Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/85e59667-f2ca-4a6c-b0a9-844252fa835c.roa
File:                     85e59667-f2ca-4a6c-b0a9-844252fa835c.roa (raw, json)
Hash identifier:          4OPDPUJphZgzCJvLL/VTKXmsrViZ57luyFqVolDh12k=
Subject key identifier:   EB:F0:4D:FB:F1:EA:3D:64:2E:0E:81:66:44:A3:AD:7D:48:77:62:59
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       21789B3DB1BB8D139278DD9DBD442DE33791BAF4
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/85e59667-f2ca-4a6c-b0a9-844252fa835c.roa
Signing time:             Wed 20 Jul 2022 00:00:00 +0000
ROA not before:           Wed 20 Jul 2022 00:00:00 +0000
ROA not after:            Sat 23 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:78:9b:3d:b1:bb:8d:13:92:78:dd:9d:bd:44:2d:e3:37:91:ba:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 20 00:00:00 2022 GMT
            Not After : Jul 23 23:59:59 2022 GMT
        Subject: serialNumber=b7344ef3f3ceec7da0e9e03a74c4403d731c767c44ca336059b376d06f731b92, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:12:f7:7a:52:2d:de:1d:9a:d3:4e:6a:29:46:
                    65:c9:6e:0a:01:ba:d3:b1:cf:ce:03:be:14:4c:53:
                    d8:56:9d:ef:6c:7d:45:f6:8f:5f:9a:90:f2:71:d7:
                    06:91:d0:7d:5c:bf:74:cb:78:81:1e:e6:94:2c:e7:
                    c8:7d:08:71:14:80:1e:5b:64:55:28:30:5f:0f:e5:
                    93:a0:f6:9e:44:f0:43:2c:b0:38:06:4e:eb:7d:19:
                    1b:16:70:8d:53:5f:e4:7f:05:a2:30:c4:e5:cc:fd:
                    fb:25:da:34:72:79:29:cb:6f:0f:ad:d3:f6:82:ca:
                    c8:ff:3d:52:96:5e:5f:40:06:9f:7b:12:b9:49:85:
                    9f:e5:33:0c:f6:79:3b:0f:f0:5d:9c:6f:0e:5b:81:
                    fb:36:0c:c2:f6:0a:8a:66:c4:46:ac:da:2f:01:80:
                    9f:d5:50:a8:00:44:4c:9d:e6:a1:31:9b:36:6f:bd:
                    cc:09:b9:23:d2:b4:03:cd:02:55:4d:5c:f3:90:f1:
                    39:5d:b9:91:42:11:f6:8e:8f:ac:2f:27:77:53:ae:
                    37:ca:cf:16:a1:b7:a5:79:f3:12:e7:bb:aa:a7:5c:
                    8b:d2:4c:4f:ac:e4:60:92:1c:ef:85:07:02:b7:54:
                    ea:d2:a5:a1:9d:21:77:eb:c2:f4:6c:f0:41:f0:c7:
                    a8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F0:4D:FB:F1:EA:3D:64:2E:0E:81:66:44:A3:AD:7D:48:77:62:59
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/85e59667-f2ca-4a6c-b0a9-844252fa835c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:ad:75:f7:ed:1b:c3:43:e1:6f:cf:4e:ab:c7:a6:5b:76:c5:
         f5:c1:bb:85:34:51:ea:f4:34:f3:76:fa:74:ac:cc:f1:6d:47:
         cb:6f:a4:48:f8:2d:5f:e3:a0:6c:11:44:62:5b:ee:52:86:9e:
         28:b5:88:0f:3b:7c:82:63:b0:c6:3a:ea:5c:b3:a4:10:6e:ea:
         c4:ac:6b:b2:c4:1b:7a:70:de:68:f8:ff:9f:bc:2d:1b:08:78:
         55:09:af:82:78:19:ec:6c:a2:d5:9a:5a:9c:de:2b:62:01:ed:
         6e:8c:2e:2a:1f:90:18:72:1f:6e:13:2f:74:c6:f8:cf:11:6f:
         24:c1:e0:9a:33:03:dd:87:79:13:df:16:98:88:22:82:ea:ed:
         fa:22:ee:41:48:13:2d:40:96:69:99:24:f0:c2:d4:51:b5:d5:
         72:a9:54:aa:31:30:bc:76:6c:ae:df:bd:1d:63:5f:f2:85:fa:
         1a:c2:06:0e:81:26:d1:61:39:2b:34:ac:0b:bf:e4:fd:f1:01:
         8a:2f:e1:81:bc:36:3a:7a:32:a3:41:c0:6e:02:e2:b1:5f:aa:
         c1:ed:cd:34:ef:ee:33:b9:b2:a7:26:4a:35:e1:9f:19:e4:67:
         51:fe:b1:8d:e5:56:e5:10:ba:6f:89:35:69:a4:da:59:ff:b2:
         ac:57:db:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----