Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/72726fa1-0762-49ff-96f9-40c38ca4238c.roa
File:                     72726fa1-0762-49ff-96f9-40c38ca4238c.roa (raw, json)
Hash identifier:          m9ypw3ENOzwNW9HqjHllBM8vba2vNTaVNYKS0fj5BnU=
Subject key identifier:   C5:85:AA:FA:41:3F:15:72:1C:BD:2A:7C:6C:43:9D:1D:C0:7E:14:D7
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4531AE398B072781C1C44B86F12321D343C3A205
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/72726fa1-0762-49ff-96f9-40c38ca4238c.roa
Signing time:             Tue 13 Dec 2022 00:00:00 +0000
ROA not before:           Tue 13 Dec 2022 00:00:00 +0000
ROA not after:            Fri 16 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:31:ae:39:8b:07:27:81:c1:c4:4b:86:f1:23:21:d3:43:c3:a2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 13 00:00:00 2022 GMT
            Not After : Dec 16 23:59:59 2022 GMT
        Subject: serialNumber=3e7ddd8c79aebdd9d6b45edd1ae109d5344200992dbc99afa3c57185d1fdb96c, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bf:d9:66:f4:cb:d4:36:94:8f:a2:07:98:39:
                    d2:6f:5c:0e:49:44:32:0d:b1:e0:6b:33:ba:fd:35:
                    57:a7:78:47:e2:53:3e:01:51:e9:6f:00:35:07:47:
                    62:85:03:38:73:f2:67:a5:d8:45:d8:43:58:73:13:
                    50:3d:dc:7e:36:42:e7:4c:d4:4e:dd:9e:b5:38:16:
                    2c:98:0a:89:f2:72:3e:b3:8c:cc:1c:46:f8:7d:7c:
                    e1:ea:02:53:2a:ff:cf:6d:8b:39:5f:56:5c:fd:49:
                    d0:3b:0d:d8:42:91:4c:7f:39:82:34:5a:da:6c:30:
                    ea:14:7b:e3:ad:96:39:73:4f:14:17:a5:aa:9d:a2:
                    48:79:31:13:6c:e2:b3:80:35:15:f7:66:30:e0:f1:
                    d8:03:6e:66:b8:91:58:38:43:0b:dc:12:cd:6e:f1:
                    a8:8a:b9:97:e9:77:4f:0b:18:47:6d:bb:53:0c:0e:
                    93:b7:ad:db:94:94:17:64:bc:14:2a:48:61:22:93:
                    6a:5c:c9:43:3a:29:51:7b:ca:c2:0a:72:e3:e7:e1:
                    70:f0:91:cb:bb:35:c2:dc:4d:2d:a7:46:91:db:e7:
                    e4:f4:57:14:f5:89:de:6c:ce:8a:59:49:fb:7a:fb:
                    e8:85:8c:4c:f6:9d:8d:ce:c3:0f:90:6b:cf:4d:6f:
                    4e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:85:AA:FA:41:3F:15:72:1C:BD:2A:7C:6C:43:9D:1D:C0:7E:14:D7
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/72726fa1-0762-49ff-96f9-40c38ca4238c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:bc:86:bd:08:09:fa:70:e5:58:cf:47:13:74:8d:33:6c:a0:
         8f:c5:dc:3a:3c:16:3b:fe:0c:94:2d:42:1f:f1:c5:db:d2:f8:
         7c:a9:40:77:f6:b0:d9:07:dd:ce:bc:93:fe:f6:68:81:9d:8c:
         3a:ff:ae:a2:9a:b0:0c:2a:91:6c:e4:a5:08:3c:c5:ef:1d:12:
         2a:dd:0d:90:69:00:e1:94:ba:a1:de:21:d1:e9:22:75:75:7c:
         8b:5d:f3:4f:e5:bd:47:66:6b:92:65:5c:e8:24:f6:68:f0:06:
         7d:4d:a6:bb:0f:22:51:5f:a6:80:79:c4:1e:59:57:ae:c1:9e:
         bc:8f:71:15:39:3e:b2:51:1b:89:56:6d:d1:30:22:53:e7:ba:
         18:7c:c4:76:03:ef:42:96:cd:84:69:d1:36:bc:1a:93:75:9d:
         60:ff:71:3a:e8:ba:48:a0:0a:40:14:91:3c:82:28:89:91:f4:
         1c:c4:d3:2a:a2:62:c2:9c:a6:bf:c1:5e:8d:af:22:1e:3c:bc:
         da:5b:ff:b4:4d:7b:58:4b:d1:ba:fb:37:60:17:40:f7:b6:97:
         f7:87:60:e2:03:d9:0d:53:2f:7d:bb:e3:ac:fa:f8:79:11:bf:
         fb:eb:af:8e:1e:1c:89:b7:38:19:49:ef:52:78:67:b1:f3:f9:
         4b:3c:85:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----