Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a043d3a0-9a66-4280-8eec-12978931a14b.roa
File:                     a043d3a0-9a66-4280-8eec-12978931a14b.roa (raw, json)
Hash identifier:          k2KhRC1SP2jOQ8soNjFRWSMQQcvRGh5y8q4QVIerqLQ=
Subject key identifier:   74:3B:EA:F9:F9:02:45:E8:7D:1C:57:E9:56:71:3B:6A:9E:AE:35:74
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       23EDC15811AF35889F5064463EADA8CFD7C03612
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a043d3a0-9a66-4280-8eec-12978931a14b.roa
Signing time:             Thu 08 Dec 2022 00:00:00 +0000
ROA not before:           Thu 08 Dec 2022 00:00:00 +0000
ROA not after:            Sun 11 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ed:c1:58:11:af:35:88:9f:50:64:46:3e:ad:a8:cf:d7:c0:36:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  8 00:00:00 2022 GMT
            Not After : Dec 11 23:59:59 2022 GMT
        Subject: serialNumber=e0ae998f7886f55d76a04789be4ad97fd10c0d16a1487af6ab63f160c734c460, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:06:73:fe:d5:24:8f:a4:8b:b6:05:90:eb:d3:
                    d7:3f:c5:22:a7:0e:88:34:9f:01:51:af:39:d2:cb:
                    b7:50:27:5b:a8:89:55:f4:07:cf:d4:04:0b:c2:dc:
                    ce:93:07:95:e9:0d:15:a3:6a:70:8c:6f:6a:ca:6e:
                    55:bc:8d:69:5a:70:87:b5:69:e3:24:8e:71:b1:cd:
                    47:fc:85:ed:5f:63:41:91:aa:7f:9d:38:bf:7e:09:
                    9e:ff:38:9f:4c:f9:90:ed:af:19:af:5e:7a:44:06:
                    40:d7:61:8e:37:06:6f:c4:7b:5c:9d:97:11:26:04:
                    77:71:47:07:4b:4f:21:88:20:fb:d4:b2:67:5d:1c:
                    6c:87:84:8f:69:9f:aa:02:62:c6:8e:d8:03:35:5c:
                    cf:a5:ca:ea:22:b1:82:89:e7:ad:e8:53:16:51:cb:
                    58:29:a3:54:6c:e5:e9:71:d3:66:28:80:3f:a5:a4:
                    0b:71:82:db:ac:4f:e2:e7:07:a2:d7:6f:4b:3a:bd:
                    0f:77:03:12:02:bf:52:f7:82:2e:dc:be:90:30:6c:
                    ac:3f:db:3f:8a:5d:6c:17:37:50:83:f5:e2:dd:4d:
                    08:bd:ba:56:ed:7a:16:5b:9d:12:37:cd:69:78:e2:
                    77:c8:67:96:38:cd:bd:92:58:39:c9:8a:ea:1f:97:
                    1d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3B:EA:F9:F9:02:45:E8:7D:1C:57:E9:56:71:3B:6A:9E:AE:35:74
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a043d3a0-9a66-4280-8eec-12978931a14b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:a5:52:02:76:36:e0:fc:2f:1a:cd:e0:44:a1:ea:7e:d5:19:
         a6:11:b4:7d:0c:f5:81:05:a9:19:55:7b:d4:95:2c:a9:51:90:
         6e:9e:80:ac:0b:eb:49:90:ba:93:f1:87:81:fb:a4:4e:ca:79:
         83:ef:fd:ec:bb:12:2c:82:5e:73:1c:51:80:ba:26:1c:0b:35:
         e0:68:fc:2f:16:0a:3f:cf:7b:53:a6:94:76:4b:9b:08:6a:f9:
         c7:03:86:32:c3:b8:41:f7:86:f0:4e:02:fe:4b:ca:a5:7b:48:
         6b:40:24:e6:8a:b3:2c:96:0e:e0:61:4c:19:17:33:f2:4c:e2:
         31:27:cb:6b:87:1d:14:e7:b9:80:c3:6b:82:5a:39:94:02:3b:
         13:66:e4:82:e4:9b:68:1b:72:16:4c:ae:38:b6:de:bd:48:62:
         ca:41:1c:bb:00:6e:d3:91:6f:ce:fd:26:98:e4:a1:d9:14:d9:
         4d:17:63:72:6c:77:7c:f9:b3:ad:01:77:eb:48:a8:3a:6a:6a:
         0d:51:e4:63:7e:dc:ee:5c:16:f9:b0:2f:88:ef:c8:b0:0a:e2:
         4b:2d:81:fd:63:c9:12:19:70:00:97:f3:16:bd:04:c9:7a:5f:
         2b:98:23:14:d2:0c:3b:c7:36:f0:8e:e2:f9:cb:4e:c7:17:65:
         f1:1c:cd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----