Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/93442e96-ab29-4895-8d02-5643671c520d.roa
File:                     93442e96-ab29-4895-8d02-5643671c520d.roa (raw, json)
Hash identifier:          FNslfUT2jwMX/wAt4g01WudOT3b/yLCuO/7aP4qXUnE=
Subject key identifier:   DA:24:D2:EA:03:DE:9D:B9:6B:0C:D1:C1:14:53:78:C4:B9:58:C4:B2
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       556F76AC0B10C51DFE146E26D44259DB22555C95
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/93442e96-ab29-4895-8d02-5643671c520d.roa
Signing time:             Mon 29 Aug 2022 00:00:00 +0000
ROA not before:           Mon 29 Aug 2022 00:00:00 +0000
ROA not after:            Thu 01 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6f:76:ac:0b:10:c5:1d:fe:14:6e:26:d4:42:59:db:22:55:5c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 29 00:00:00 2022 GMT
            Not After : Sep  1 23:59:59 2022 GMT
        Subject: serialNumber=74c9073d15f4fb1b42f1d93246d148d3a57ee010e3faf03e3aaaf67733301fac, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:42:05:fc:23:8a:4b:d3:61:54:c6:97:df:9e:
                    4d:86:5e:12:e9:be:4e:52:b9:d6:3f:df:d2:da:d8:
                    1e:aa:c8:bc:b2:ed:51:09:ce:48:50:3c:b4:78:5a:
                    a9:d5:83:24:cc:18:5e:5b:b7:f3:d1:cc:68:ee:84:
                    45:a6:89:4c:98:8c:56:4f:76:2d:c6:db:b4:cb:b8:
                    43:aa:e5:a6:a4:4d:36:70:dc:94:66:0b:3f:e2:01:
                    6e:d2:b8:b5:d2:c5:59:56:f2:8c:21:40:61:77:69:
                    05:16:ca:8e:8e:a8:45:5e:de:56:4f:c4:4f:56:25:
                    5c:a5:8b:90:cd:84:50:d0:17:8e:54:d7:8d:ae:cb:
                    67:29:25:1a:66:aa:2a:c7:bd:a1:81:55:f2:05:cf:
                    f8:dc:ce:c7:f9:31:43:d2:7c:a1:26:72:df:24:90:
                    e9:c5:79:bf:39:63:27:ab:0a:8d:09:50:0f:1a:5e:
                    38:a8:a2:ac:1a:93:8f:f5:54:f3:a5:3f:3b:9f:a0:
                    67:d6:dc:d7:8a:7f:1b:d1:18:57:5d:ee:28:87:00:
                    79:fb:5f:d4:e4:7e:20:17:f4:25:8a:20:20:8d:65:
                    d0:2f:96:e3:6b:66:9c:bd:34:23:a0:1d:42:d6:63:
                    37:85:83:cf:55:b6:7d:25:aa:90:9e:da:d3:8f:3b:
                    97:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:24:D2:EA:03:DE:9D:B9:6B:0C:D1:C1:14:53:78:C4:B9:58:C4:B2
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/93442e96-ab29-4895-8d02-5643671c520d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:49:a1:eb:94:f6:d4:2d:63:e2:7c:cd:a7:f4:c7:b2:4d:19:
         ba:ab:8d:8d:83:95:b1:dd:02:91:40:b0:41:59:94:a5:eb:cf:
         fb:b2:0d:94:9a:f9:c7:ec:c0:c2:71:dc:dc:90:5b:ed:80:c3:
         a6:01:9f:ac:da:3f:b0:9d:21:12:10:ab:3a:58:79:0c:13:02:
         c1:4b:f8:c6:7d:ce:ac:06:48:64:36:54:0e:c1:8a:33:a1:90:
         6a:ff:a3:ef:a2:4c:42:95:cb:9e:66:7d:6b:6d:c5:26:b1:ac:
         a4:ca:41:6d:8b:39:49:71:3a:34:3f:e3:9c:21:88:51:db:0e:
         7c:63:61:78:2a:7b:9e:ef:ea:52:b7:02:ed:08:69:2d:b7:0d:
         43:3a:dd:2e:0e:d2:88:69:15:df:71:03:30:0b:ee:84:91:58:
         92:cf:43:ac:e7:06:db:60:62:be:56:c1:1e:bd:77:f4:d2:c7:
         f8:00:c2:5a:00:6b:31:98:ec:d1:0b:be:97:4d:90:5f:d5:ef:
         b5:a4:ff:ba:15:4f:bf:6a:89:0d:78:69:79:f7:f1:15:ca:20:
         84:61:f0:ba:fe:2c:8d:8b:40:83:b8:7b:b4:e2:67:c9:18:ca:
         14:c6:5b:58:e9:be:d2:e6:f7:f9:dd:02:a0:42:2a:dd:98:71:
         0a:79:b9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----