Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/63db9a47-2a25-46d5-b5ef-0f13fff89258.roa
File:                     63db9a47-2a25-46d5-b5ef-0f13fff89258.roa (raw, json)
Hash identifier:          gGqf0aD9BjW6+uLd1eWhglEvgkId+I8yRCzIbh4/D+U=
Subject key identifier:   09:87:4B:60:83:54:AB:F7:3E:36:66:87:8C:E3:7C:95:E5:62:0E:AC
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3A2470C4BEB3CF017A0D5E2B472B1BE7A9FC725B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/63db9a47-2a25-46d5-b5ef-0f13fff89258.roa
Signing time:             Sun 28 Aug 2022 00:00:00 +0000
ROA not before:           Sun 28 Aug 2022 00:00:00 +0000
ROA not after:            Wed 31 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:24:70:c4:be:b3:cf:01:7a:0d:5e:2b:47:2b:1b:e7:a9:fc:72:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 28 00:00:00 2022 GMT
            Not After : Aug 31 23:59:59 2022 GMT
        Subject: serialNumber=727a776a46ab08a09a53a453d6594376e72f163879ed0b007509242416192816, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:10:50:f5:c2:e6:d0:f8:c8:3f:d5:7c:74:c3:
                    76:90:c8:09:eb:51:76:94:4a:9a:4a:7b:17:e1:2b:
                    c5:53:b1:57:aa:e2:8e:84:d1:92:c4:e6:bf:f9:66:
                    8e:1a:dd:d3:9c:5a:74:a4:64:7a:f0:72:45:bf:a3:
                    e3:86:47:02:ba:c0:95:0c:4c:57:af:c8:d3:12:67:
                    c4:de:f4:10:77:10:1c:1b:c8:3e:8a:f3:6b:bd:dc:
                    e5:0c:47:22:47:9c:3e:fc:14:cf:fe:50:44:37:a9:
                    ec:74:f2:80:dc:2c:0e:35:ad:a1:e6:d3:43:ff:87:
                    df:64:47:98:31:6e:b5:dc:08:0d:20:fa:84:2e:a8:
                    68:87:e6:8e:6d:cc:61:e5:e6:0e:aa:ab:f8:32:cd:
                    ed:ea:30:47:1f:14:cb:e7:fc:5a:a0:c8:06:38:1f:
                    ad:92:24:b2:8f:cc:a2:89:7a:44:0d:f7:1a:26:e8:
                    e5:92:ef:8a:0e:9a:85:a7:15:fa:cb:ff:e3:7a:e2:
                    33:4e:84:40:9a:2c:44:b3:c3:c3:27:a7:99:d8:bb:
                    87:d7:05:17:a5:db:87:75:65:78:d8:a9:1b:c4:a3:
                    d2:92:26:b7:6c:e7:47:a7:3d:45:f1:c8:87:d0:de:
                    6c:65:c2:ec:21:64:39:78:f6:ef:ef:a0:c9:cf:ef:
                    2b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:87:4B:60:83:54:AB:F7:3E:36:66:87:8C:E3:7C:95:E5:62:0E:AC
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/63db9a47-2a25-46d5-b5ef-0f13fff89258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:92:e5:99:88:38:ef:46:e9:e3:9f:74:d0:fb:14:24:73:01:
         c3:10:6e:15:89:03:db:43:af:c2:c9:11:76:22:49:82:fd:27:
         74:93:dc:34:54:c1:02:6c:68:6f:8f:45:6d:ad:dc:00:f9:70:
         66:b7:75:aa:e7:0a:6a:24:d3:3b:d6:4a:64:0d:32:4d:d8:65:
         61:ea:19:e6:13:6e:b1:25:5d:de:7a:b6:68:34:6a:b7:dc:3e:
         b1:0b:1b:42:94:db:52:78:d6:d3:55:9f:b2:bc:6e:ad:43:a0:
         1c:e7:3a:b2:a9:ef:a5:20:c9:50:77:72:ab:fd:f4:4b:ea:44:
         ff:e2:c3:ab:77:6e:c1:26:e8:c8:5c:50:3c:40:76:c7:4b:fe:
         a7:91:0d:76:21:49:5b:e2:75:0a:d6:9d:71:94:17:a0:79:9a:
         22:e4:e9:e2:b2:1f:e0:56:a3:9c:f8:2a:fa:4f:64:60:10:4f:
         07:c6:22:61:0c:d8:60:9a:14:0d:54:a5:35:5d:5e:d2:13:2d:
         37:81:8f:70:a3:8c:a5:95:44:bf:60:ab:6b:68:a6:e2:16:a2:
         2b:ef:fe:a1:b3:dd:d9:7c:6f:b4:1a:b9:4e:eb:19:c3:be:87:
         ac:95:f4:a4:86:80:a3:b8:3a:a9:cc:93:da:d0:14:96:cc:ac:
         d4:cd:d6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----