Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/978e599c-3f0a-4994-a878-f4d8fc5f067b.roa
File:                     978e599c-3f0a-4994-a878-f4d8fc5f067b.roa (raw, json)
Hash identifier:          i7FDwJOl74ecH9vCy2H+8jnUdB4nBnOD2DHwmRULhWc=
Subject key identifier:   EF:39:5D:7F:FD:B4:D5:5B:2C:D6:A4:91:7C:00:98:98:A5:66:C6:3B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7AD7B0572FFF368C173FF90F8DE6836D799C4ED7
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/978e599c-3f0a-4994-a878-f4d8fc5f067b.roa
Signing time:             Tue 06 Sep 2022 00:00:00 +0000
ROA not before:           Tue 06 Sep 2022 00:00:00 +0000
ROA not after:            Fri 09 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d7:b0:57:2f:ff:36:8c:17:3f:f9:0f:8d:e6:83:6d:79:9c:4e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Sep  6 00:00:00 2022 GMT
            Not After : Sep  9 23:59:59 2022 GMT
        Subject: serialNumber=b52b0ad8f132d7f4bc1409f9e20a493454de85dd005f54255ebf419cbf4afa40, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ce:af:f8:0e:78:30:8b:3f:f0:e9:bd:c6:19:
                    20:0a:33:e1:2f:bc:96:0a:00:4e:d4:4f:d6:a2:06:
                    2a:17:25:f2:6d:bd:fa:63:9a:05:f9:0f:67:9e:1c:
                    5c:13:75:69:64:1c:bc:1e:9f:b2:e3:2d:ae:91:90:
                    63:46:d6:77:c1:71:c1:27:33:48:02:4f:33:56:15:
                    ab:5e:81:a3:58:a2:32:56:e9:fd:81:4d:68:23:51:
                    b3:4c:b5:f9:1e:33:47:8f:01:06:73:84:af:9c:7d:
                    17:3e:79:3c:a4:8b:c6:42:62:1e:7a:55:26:b7:ef:
                    f8:f0:c1:c2:36:4d:20:70:8a:57:b3:90:c9:1a:9f:
                    2b:62:7a:bc:54:b1:11:39:b3:b7:ed:62:c7:2b:12:
                    ca:36:f0:da:80:ca:1b:e7:6a:f4:27:3e:f3:64:15:
                    e6:3c:8c:da:de:d6:c3:4f:f4:f5:84:70:6c:83:9b:
                    8a:80:e2:07:96:5f:43:fa:2b:ed:33:e7:b6:43:81:
                    12:f0:b0:c7:4e:2b:63:01:1f:d3:b5:21:32:7d:25:
                    49:91:d7:21:fc:da:62:45:1f:2e:af:8e:fa:78:e4:
                    6b:da:1a:ee:4e:e7:08:30:8b:06:62:b3:44:a2:3e:
                    26:ea:af:9f:4c:c4:7c:28:02:ba:6d:1f:a4:da:37:
                    70:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:39:5D:7F:FD:B4:D5:5B:2C:D6:A4:91:7C:00:98:98:A5:66:C6:3B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/978e599c-3f0a-4994-a878-f4d8fc5f067b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:11:3e:78:c4:5a:e9:e1:be:b4:69:77:a5:ba:55:0d:7b:2a:
         7e:84:97:bf:98:2f:ca:98:0c:4e:8f:a9:9d:aa:cd:3b:71:17:
         49:e8:57:35:28:05:59:71:75:1b:ec:70:27:13:06:62:4a:aa:
         3c:7a:c2:c3:c4:56:a3:60:3f:20:a4:70:91:38:0a:6b:26:b5:
         b6:ad:a6:ba:a5:eb:14:34:ee:c8:74:15:25:10:82:37:0e:b2:
         1a:ac:58:4a:6e:0f:3a:a1:e9:bb:62:50:f4:59:a1:fe:70:80:
         b6:85:fc:8d:b7:9a:53:66:e2:ab:b9:f4:c3:09:86:c1:ef:b0:
         c6:d7:7d:95:bf:b3:0b:24:ac:e0:28:70:8c:5a:54:5f:da:4c:
         0c:a1:03:3b:3d:73:d3:e6:95:80:7e:7d:92:d8:e1:69:9f:2a:
         b5:98:70:6c:7b:43:3b:fe:ce:eb:ed:61:d8:6d:82:6f:ea:36:
         3b:05:00:f9:ba:27:5f:f8:44:73:ef:97:81:bd:68:79:4a:30:
         ab:b8:42:69:70:3e:a9:4c:27:6a:00:fd:11:f6:7f:c2:a4:0c:
         5f:a0:19:d8:07:a5:3b:08:2e:3e:61:8f:97:60:8a:7a:74:94:
         81:71:3c:59:05:05:11:a5:b0:31:1a:36:bf:a7:e0:79:73:f5:
         be:1f:85:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----