Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/919e9dce-f601-44c2-b270-e8051030fc4a.roa
File:                     919e9dce-f601-44c2-b270-e8051030fc4a.roa (raw, json)
Hash identifier:          V4joinnD1SJjMRp8lcUAqAsGKrG6WGMWDki7vWOAZ18=
Subject key identifier:   0B:E7:C4:C3:48:26:A8:3C:66:A0:A7:2E:13:C4:01:12:3B:DA:CA:81
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       126B76AC2218FC04B43AC114F35BED8A76054930
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/919e9dce-f601-44c2-b270-e8051030fc4a.roa
Signing time:             Fri 07 Oct 2022 00:00:00 +0000
ROA not before:           Fri 07 Oct 2022 00:00:00 +0000
ROA not after:            Mon 10 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6b:76:ac:22:18:fc:04:b4:3a:c1:14:f3:5b:ed:8a:76:05:49:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct  7 00:00:00 2022 GMT
            Not After : Oct 10 23:59:59 2022 GMT
        Subject: serialNumber=0ee22ec84b0d9c0545c4b646d170db9c893878d07389a85bd193e243858937f4, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3e:19:60:2c:12:ae:a5:eb:31:75:0b:b9:cc:
                    c0:74:d3:2a:d6:cc:1f:eb:d5:92:2b:55:c7:5d:c8:
                    fe:bf:5b:a2:40:d7:f3:63:a2:08:b6:6b:a3:a3:40:
                    75:1e:26:6c:78:04:54:15:31:17:87:2b:14:cd:cb:
                    e2:bd:ee:f8:2b:44:57:1b:30:0f:04:b0:93:49:bc:
                    34:b3:97:f1:c5:05:56:97:f1:e2:3e:16:4e:b3:d3:
                    3d:3d:ae:83:cc:e4:12:20:fe:5e:6f:a1:8b:c6:1e:
                    8f:09:90:bf:39:ce:01:b9:15:cd:b5:d4:c7:c6:3a:
                    6c:a9:11:92:a8:38:01:4d:01:06:41:2d:8b:2a:94:
                    2a:3c:2a:de:9a:41:e0:9e:59:25:c6:45:b6:f0:d4:
                    8d:ee:da:ed:cb:38:bb:16:57:e2:de:76:37:fc:06:
                    ef:26:77:e1:4c:b3:70:70:89:09:f1:fa:2a:cb:ca:
                    7a:d1:e6:b8:7a:b4:24:42:e7:d1:de:bf:88:d0:5a:
                    32:3b:0a:60:f9:42:06:bc:9f:93:b6:0c:fd:44:ad:
                    9b:2d:37:b0:c5:9a:21:e0:b0:1b:28:ed:26:d8:b5:
                    28:e4:5b:e8:3b:fe:50:09:58:95:76:98:bc:55:cc:
                    a0:b8:cb:2a:a7:9d:e8:d0:c5:fd:46:7e:a1:fb:36:
                    67:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E7:C4:C3:48:26:A8:3C:66:A0:A7:2E:13:C4:01:12:3B:DA:CA:81
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/919e9dce-f601-44c2-b270-e8051030fc4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:d9:13:8a:e5:18:22:59:a2:72:84:50:8c:7e:4f:dc:27:39:
         ca:0c:ee:a5:64:66:77:2b:36:40:88:8a:6c:d9:90:de:3d:10:
         1c:49:86:7c:41:a7:05:66:83:39:d8:f1:7a:9c:fa:b6:f0:a1:
         27:85:f5:51:2b:0e:88:32:ed:39:87:5d:4c:71:2e:b7:27:c4:
         03:7a:bb:03:2f:0d:71:83:c9:5a:54:ff:b7:b2:f4:44:12:b1:
         31:84:3a:0c:e9:d9:04:01:78:ba:2e:4b:89:4b:59:38:2d:13:
         f6:1a:eb:1d:46:d1:64:4a:22:ff:21:f4:f9:bb:e2:73:18:8e:
         9b:d3:f2:eb:cb:1f:a7:f3:bc:d5:ff:55:15:7d:65:c6:be:57:
         33:91:fe:58:91:81:d0:5e:0c:e8:c8:7c:43:ad:a4:b9:0b:ad:
         d5:ee:62:16:65:3f:c6:d2:36:50:b9:24:b2:41:6f:7d:ac:01:
         71:36:08:fb:aa:ee:4c:c0:ab:81:c4:18:e0:24:0c:57:71:ca:
         b2:f8:2b:f2:e9:6f:b0:68:0b:c3:0d:16:03:a3:ed:9a:a3:b7:
         a4:99:34:68:11:b9:6a:48:6c:bc:a4:c4:ce:09:72:92:77:5f:
         cb:cf:61:c1:9f:33:dd:5c:cc:35:b7:d8:6f:3c:0b:2b:0b:56:
         5e:65:ba:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----