Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/83789407-c6c8-4b2d-9d00-2567f1dde734.roa
File:                     83789407-c6c8-4b2d-9d00-2567f1dde734.roa (raw, json)
Hash identifier:          itGhSKi98B6KPPpI7xbNsc/Brnwtf3hS+/3Gj7thgCs=
Subject key identifier:   49:A8:0E:E9:E8:74:90:20:B1:87:4D:23:09:5A:B1:DB:55:04:CE:07
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       10DAA452E19FAFEA9D52D31F2AF4A4EB26D2812F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/83789407-c6c8-4b2d-9d00-2567f1dde734.roa
Signing time:             Sat 03 Sep 2022 00:00:00 +0000
ROA not before:           Sat 03 Sep 2022 00:00:00 +0000
ROA not after:            Tue 06 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:da:a4:52:e1:9f:af:ea:9d:52:d3:1f:2a:f4:a4:eb:26:d2:81:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Sep  3 00:00:00 2022 GMT
            Not After : Sep  6 23:59:59 2022 GMT
        Subject: serialNumber=83b97f28c9662fd4fb21e81daf8bda56379007008332b9fa63733bd9da266cf7, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:6a:e4:b8:d6:83:89:f9:23:e0:76:d3:28:
                    0f:7c:20:66:8b:e2:4e:d8:9b:4f:56:50:64:7c:40:
                    dd:88:fd:c7:b3:4d:4f:7d:09:35:63:e1:6f:74:63:
                    48:fa:35:d1:fb:b9:6b:0b:68:ef:17:6e:91:1a:a5:
                    7a:48:2e:5f:f5:4b:99:bd:44:dc:9a:10:e6:2d:38:
                    d7:19:fc:ad:9e:17:fe:e1:79:bd:00:ac:7f:e8:ac:
                    2d:33:96:f1:64:d8:78:1c:a2:30:86:b2:a2:f9:b7:
                    c6:d2:42:86:f9:cc:7d:b7:a4:86:ec:07:12:3e:75:
                    47:27:56:8d:19:fb:12:5d:93:57:59:30:d2:c7:33:
                    a5:bb:25:02:5a:af:da:27:01:74:13:9d:16:82:f2:
                    06:02:f0:62:3a:e6:64:04:71:65:c8:ed:78:af:e7:
                    e3:d4:06:36:9c:ff:01:62:96:9d:42:b9:17:66:73:
                    4a:0a:32:1c:4f:06:7b:73:3a:3d:fe:8e:df:8b:1f:
                    c0:56:7b:14:f8:cc:7c:65:b8:08:1a:22:4f:b9:f1:
                    f7:c2:6e:0e:f7:a6:e7:ac:67:09:53:90:02:d0:71:
                    ac:a6:42:03:91:d6:8c:d3:dc:8d:d4:58:9f:da:06:
                    d2:84:8e:ee:27:e6:71:89:12:d0:b8:6f:3c:c5:bd:
                    34:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A8:0E:E9:E8:74:90:20:B1:87:4D:23:09:5A:B1:DB:55:04:CE:07
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/83789407-c6c8-4b2d-9d00-2567f1dde734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:9b:7e:0d:54:ce:9e:38:39:e8:35:f5:60:0a:bd:46:c8:1b:
         6f:b7:0f:7b:59:b7:f3:73:0f:dc:d7:d9:0f:61:c7:8f:ea:8d:
         a8:47:35:ae:98:a7:cc:a1:fd:f4:a1:23:04:5b:4d:cd:33:25:
         25:05:83:c2:70:81:d5:e2:21:e5:50:87:d8:be:fc:3a:0a:02:
         b4:32:da:1c:3e:a6:9a:71:d5:55:89:2a:4e:14:d1:78:0b:39:
         72:b0:c9:9f:0a:9a:63:34:53:3e:5b:1d:ae:cd:29:9d:64:3b:
         1b:a1:75:46:f8:8e:05:67:f5:6c:dd:f3:a5:43:4a:89:e3:ad:
         a5:4c:b3:44:0e:d7:b7:d1:fd:b7:bd:d8:2a:22:ec:52:c9:17:
         9c:92:65:f8:aa:12:99:9e:69:64:fd:4e:75:8e:b9:88:96:b5:
         b0:9c:d1:c5:47:84:49:ea:48:0a:c3:4b:dc:8c:c9:61:87:cb:
         e0:b9:66:5b:66:73:b7:8b:d9:65:76:e0:89:ae:43:a0:a5:56:
         90:7c:07:a4:7c:16:41:c7:9b:e1:68:76:9c:be:5e:cf:4a:68:
         9f:01:c7:7c:47:37:f2:23:dc:ed:73:0a:3b:0e:0a:e1:c9:22:
         03:3c:22:47:34:9f:20:ac:41:45:b3:7d:4b:45:0d:64:91:bf:
         41:45:de:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----