Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/888a235b-2f08-4fd8-8e6d-9a9ea8234e0b.roa
File:                     888a235b-2f08-4fd8-8e6d-9a9ea8234e0b.roa (raw, json)
Hash identifier:          1TGQyCBWrFZCquGjkvYNKTfbHJME3au9G2DFvH+1T48=
Subject key identifier:   CE:B8:FC:4D:40:41:D1:09:73:47:7D:B7:26:BA:F5:07:DC:80:F8:55
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       749A0A3E0B218CB81E64B4A5CBB2A52F4D5F3C17
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/888a235b-2f08-4fd8-8e6d-9a9ea8234e0b.roa
Signing time:             Tue 23 Aug 2022 00:00:00 +0000
ROA not before:           Tue 23 Aug 2022 00:00:00 +0000
ROA not after:            Fri 26 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9a:0a:3e:0b:21:8c:b8:1e:64:b4:a5:cb:b2:a5:2f:4d:5f:3c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 23 00:00:00 2022 GMT
            Not After : Aug 26 23:59:59 2022 GMT
        Subject: serialNumber=fa9390dcf796963af1417b1ba6479ffb2e77c8c5a99b77aea20c58bfe7f49223, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e2:90:e5:76:33:97:2f:87:34:b1:5a:38:1e:
                    44:e1:a9:72:08:de:48:3b:de:15:c6:aa:8d:2a:e3:
                    4f:e3:be:42:64:54:27:06:3c:9f:b1:1b:f7:b8:e7:
                    24:01:35:2b:02:c4:de:a7:83:81:8f:90:bf:0d:b8:
                    9e:d0:80:e7:10:4c:e2:00:6a:f2:fa:b3:e0:b6:8f:
                    9d:5d:e5:e7:d2:12:c2:95:1c:76:5f:12:71:fe:25:
                    73:42:07:ae:f2:8c:99:c5:b1:1f:68:04:51:5c:11:
                    40:75:09:45:b6:01:29:57:a5:e0:40:fe:84:12:57:
                    d4:77:c6:6e:3f:7f:f4:cf:3f:aa:7c:ba:1d:ab:e6:
                    55:0e:56:6b:87:0c:40:9a:af:dd:d4:f0:7c:1b:48:
                    ca:35:56:0a:c1:3a:84:f7:00:c6:f4:b0:a4:32:b4:
                    1d:a0:c3:92:26:35:94:c0:6d:eb:87:1c:dd:ba:9d:
                    53:a1:c6:5f:db:cf:52:04:07:2f:a8:bc:6b:90:4e:
                    f0:56:07:11:be:36:31:71:d0:00:4a:5e:0d:21:8c:
                    db:b9:70:d1:9c:c3:b0:0f:56:2e:42:bf:a5:11:7b:
                    63:68:e3:d7:28:49:37:ed:9f:c7:28:7b:ee:b2:7b:
                    3b:ac:b6:a3:71:78:d0:5d:96:43:73:de:18:04:72:
                    b3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B8:FC:4D:40:41:D1:09:73:47:7D:B7:26:BA:F5:07:DC:80:F8:55
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/888a235b-2f08-4fd8-8e6d-9a9ea8234e0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:69:b0:03:91:a4:89:65:fc:08:5e:6d:8f:ca:c7:25:51:f1:
         94:c8:2d:92:29:7d:be:19:89:ee:b8:95:f9:c3:76:bc:01:42:
         7c:36:4a:3b:0e:a3:da:1d:d9:fc:a2:c3:02:4d:1d:b8:5f:58:
         66:5e:b8:24:17:89:0b:bb:49:35:f2:93:f4:a8:a1:53:9d:ad:
         2c:d1:99:15:5a:49:be:8a:83:23:10:a8:63:7d:44:30:21:55:
         1f:3c:af:f1:29:da:34:86:e5:64:b9:74:5a:66:66:2e:93:d9:
         67:b9:e1:6b:91:98:55:04:9c:66:7f:e1:e7:bf:8b:b7:17:6b:
         a5:75:06:b4:1f:d4:57:dc:f9:14:36:68:e8:71:4a:ce:0a:c1:
         a4:0b:24:24:23:a7:b5:1b:0d:42:64:f7:22:87:08:08:a5:4d:
         10:91:f3:5e:ad:e3:b8:ed:7f:d3:6c:87:85:ca:a9:b8:ca:66:
         1a:99:3b:c8:aa:69:77:21:6d:31:47:48:24:c5:f8:84:6e:ac:
         c3:5a:29:9f:54:5b:ce:dd:15:e4:45:00:43:e5:af:ca:b8:89:
         c0:20:3a:2a:8e:b8:49:2d:97:e4:fa:21:d5:71:ba:4b:a0:5b:
         d3:58:a0:93:5f:5c:b9:d0:78:9d:f7:96:5d:18:31:8e:9c:c4:
         de:9a:9e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----