Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9d387b4a-005e-4b61-a343-8e5af7a9df69.roa
File:                     9d387b4a-005e-4b61-a343-8e5af7a9df69.roa (raw, json)
Hash identifier:          S+19WPQ0FgZuexL4wt3O4a4mBXkoOGmsu6TlhJYtlUc=
Subject key identifier:   88:D4:F9:38:AD:CF:A0:D7:AE:A2:2E:0F:3E:B4:62:F7:81:A7:77:BC
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       336148A032A1223921AD1CC924CC0A3BCCFE17AF
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9d387b4a-005e-4b61-a343-8e5af7a9df69.roa
Signing time:             Mon 11 Jul 2022 00:00:00 +0000
ROA not before:           Mon 11 Jul 2022 00:00:00 +0000
ROA not after:            Thu 14 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:61:48:a0:32:a1:22:39:21:ad:1c:c9:24:cc:0a:3b:cc:fe:17:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 11 00:00:00 2022 GMT
            Not After : Jul 14 23:59:59 2022 GMT
        Subject: serialNumber=2289ae5fe37e80276f4c4ad6ff99d7e0907ffd7c7d67ee434a14067fff963f92, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:b7:f8:bb:2b:42:7f:d5:46:b8:2e:e2:ba:
                    e5:84:6e:6b:e0:b8:83:42:fc:0b:79:38:a0:e0:ae:
                    75:ab:c8:bb:60:e1:fe:dd:8e:30:fc:58:df:4e:91:
                    e5:2f:42:09:df:b6:3d:6b:43:00:41:fc:10:5d:0c:
                    a2:21:81:80:87:34:76:07:ec:1c:0d:29:ce:d2:f5:
                    e3:ae:b4:15:e9:5b:50:6e:15:88:d6:30:f4:38:cd:
                    1d:7d:b0:3b:eb:7f:13:68:c7:af:0c:5d:36:65:90:
                    ab:3f:74:9f:ee:d7:e9:38:2c:db:07:50:25:47:9a:
                    eb:82:c9:18:bf:b2:34:6c:7a:0a:aa:b8:d5:2e:7d:
                    d1:a0:fa:c3:43:ba:cc:c7:fd:b2:30:50:80:99:4d:
                    cc:08:ec:f3:67:fe:b9:9a:8a:96:75:4d:b2:6b:07:
                    d6:d2:e8:48:2b:28:6a:e3:d8:60:5e:6f:4f:4b:66:
                    60:65:f7:16:71:e0:58:95:df:0c:4d:1f:68:f9:16:
                    61:26:47:b4:f6:92:6e:e1:b0:d6:7a:0f:20:bc:74:
                    20:d8:9e:a0:40:c5:93:80:44:cc:98:13:3f:41:0b:
                    c7:ff:1d:b4:dc:e3:28:9f:e5:eb:6a:15:ed:cd:a3:
                    92:c5:82:ef:59:3a:bb:da:c3:fb:9b:79:e9:2e:2d:
                    b0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D4:F9:38:AD:CF:A0:D7:AE:A2:2E:0F:3E:B4:62:F7:81:A7:77:BC
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9d387b4a-005e-4b61-a343-8e5af7a9df69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:e7:3e:ad:07:da:11:9f:07:b4:2c:e0:b2:4a:4a:b9:e7:2c:
         37:37:a9:1d:20:8b:24:e8:25:81:df:51:87:ed:98:a2:49:46:
         f1:29:3b:1d:32:6f:d7:b0:26:dc:f4:89:db:44:c2:a4:59:80:
         79:e3:07:b6:78:99:58:5e:d9:61:68:68:94:17:5e:91:83:1e:
         a1:b6:4c:fd:0f:70:5d:89:c3:4e:7e:92:71:16:41:c5:f3:72:
         e2:5e:01:9a:d7:bd:7b:29:29:a9:1b:99:e7:87:6e:21:69:f9:
         a1:11:41:c6:38:56:dd:bd:a4:85:58:07:8b:3e:2b:d3:63:91:
         8f:93:c7:e7:de:65:8e:55:f9:ec:27:9b:e5:ab:16:f5:18:2e:
         a1:2d:2f:58:6b:fc:df:e6:7f:50:9a:be:ad:e9:d1:07:4d:a5:
         15:0c:b7:35:0b:84:89:fe:17:94:13:b9:1d:25:44:57:8e:a7:
         4e:32:ca:74:13:75:62:b6:f4:72:36:0c:7a:d2:61:09:a5:df:
         44:1a:8e:31:da:a4:37:1a:b6:a7:f3:b8:b8:d3:24:b4:e8:39:
         bd:f1:0b:77:8e:1b:4b:8d:83:11:d2:ae:28:9c:61:26:67:b9:
         a3:1d:1e:0c:82:76:3f:0e:c5:c6:ad:fc:63:56:fb:b3:2c:a9:
         65:f6:5b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----