Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6d0dd237-065c-4ddd-a4ae-469c129c6d0a.roa
File:                     6d0dd237-065c-4ddd-a4ae-469c129c6d0a.roa (raw, json)
Hash identifier:          rJefFT2YObhnOZGHbNYLQOL3EfbdGEH1M7tAf23x1LQ=
Subject key identifier:   F7:3A:DD:76:E7:35:8A:EF:CA:FB:AB:86:83:33:95:A6:BF:A9:F8:0B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1A0DA7FE855FE0C3A1952DE124A93F13149CA3B1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6d0dd237-065c-4ddd-a4ae-469c129c6d0a.roa
Signing time:             Thu 01 Dec 2022 00:00:00 +0000
ROA not before:           Thu 01 Dec 2022 00:00:00 +0000
ROA not after:            Sun 04 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0d:a7:fe:85:5f:e0:c3:a1:95:2d:e1:24:a9:3f:13:14:9c:a3:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  1 00:00:00 2022 GMT
            Not After : Dec  4 23:59:59 2022 GMT
        Subject: serialNumber=b6b0076d19d57c55da86c09361fad946493bf88ab8e338f65131e92babf094e7, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e0:65:ad:c5:6f:3a:de:52:85:06:45:d0:d0:
                    45:cb:ae:bd:01:26:da:a6:8b:5d:93:56:e9:f3:ca:
                    28:85:34:ff:c2:05:8d:94:ac:ab:08:00:61:28:1d:
                    0a:e4:3d:08:52:90:be:4f:36:7d:78:70:eb:d9:96:
                    40:1f:83:a5:48:5a:94:45:ae:40:dd:be:f9:11:95:
                    51:55:fb:4b:2f:f6:05:9c:fd:dd:31:03:c4:eb:49:
                    57:8a:b3:c6:ce:5d:c0:79:9a:fd:af:28:f4:58:66:
                    f4:e8:92:8b:dc:58:b6:d7:23:2c:e1:5a:25:68:b0:
                    1f:c6:e6:3b:e2:8d:c9:3b:8a:50:69:f6:19:c8:7b:
                    ba:a0:80:83:7b:b2:8d:8e:bb:c7:29:c4:46:11:9e:
                    72:f5:9a:21:7c:c4:04:b5:cc:8e:b5:d5:d7:5b:23:
                    bc:f2:ed:91:bd:e4:ef:86:e9:2b:b0:4a:2a:f0:86:
                    ca:28:9f:03:69:4f:15:11:82:af:d2:ae:9a:f2:77:
                    1b:4d:39:a3:24:65:52:44:32:bb:56:0a:2b:81:5e:
                    6d:53:b8:1e:cf:97:40:b8:37:a8:a4:30:af:b2:35:
                    41:af:65:5c:4f:1e:4d:24:a9:91:79:5b:ef:73:3e:
                    c4:e3:56:c5:97:52:af:b7:7d:bc:c7:73:b5:e9:78:
                    67:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3A:DD:76:E7:35:8A:EF:CA:FB:AB:86:83:33:95:A6:BF:A9:F8:0B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6d0dd237-065c-4ddd-a4ae-469c129c6d0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:5c:87:96:77:b6:e5:3f:db:55:b8:6f:1b:d8:d9:75:3a:cd:
         ab:5d:d8:b0:63:b8:e1:46:bc:03:8b:69:0c:5a:b9:af:65:8b:
         8c:1c:be:76:52:c4:67:7f:bb:6b:6a:ae:8f:a2:61:37:ba:f8:
         5f:50:90:91:38:04:ad:20:ec:cb:7d:f2:fc:f1:d5:46:d2:d9:
         09:2c:82:09:df:a3:f8:b8:ba:64:ca:d0:fc:d0:2d:95:e2:47:
         eb:42:4c:ac:b8:1a:cc:00:8d:87:a7:e8:4a:c4:5a:5d:59:75:
         e4:eb:9c:2a:7f:f1:13:c7:80:b6:2e:be:77:5d:0f:c3:f0:ec:
         54:83:f8:49:5d:8f:70:45:63:ce:e1:64:6c:40:e8:c0:67:27:
         fc:d6:c3:11:58:68:ef:ad:2b:59:d9:4a:08:a7:0f:c4:0a:88:
         c5:28:12:f9:8d:6b:15:01:8f:cf:d5:bb:7b:15:8c:73:c0:19:
         ae:ca:92:fc:65:d8:3b:76:6d:74:b0:f0:2f:67:57:71:44:4b:
         ec:10:db:9e:e0:51:6a:d6:04:49:ab:cf:5e:a1:5e:1a:1c:b8:
         d9:0f:27:a2:17:fe:b4:eb:af:71:c0:67:97:e1:bf:c1:b4:0d:
         02:a4:bb:23:fa:7c:11:21:68:77:e8:eb:76:ac:fd:48:32:1b:
         30:bf:59:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----