Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6c97ff01-c05d-4bd1-851d-bae59a35e70a.roa
File:                     6c97ff01-c05d-4bd1-851d-bae59a35e70a.roa (raw, json)
Hash identifier:          +GxnQ5XzdoY1ZZmHiE9h+Wmf0dctDk6tzbC+0ujAswg=
Subject key identifier:   AF:CD:83:8D:D9:3B:61:9D:59:52:88:10:1C:E3:E2:78:36:A9:13:E9
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       734A16CDD880BF98F7A0A349AD95DE273268456A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6c97ff01-c05d-4bd1-851d-bae59a35e70a.roa
Signing time:             Tue 27 Dec 2022 00:00:00 +0000
ROA not before:           Tue 27 Dec 2022 00:00:00 +0000
ROA not after:            Fri 30 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:4a:16:cd:d8:80:bf:98:f7:a0:a3:49:ad:95:de:27:32:68:45:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 27 00:00:00 2022 GMT
            Not After : Dec 30 23:59:59 2022 GMT
        Subject: serialNumber=f04d63a577aa4ff142e686936efaa448135cd362a248883b56fce2d70374e148, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:08:cd:fd:cc:b3:82:40:68:62:17:db:d5:db:
                    cb:b6:de:90:77:7d:83:7d:7a:0d:23:ab:55:74:04:
                    65:8b:08:d1:ef:d8:32:cc:0f:f8:94:10:a1:3f:ce:
                    61:ff:5d:89:5e:5a:80:00:db:ab:96:75:1e:82:05:
                    d7:86:1a:24:47:40:20:5e:92:41:36:af:2d:dd:31:
                    44:0f:59:8c:5f:06:a9:a7:49:65:8b:ff:a4:68:05:
                    78:3b:c8:9e:17:ee:b7:78:77:96:96:16:cf:1f:2e:
                    3f:74:70:a3:f6:b2:11:d4:8b:9f:a2:a4:5f:18:d7:
                    1f:69:2a:b5:97:40:1f:38:b8:30:4c:de:8d:13:71:
                    de:91:31:c4:17:8e:12:67:c3:ef:0e:35:38:7d:8a:
                    4d:ed:27:00:7a:ff:cc:92:f7:8f:09:b8:64:33:c6:
                    57:36:7c:f4:2c:44:dd:79:15:71:ff:23:11:51:8f:
                    16:c2:86:e1:56:7a:49:2c:75:11:f5:cf:54:18:dd:
                    32:04:d6:c1:7f:2f:1d:9c:12:4a:4e:a8:a1:53:b3:
                    62:8e:e9:fd:1e:bc:26:d4:3d:0b:9c:3b:99:6e:b2:
                    cf:a6:8a:bc:9d:db:e1:9b:95:39:f3:38:15:82:38:
                    ea:50:a9:fb:e4:9c:92:9b:e0:95:9c:0a:76:ba:bb:
                    ea:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CD:83:8D:D9:3B:61:9D:59:52:88:10:1C:E3:E2:78:36:A9:13:E9
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6c97ff01-c05d-4bd1-851d-bae59a35e70a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:4c:eb:4d:44:83:b9:56:32:09:1e:dc:45:ad:93:11:d8:10:
         bc:18:15:2d:b7:1d:c4:7b:3e:2c:83:c8:bc:4b:11:0c:1e:1d:
         41:0a:09:55:c7:d7:b6:78:71:0a:4f:f0:a2:db:20:a5:b0:ee:
         47:5b:2b:69:70:5a:7a:7c:db:28:ea:fc:05:4b:62:8b:70:5e:
         06:bd:69:72:ba:46:84:f5:44:dd:41:6d:60:a4:ac:6c:53:60:
         58:5a:a0:68:c8:96:fa:bb:92:3f:11:45:70:d7:c7:60:44:ff:
         f1:f5:17:52:b3:d8:d1:69:23:1e:4b:23:32:0d:1c:08:3a:c0:
         f3:6d:9d:18:fd:03:2d:ea:f8:05:99:b3:de:5a:18:e8:d3:46:
         b1:39:c2:5f:af:b9:83:3e:51:c1:56:7f:80:a6:9e:3c:07:7f:
         60:c7:e3:fe:d5:eb:2d:c4:47:f4:5d:59:23:c7:ed:17:ab:97:
         b4:de:00:e7:65:8c:b4:77:0e:c5:83:d9:53:0e:3f:52:c0:4e:
         d1:c9:0f:6f:c4:3e:e2:6b:5f:e7:37:31:ba:74:af:b5:41:fe:
         57:14:b9:ff:de:78:d1:f9:ea:b1:33:32:7c:df:13:87:cc:e7:
         c0:3e:fc:64:d6:30:db:7f:6a:40:41:12:6f:40:7e:7f:36:22:
         b6:e1:79:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----