:bc:2b:b0:ae:
         18:0f:63:e3:a1:b6:0a:22:af:9e:48:73:51:c7:e1:80:5b:5e:
         c0:c4:10:7a:f2:13:ee:51:6e:6b:82:b7:be:de:3a:74:37:6a:
         06:34:17:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----