Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/79185bc8-c43e-4596-ad5e-8c541ca1241b.roa
File:                     79185bc8-c43e-4596-ad5e-8c541ca1241b.roa (raw, json)
Hash identifier:          CcwG501eJTRitW1so1Hs7INlIsoq4itQ9xG5EH6cWPA=
Subject key identifier:   81:4C:9E:1E:75:99:59:BD:6C:07:EC:E2:97:3E:95:CC:4D:2C:A5:E2
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4AD3F9EE1105D5022555D01A9A25876460E6A4D8
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/79185bc8-c43e-4596-ad5e-8c541ca1241b.roa
Signing time:             Sat 20 Aug 2022 00:00:00 +0000
ROA not before:           Sat 20 Aug 2022 00:00:00 +0000
ROA not after:            Tue 23 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d3:f9:ee:11:05:d5:02:25:55:d0:1a:9a:25:87:64:60:e6:a4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 20 00:00:00 2022 GMT
            Not After : Aug 23 23:59:59 2022 GMT
        Subject: serialNumber=3d51aab4896b8bc9cb2b9f6639452a166d6700e42d169b17dcf381b55f422922, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:80:6a:cd:5e:ca:c4:30:1a:08:9a:79:08:
                    7a:cc:7e:db:d8:40:1b:03:95:14:5e:3c:81:b9:38:
                    26:a5:de:ed:d2:29:85:2b:f7:21:30:19:73:71:23:
                    93:71:89:eb:03:3f:c1:a3:99:23:aa:f8:6a:60:9c:
                    2d:5a:77:2d:05:16:02:61:c1:75:b1:9a:bf:31:fb:
                    67:5e:5b:4d:c2:a0:94:2b:3c:a6:65:a2:8f:be:61:
                    7f:66:1d:e5:f6:5e:4d:83:ff:2f:c2:9b:48:55:20:
                    27:23:bb:49:63:bb:9a:0a:03:66:a9:a6:bf:b5:fb:
                    02:37:fa:17:ea:23:ad:4f:e7:4a:95:43:08:2f:c5:
                    7a:b6:f6:84:c3:5c:c3:7b:78:12:82:40:64:ca:0f:
                    1a:98:9d:5c:b3:8a:02:d1:2e:2a:cb:ae:e8:64:72:
                    7e:99:50:c2:bd:78:69:c1:23:29:0a:aa:c9:9e:e2:
                    83:18:58:3d:a1:7f:fa:fb:7d:3a:b1:b5:e5:f3:cc:
                    5d:07:f0:3a:68:56:ea:37:bc:f4:24:6a:20:06:51:
                    0a:8d:d8:f1:6e:ee:62:c0:5e:f0:f2:95:59:71:e8:
                    56:47:44:83:58:ee:aa:e2:56:63:6e:3b:85:f6:93:
                    95:af:20:20:d8:15:61:e2:23:c1:88:92:96:f6:a1:
                    fd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4C:9E:1E:75:99:59:BD:6C:07:EC:E2:97:3E:95:CC:4D:2C:A5:E2
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/79185bc8-c43e-4596-ad5e-8c541ca1241b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:94:77:3a:6e:46:54:96:47:eb:19:bb:6c:6d:49:31:ff:52:
         1e:f3:d0:78:81:f8:f8:54:96:e3:c0:9a:94:79:65:a8:86:52:
         39:82:cc:36:dd:5c:5e:b7:a0:69:c9:3e:fb:cd:47:37:b0:d3:
         e4:45:70:55:d4:3a:0e:e4:28:e7:11:d8:e1:76:e9:f4:05:2b:
         6f:2f:c3:a5:a8:7e:64:46:6e:eb:83:4c:86:ae:a3:1f:9e:1f:
         ff:de:f7:aa:18:0a:b6:9c:9a:fe:76:fb:b3:38:7d:0c:9b:d4:
         d6:77:c1:e1:9a:2f:0a:7c:19:ed:c3:aa:3b:d0:c0:ac:aa:84:
         b9:96:2c:9e:d8:58:c6:5b:36:e7:fd:f1:ac:5e:e6:8d:84:9b:
         1b:f4:ab:f9:80:38:a3:b5:a5:09:89:78:67:70:08:7e:9a:15:
         ee:b1:b1:be:ac:9a:00:5c:ed:44:9f:d9:87:ac:71:c7:f2:3c:
         78:b4:bf:0e:d6:06:05:12:49:55:28:a8:ad:e9:bc:7f:5d:dd:
         3b:84:ce:00:11:e9:30:45:24:f8:52:7c:f9:3f:40:d5:92:78:
         fe:11:b7:74:ec:77:1e:25:79:07:b7:10:a6:2e:47:37:04:4f:
         83:67:3d:5c:53:31:da:32:8c:e3:bd:ef:71:7e:6c:a6:ce:78:
         43:40:f8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----