Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/94d6053c-71dd-4467-bed0-a48ef6bdbe48.roa
File:                     94d6053c-71dd-4467-bed0-a48ef6bdbe48.roa (raw, json)
Hash identifier:          RA98meUrsmFrNbP3wEcdKq9EqyuaIhY7Ttf2eDxzNDY=
Subject key identifier:   A0:EA:64:00:87:05:AD:0D:94:AF:1A:D3:8C:8B:D6:F0:DE:C0:D9:4A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6FFEF808A8C1515E332E609E03CAA67173432DB1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/94d6053c-71dd-4467-bed0-a48ef6bdbe48.roa
Signing time:             Sat 20 Aug 2022 00:00:00 +0000
ROA not before:           Sat 20 Aug 2022 00:00:00 +0000
ROA not after:            Tue 23 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fe:f8:08:a8:c1:51:5e:33:2e:60:9e:03:ca:a6:71:73:43:2d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 20 00:00:00 2022 GMT
            Not After : Aug 23 23:59:59 2022 GMT
        Subject: serialNumber=1c94973b4091e9416224f1a705f41912df5a63e16a7953da5d629f020cefa6e5, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:11:6b:7e:53:70:0e:54:00:ca:3d:3b:ff:
                    7d:61:24:cd:d6:ef:af:c3:25:0c:54:3d:60:60:a3:
                    ac:56:d7:61:c5:35:f4:73:e6:91:18:5d:0f:41:ee:
                    b1:6e:3b:78:37:81:5e:20:6e:32:9b:c7:63:b0:b9:
                    0b:7d:be:27:6d:29:99:30:9d:dd:33:97:44:bb:0c:
                    d2:bb:bb:9c:35:47:6d:e9:79:d4:e7:17:7c:55:7b:
                    09:b9:92:d8:7f:35:b4:7c:bd:cf:38:cf:2a:a0:61:
                    75:87:9f:60:91:d2:dc:5f:7f:ab:6b:fc:0e:4e:46:
                    c3:43:2d:bc:6d:97:c7:97:94:74:ca:0d:a1:44:2d:
                    97:06:aa:01:0e:f9:a1:85:b4:d8:1e:f2:c7:e0:c1:
                    3a:fa:ed:f6:8f:e1:98:55:e9:15:57:31:4b:98:9b:
                    7b:fc:0f:f8:d5:c5:f4:bb:22:07:f4:27:bc:25:e4:
                    8b:d7:1c:e8:53:e5:d6:d7:6d:2c:45:f4:19:28:1a:
                    40:e9:9b:2c:a4:36:e5:dc:85:a9:af:ee:97:8e:f6:
                    d7:8c:8d:8d:d7:bf:06:d4:e5:84:2a:87:7f:ff:dc:
                    c7:19:2b:2e:71:d5:26:b2:39:cd:a2:01:b8:b9:23:
                    57:96:83:2e:db:c4:e8:8c:d8:b4:9b:84:42:e9:bc:
                    5b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EA:64:00:87:05:AD:0D:94:AF:1A:D3:8C:8B:D6:F0:DE:C0:D9:4A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/94d6053c-71dd-4467-bed0-a48ef6bdbe48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:79:2b:91:53:ca:da:2d:05:53:6c:e4:a0:0e:a2:c9:51:42:
         b7:21:00:9c:3a:96:60:6e:cc:e5:11:a9:e4:ef:71:d5:a3:b3:
         b0:32:47:91:f8:b7:59:bf:b1:1f:d2:19:d4:5b:1f:bf:20:2b:
         03:8e:08:94:4b:96:94:6d:ad:bd:20:ad:c4:b5:45:ad:e6:a6:
         61:16:2e:87:1e:a0:c7:c8:ad:69:5c:44:9e:a4:6f:33:08:50:
         24:28:3e:61:d0:e7:8e:4b:80:0c:1c:fc:13:b9:06:3c:4d:dc:
         7e:23:04:a2:d2:00:2f:0e:c0:36:8a:12:ed:37:a2:3a:58:ee:
         58:d1:8c:5f:ed:a6:e5:8b:d4:cc:e1:fb:b8:72:e6:f5:90:bc:
         e2:56:d1:7d:36:f5:71:30:ba:6a:01:56:27:77:68:f0:19:35:
         0c:28:6b:41:5c:3d:c6:64:86:4a:0b:3d:fc:c1:52:9a:19:be:
         1e:d2:63:37:5e:e9:be:eb:cc:22:4c:33:11:e8:c2:e8:34:31:
         04:06:fa:37:2b:57:94:a7:2a:e6:6c:30:69:c1:4a:d1:6e:d0:
         ca:6c:21:1e:22:ac:8d:fc:c5:b7:32:f5:b7:ea:d9:b5:4c:61:
         ee:be:f2:c5:c6:45:74:ef:74:a5:97:e1:dc:b2:28:60:88:01:
         2d:05:1c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----