Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/853fabe1-b20b-4633-a267-2ccb54e39cb1.roa
File:                     853fabe1-b20b-4633-a267-2ccb54e39cb1.roa (raw, json)
Hash identifier:          WKoAoF7VV5cf5idqjI0fmJEpzMIVkSC0dadNV/WM9UA=
Subject key identifier:   32:E0:95:F1:8B:2C:AE:49:C1:43:EA:76:07:4F:9F:12:EB:42:6D:D1
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6CE5B3C6CD2BF393C31182277580B9DADDE8E0BC
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/853fabe1-b20b-4633-a267-2ccb54e39cb1.roa
Signing time:             Wed 20 Jul 2022 00:00:00 +0000
ROA not before:           Wed 20 Jul 2022 00:00:00 +0000
ROA not after:            Sat 23 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e5:b3:c6:cd:2b:f3:93:c3:11:82:27:75:80:b9:da:dd:e8:e0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 20 00:00:00 2022 GMT
            Not After : Jul 23 23:59:59 2022 GMT
        Subject: serialNumber=d65eef53937f0ca829b83b32ac25ba598ad37916691c0f4e4016a6169fc08e2f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:05:f0:1a:bb:27:30:f8:6d:15:23:ba:d8:96:
                    0c:cf:e4:01:37:8f:3c:28:1d:df:b7:a2:b0:93:b4:
                    4f:2f:94:31:74:bc:18:90:b9:73:2f:aa:3c:5b:3c:
                    bd:c0:55:17:54:f4:e1:1f:dc:2f:42:a4:d6:e9:85:
                    f2:a4:40:29:e6:85:9b:83:c9:0a:63:90:af:e2:aa:
                    73:e5:c3:ab:bb:a5:e6:da:44:9f:16:da:d7:d2:21:
                    53:4a:71:d0:e4:ff:d3:d1:e7:a4:8d:f2:f2:22:3f:
                    5f:aa:68:e5:db:7a:ae:46:22:b0:6f:40:ee:9b:00:
                    df:01:6a:2b:b7:80:f2:70:a8:9e:02:57:d7:7d:77:
                    57:41:4f:84:44:ef:8b:17:74:9e:24:74:0b:70:1f:
                    0a:8d:3b:32:8d:3e:07:38:59:4f:07:c2:ea:b6:b0:
                    08:43:46:a7:3d:d1:9f:70:d3:7b:f7:5f:88:ea:05:
                    03:3c:1c:c9:a2:cc:ec:0a:39:fd:ac:5d:02:9a:cd:
                    76:cd:a4:a9:14:21:f1:90:30:07:ad:6c:52:b2:0b:
                    d5:88:36:5d:20:c4:29:6d:6c:4a:cb:17:42:4c:6f:
                    a8:6b:5c:0a:ed:8f:bf:44:46:af:9c:22:21:56:c5:
                    f0:11:2e:0d:34:16:46:13:97:e5:b3:96:88:4f:c5:
                    1b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E0:95:F1:8B:2C:AE:49:C1:43:EA:76:07:4F:9F:12:EB:42:6D:D1
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/853fabe1-b20b-4633-a267-2ccb54e39cb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:32:0e:13:f6:9a:32:b5:4e:5b:08:06:39:69:00:53:17:b5:
         2e:da:03:08:ff:be:c8:e5:b2:e1:d3:74:db:d8:e5:31:28:17:
         db:3d:b6:44:e3:fe:b8:40:e7:f0:41:1a:3a:f6:cf:d1:2b:bd:
         86:32:30:50:c6:bc:39:cb:b4:d3:0e:52:c1:15:4f:53:ba:4d:
         55:8f:1c:6a:fb:9c:0c:4b:f4:06:9b:47:d8:42:0a:1d:8b:bd:
         fe:10:46:a4:8e:cd:50:3b:51:24:a7:27:22:7a:b7:06:f9:fb:
         c4:d9:ae:11:ba:a0:88:08:11:88:fe:c7:ca:f0:86:17:d1:ca:
         0f:70:7b:44:e1:ed:5d:7f:21:41:a7:7b:d1:5a:2b:80:f0:63:
         d3:d9:0d:98:31:2f:e1:fe:e2:04:be:f8:69:a0:1f:3b:cf:e7:
         7c:92:02:47:bd:4f:1d:7d:a5:48:74:60:02:d2:fe:f8:76:5e:
         d1:ba:6b:a3:fe:9c:44:79:40:66:49:af:ca:b9:44:61:8b:3a:
         e4:ae:31:44:11:8d:49:84:4c:ea:56:19:e5:7a:4c:cc:6d:7d:
         73:8c:f3:b7:27:db:80:83:5e:87:03:13:04:41:22:c8:56:34:
         31:47:d2:cd:bd:b3:b2:fd:45:02:a8:f3:d6:b6:95:7f:d4:b9:
         1d:a7:cb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----