Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9ead0114-4d0c-4306-bf26-6785d6c14fd9.roa
File:                     9ead0114-4d0c-4306-bf26-6785d6c14fd9.roa (raw, json)
Hash identifier:          44+Fh7Ixzg1c5EhGkaQv6YMW/15tBDlbHvTV8N1hn98=
Subject key identifier:   49:9B:A5:38:4A:17:32:16:27:F4:0E:35:54:B8:BC:4F:C8:FD:3A:A0
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       051FE3168C07BCEE7CC2C76AF661A6419277F027
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9ead0114-4d0c-4306-bf26-6785d6c14fd9.roa
Signing time:             Sun 04 Dec 2022 00:00:00 +0000
ROA not before:           Sun 04 Dec 2022 00:00:00 +0000
ROA not after:            Wed 07 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1f:e3:16:8c:07:bc:ee:7c:c2:c7:6a:f6:61:a6:41:92:77:f0:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  4 00:00:00 2022 GMT
            Not After : Dec  7 23:59:59 2022 GMT
        Subject: serialNumber=c9ddd7a4bdd549b6e920c125bfd831ee7a80d62a7c5dae269c0862455be3da67, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e2:2c:aa:bd:bc:e7:55:a7:d5:02:f6:6e:64:
                    83:d7:b7:26:94:af:cd:f0:e0:7b:cd:02:6b:c6:a5:
                    8c:c0:55:95:34:36:77:56:26:25:2e:40:91:37:f0:
                    fd:6e:17:36:9b:00:99:f7:02:86:60:32:76:a3:bb:
                    48:27:b7:55:9e:58:23:a9:87:2c:d4:8f:36:4c:69:
                    c0:2e:cb:67:8b:d8:fb:f2:51:cd:2d:03:d2:06:c8:
                    f6:08:d3:41:02:a7:c7:77:69:49:7e:0d:12:fc:de:
                    fd:28:a7:69:e4:ba:5b:08:69:33:09:a7:5e:f8:f5:
                    33:1a:88:67:9d:43:86:1b:7e:41:ba:85:87:d0:f3:
                    67:22:2c:0c:2c:e4:ba:2e:f5:da:c4:10:bc:a7:76:
                    ee:15:0f:ac:d2:31:3c:1f:db:d4:a5:a9:57:2d:9c:
                    54:25:d5:df:2c:67:5d:14:b0:5c:66:48:57:c6:8a:
                    26:6b:82:c2:6d:97:1b:fe:6f:ee:47:88:25:a5:d0:
                    6f:de:21:26:b7:61:44:4d:b1:84:94:2f:0c:42:a8:
                    95:8a:3c:41:97:5a:79:c1:42:72:61:48:84:bd:03:
                    26:ef:9c:e3:78:18:47:a6:81:2e:85:7c:cd:f2:e6:
                    30:ac:6a:70:51:44:30:38:e7:fa:ee:dd:16:9c:f3:
                    5b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9B:A5:38:4A:17:32:16:27:F4:0E:35:54:B8:BC:4F:C8:FD:3A:A0
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9ead0114-4d0c-4306-bf26-6785d6c14fd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:2d:94:07:c6:7e:cc:28:6f:bd:e3:cc:f4:d3:10:8f:99:5c:
         92:0d:a5:7d:8d:7d:2e:38:e4:c7:cf:c9:13:6d:f5:af:3e:38:
         9a:d7:41:ce:ed:2a:84:d9:0f:17:da:54:bc:e0:b8:21:b2:9c:
         5b:c0:5b:9c:6b:06:2c:21:1a:b3:c9:8b:06:9d:61:15:01:a3:
         27:f3:34:32:06:55:1a:22:a9:d9:ce:9b:e7:72:5f:f5:6d:7a:
         81:8a:7a:ee:5b:09:61:55:3f:82:02:cc:37:7f:df:32:31:50:
         5e:0a:af:e0:d6:22:a9:b0:64:5a:b1:de:d2:03:b7:df:04:7e:
         7e:9b:a9:11:f7:e9:35:6b:7b:a4:ce:65:59:6f:48:07:e4:b7:
         54:bb:4b:2b:5d:10:80:e9:66:3e:d6:03:36:03:a1:bd:d0:1e:
         b2:95:04:6c:ff:df:5b:88:f1:46:53:77:24:a4:e9:9a:25:7d:
         c3:26:c9:09:61:41:9f:d7:38:14:86:6d:0f:44:0e:8d:c6:d7:
         7b:51:a6:66:b8:8d:5f:67:43:6e:d3:20:3e:70:c7:8d:c5:18:
         0a:99:b8:12:9a:aa:01:2e:47:fe:7e:3e:c4:22:ce:9e:50:14:
         3f:ca:31:6c:75:44:a8:96:f6:ed:8c:54:31:eb:e7:dd:2f:2d:
         2c:4e:ad:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----