Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/78d8f11d-00c2-4205-8a04-2c4857d71337.roa
File:                     78d8f11d-00c2-4205-8a04-2c4857d71337.roa (raw, json)
Hash identifier:          uqSIpruAIPZR4iaNKIZeS6GOvnX3l85/mPIfwnxc4AY=
Subject key identifier:   92:1A:11:57:3D:24:15:66:E7:C9:3A:32:D1:D3:65:70:B2:08:2C:EA
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       50506D50F0D47DE89BF7DA7E556CCFA270884E57
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/78d8f11d-00c2-4205-8a04-2c4857d71337.roa
Signing time:             Thu 06 Oct 2022 00:00:00 +0000
ROA not before:           Thu 06 Oct 2022 00:00:00 +0000
ROA not after:            Sun 09 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:50:6d:50:f0:d4:7d:e8:9b:f7:da:7e:55:6c:cf:a2:70:88:4e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct  6 00:00:00 2022 GMT
            Not After : Oct  9 23:59:59 2022 GMT
        Subject: serialNumber=720897cdf45a1bd68607773f4d0df616b31fcada8a5e595df5cbd01d83a60c15, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:ac:fe:d2:47:d1:92:54:1d:c0:c1:2f:79:
                    f9:28:db:ae:9e:bb:59:ad:e7:52:9e:19:37:24:0a:
                    d0:09:2f:3b:96:44:d7:4b:e9:eb:d3:d1:39:8e:23:
                    81:d4:e6:bc:28:a4:ed:49:4a:a8:70:29:bb:1e:69:
                    d7:17:ae:81:12:b8:5d:fa:e8:3a:d0:28:31:c5:9a:
                    61:1c:ab:4d:40:80:67:6d:52:5e:e5:85:22:f1:1e:
                    3a:29:7f:17:a0:49:04:e3:97:18:9a:b9:f0:ed:20:
                    cd:94:0f:af:90:c1:3a:f9:c9:b1:5d:2a:f9:77:ac:
                    ef:6f:55:3c:c8:e5:53:39:55:37:f0:bc:ad:c1:d6:
                    6a:12:06:7b:cd:f3:f9:96:77:28:9f:b6:cf:77:5c:
                    2d:52:1f:71:50:73:10:2e:b0:46:1d:69:c6:c0:e2:
                    90:35:47:67:aa:7c:e5:f6:ec:84:b6:76:38:cd:35:
                    12:40:ef:94:1e:e7:9c:09:61:9e:ca:83:6f:90:bf:
                    d6:c5:1f:ff:32:31:45:7e:13:1f:d1:60:3b:46:1e:
                    17:c4:b6:ea:0d:f5:b6:9a:d6:1b:13:66:c0:36:50:
                    ee:f9:64:a0:20:92:db:18:ea:64:19:76:d9:4b:09:
                    42:2e:ff:04:78:7f:c2:a6:23:1f:9b:41:f1:a0:db:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1A:11:57:3D:24:15:66:E7:C9:3A:32:D1:D3:65:70:B2:08:2C:EA
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/78d8f11d-00c2-4205-8a04-2c4857d71337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:4f:c2:55:5e:7c:60:1a:74:42:86:a9:40:39:6b:bb:50:a8:
         18:d3:f0:27:8a:36:c5:29:17:0f:37:43:22:22:60:51:3f:56:
         83:31:4b:87:cf:6d:bc:56:88:88:6f:d8:3a:78:39:84:7f:75:
         78:a1:25:ba:21:29:3b:3e:ca:e8:2f:67:c8:81:27:f0:49:c0:
         f1:69:1b:47:33:02:c2:b9:45:f5:05:5a:ad:e5:9f:a9:bf:55:
         84:33:ea:65:4d:32:c9:ff:5c:3f:d8:ac:a0:e5:9c:4b:88:51:
         27:ba:5b:7e:bd:8d:2a:5c:d4:e7:da:67:20:e3:78:b2:9e:88:
         1f:a5:a1:84:ec:c3:be:ff:23:d6:df:6d:c8:98:c2:2f:fb:ad:
         21:22:a8:87:55:5a:98:b6:76:52:92:cb:b5:76:43:49:a4:8e:
         01:13:c6:9e:30:34:c4:e8:15:0b:c2:98:69:35:b6:46:92:c3:
         c8:e3:5c:02:f7:0a:1b:35:6c:be:3d:5d:e0:86:88:4c:b0:71:
         ad:f1:26:0d:7a:9d:44:e7:0f:0d:23:ed:0a:c1:52:f3:8b:bb:
         01:76:9b:e1:70:92:06:4a:eb:3f:6e:ee:da:e4:7a:c4:3a:d8:
         9e:db:b2:62:e7:12:3f:39:f0:6f:5f:39:53:c1:df:bc:3c:5b:
         1c:ae:ce:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----