Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5d846f7b-ad3e-4ef0-8d51-c8939a47c4cc.roa
File:                     5d846f7b-ad3e-4ef0-8d51-c8939a47c4cc.roa (raw, json)
Hash identifier:          Xekumr+EIi4HnkDqTOm7PFnZ2bEAyW8mcI8QuTkskPs=
Subject key identifier:   D1:CA:BA:81:B6:07:8D:B9:5C:F9:C9:13:CC:37:87:E3:EF:40:17:12
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0572CC0F78B77A7F4463431CEA379BF755579626
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5d846f7b-ad3e-4ef0-8d51-c8939a47c4cc.roa
Signing time:             Sat 31 Dec 2022 00:00:00 +0000
ROA not before:           Sat 31 Dec 2022 00:00:00 +0000
ROA not after:            Tue 03 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:72:cc:0f:78:b7:7a:7f:44:63:43:1c:ea:37:9b:f7:55:57:96:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 31 00:00:00 2022 GMT
            Not After : Jan  3 23:59:59 2023 GMT
        Subject: serialNumber=42b8c51b586b3717451232e00094f34cff9e4d7284906727e7488187ad1ae82d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ac:e2:22:a9:ff:eb:49:54:ed:6c:24:f8:8a:
                    bc:45:bc:9b:28:46:49:32:dd:f6:62:7c:cc:0f:55:
                    69:cb:7f:46:b0:33:d1:27:91:c5:db:70:62:72:52:
                    d2:a3:ea:99:c2:f5:bc:2d:d0:0c:e6:09:9b:9e:35:
                    b2:5f:3d:b2:fd:37:34:83:42:0c:35:48:c2:b1:48:
                    6a:d5:d1:e1:99:28:49:38:3c:c2:00:19:62:a5:ef:
                    6a:70:c5:e9:41:fe:41:0e:bc:e6:72:5e:42:b8:61:
                    ed:65:64:5a:0c:1b:39:29:43:09:6d:11:10:ab:6e:
                    80:e3:db:fc:0c:ad:f5:d9:61:a4:a5:1b:36:c6:13:
                    20:c8:69:1a:9a:3f:2a:62:df:99:c0:61:28:b6:47:
                    0c:31:88:18:3a:14:42:e5:5a:66:25:30:6e:86:4c:
                    9b:e3:f6:60:f2:c4:da:91:af:92:86:f1:99:aa:a0:
                    fd:fb:93:03:20:86:30:b2:cf:35:bf:0c:df:13:c8:
                    85:d3:e4:10:2e:82:a3:49:97:5a:07:31:e2:dc:da:
                    64:fb:62:fc:7a:12:f6:67:b8:0b:38:39:38:20:c1:
                    34:43:18:69:e4:9d:47:70:34:dc:96:0a:b2:56:7f:
                    f4:9b:14:07:7a:c2:f3:7f:4b:96:91:b8:de:d9:22:
                    da:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CA:BA:81:B6:07:8D:B9:5C:F9:C9:13:CC:37:87:E3:EF:40:17:12
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5d846f7b-ad3e-4ef0-8d51-c8939a47c4cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:48:8e:ef:79:44:75:2b:8b:d8:e2:3e:08:91:c1:da:c9:1a:
         fd:8c:f5:58:05:7f:f3:b2:e3:ac:0b:b2:3b:19:5b:49:54:d0:
         0d:a7:f9:2e:0d:ef:6f:7f:3a:48:ec:0b:ab:3d:c5:a3:4b:3e:
         8d:ac:67:8d:a5:15:1e:ac:3b:eb:67:73:6e:b1:25:9d:5f:68:
         99:02:b7:7a:53:a0:72:de:d8:46:bc:ac:16:0c:59:19:fc:6f:
         e8:31:5c:32:65:ef:27:ec:d3:ac:c8:3f:5b:e9:96:d8:61:1a:
         fe:76:f1:32:84:0d:17:c2:33:ea:89:3c:16:1e:2b:25:d9:38:
         c8:9f:f3:d2:3f:04:31:8d:9a:d3:14:5e:5a:c2:b0:8a:b4:e8:
         d0:46:6f:0f:43:d7:e2:80:b0:9c:19:1d:13:94:b0:d0:6b:20:
         b4:13:aa:0f:8d:32:6f:2a:58:ba:51:8b:c5:7b:04:89:82:48:
         1a:5a:c3:ef:93:0a:f1:dd:ce:a1:72:81:33:7a:02:5a:90:18:
         67:49:8a:f0:fc:40:31:f1:8a:96:8e:e9:e5:36:9d:72:6f:3d:
         28:bc:bc:49:62:22:16:da:00:93:d8:d2:13:d2:c3:dc:ac:14:
         ab:f9:64:9c:c1:7f:d0:c5:77:6d:f3:f0:b1:01:b4:23:d7:7b:
         8c:0e:01:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----