Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6d32ac7f-8629-4b3f-a029-ebc0247c2a31.roa
File:                     6d32ac7f-8629-4b3f-a029-ebc0247c2a31.roa (raw, json)
Hash identifier:          jQau11LekQk6Zx0M/7YJX6li44uDaXixIiofsGFKJZw=
Subject key identifier:   18:BC:03:EB:D1:53:9E:E6:51:3E:03:4A:9D:18:C8:29:03:B7:47:96
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       437041DC0D65985764DB1681890E89FAD1AA2189
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6d32ac7f-8629-4b3f-a029-ebc0247c2a31.roa
Signing time:             Thu 20 Oct 2022 00:00:00 +0000
ROA not before:           Thu 20 Oct 2022 00:00:00 +0000
ROA not after:            Sun 23 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:70:41:dc:0d:65:98:57:64:db:16:81:89:0e:89:fa:d1:aa:21:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 20 00:00:00 2022 GMT
            Not After : Oct 23 23:59:59 2022 GMT
        Subject: serialNumber=622ca2ed24eea246782f4890af869028cd2f336864dd19f4666d9bb05f2d49d4, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:c6:c9:19:5a:7d:74:76:b9:63:12:c6:6f:
                    82:7c:be:ae:88:ec:94:6f:65:4e:e4:a1:54:8b:3f:
                    37:5f:a3:a4:e1:94:43:10:e5:f6:6e:2b:b7:6e:fb:
                    78:75:fe:10:c4:13:6f:ce:27:ff:9d:a4:1a:01:03:
                    1c:e2:55:54:16:3b:20:3f:73:05:45:5f:2b:94:39:
                    07:f4:00:36:0e:83:16:31:04:d3:54:cc:2e:56:69:
                    8f:42:f0:ec:84:d0:68:aa:a2:f7:d5:c3:2a:30:91:
                    3c:f8:2b:fa:fc:15:7a:93:8e:59:4e:8e:c5:49:bb:
                    59:7f:62:ac:9f:6d:7e:fe:ec:a7:b1:a7:7c:c0:d9:
                    95:58:ed:4f:3d:b6:54:91:53:ef:18:23:95:46:ad:
                    f9:54:74:45:06:27:8f:6f:72:49:a5:0d:9e:d1:73:
                    b0:f1:4d:43:e9:ad:69:23:8e:25:17:bd:76:6d:0c:
                    67:e6:73:b6:66:3b:59:a7:46:f1:90:1e:12:0e:7c:
                    bc:9c:0b:78:9f:c3:5a:fd:b9:57:c5:0e:cf:e0:22:
                    05:d4:4c:2f:1e:fe:34:56:6b:be:45:1b:c2:69:b6:
                    55:f3:d5:96:ed:fb:f6:9f:a5:8a:9a:42:81:3e:e0:
                    a1:3a:6e:4f:a8:7b:11:94:f4:2c:28:c3:46:11:d0:
                    99:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BC:03:EB:D1:53:9E:E6:51:3E:03:4A:9D:18:C8:29:03:B7:47:96
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6d32ac7f-8629-4b3f-a029-ebc0247c2a31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:0c:cb:8d:ce:cf:d9:95:fa:4b:32:5a:1a:10:44:ec:bc:3a:
         9f:61:8b:fa:28:73:d3:53:5c:16:bc:be:ac:30:73:1d:7e:b0:
         c9:22:1e:33:90:27:46:ca:a3:19:5f:47:7c:57:12:16:3b:44:
         8a:d2:fe:2a:42:d7:22:cf:4b:c8:36:fe:2d:b7:a3:ef:9c:be:
         db:3e:5a:f5:ca:3c:bc:28:9a:69:4e:c6:37:5b:a5:c6:75:7b:
         30:8d:88:16:d6:2f:3d:60:17:3e:c2:f1:58:b9:39:6e:f1:06:
         dd:a0:e6:67:c2:83:51:7d:60:63:9a:38:a1:7d:24:3b:c0:12:
         2a:37:6c:03:74:0e:8f:a0:55:d1:5a:d1:68:2e:c6:82:fd:f8:
         75:1a:42:9a:27:8f:5a:0d:d6:4f:92:b2:95:4e:39:78:7d:22:
         7d:68:af:86:77:39:ce:48:0e:a7:c4:6d:52:8c:7c:e4:34:67:
         6c:40:64:ff:5b:8c:b6:3b:df:58:9f:bd:cd:14:b7:39:7a:d3:
         df:5a:ce:5f:f2:bc:6e:e2:be:a2:2a:11:32:a6:98:17:c2:33:
         dc:2c:9a:e2:75:6a:3e:a8:a8:e8:cb:c8:58:27:5b:4e:55:f1:
         33:ab:17:13:00:40:68:c4:69:0a:49:16:0e:c6:02:88:fc:95:
         eb:f5:15:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----