Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a4f99ac0-8326-427f-aca2-1da838d686fa.roa
File:                     a4f99ac0-8326-427f-aca2-1da838d686fa.roa (raw, json)
Hash identifier:          s+kgamimCUymbz7C59g3QNJIIjhXeEkHCka9qhK26U4=
Subject key identifier:   0A:20:87:EC:35:CB:C0:33:7B:20:79:3A:AA:DE:63:D9:BC:30:47:62
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7C03FEDC3D0FB2BF53B2607EE2C7FEFC520D3F4B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a4f99ac0-8326-427f-aca2-1da838d686fa.roa
Signing time:             Thu 26 Jan 2023 00:00:00 +0000
ROA not before:           Thu 26 Jan 2023 00:00:00 +0000
ROA not after:            Sun 29 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:03:fe:dc:3d:0f:b2:bf:53:b2:60:7e:e2:c7:fe:fc:52:0d:3f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 26 00:00:00 2023 GMT
            Not After : Jan 29 23:59:59 2023 GMT
        Subject: serialNumber=dd0ecf04b43a97636053f4e2b9f7142c86bd9b7bd760e59421e3ba3093df47c3, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c0:08:e2:19:cc:5a:73:50:73:17:1f:fa:d7:
                    d0:ab:28:15:63:c9:72:6c:f1:29:9d:db:6e:49:f0:
                    2f:bf:da:bb:f2:87:4b:3f:be:c5:d0:2a:4f:df:5a:
                    cd:4e:d8:57:5d:3b:e5:10:c3:02:d5:f9:7e:03:59:
                    ac:a6:8e:31:b1:d1:72:f5:98:ac:8f:34:8e:a4:cd:
                    60:90:3e:46:35:35:6f:db:76:68:bf:ea:b7:44:ce:
                    17:6e:cc:a1:84:f7:12:f3:11:03:50:39:51:c2:81:
                    33:73:08:4e:0d:d7:04:6d:e6:4f:5b:45:68:a4:9e:
                    4d:f3:72:6d:46:1f:1e:de:78:e0:8d:90:d8:36:92:
                    42:c9:8c:37:dd:cf:8b:50:0e:0f:48:d9:b7:4c:99:
                    01:89:e2:1c:e8:ca:8e:e6:7c:58:5f:94:52:37:38:
                    3f:d8:09:46:b3:bb:3a:a3:66:05:42:18:e7:b0:8d:
                    fe:6e:ba:ba:08:07:37:50:6c:2d:ab:08:33:17:59:
                    50:be:0e:ac:7a:8c:38:4b:fc:8b:46:dc:fe:c0:50:
                    73:13:29:71:43:8b:d6:a2:45:28:3c:8f:73:ea:a4:
                    87:0b:8f:78:21:2f:e0:1a:a7:e0:28:30:a6:a8:d2:
                    ba:78:7f:cd:57:62:5f:3b:42:ce:3a:69:5e:11:f6:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:20:87:EC:35:CB:C0:33:7B:20:79:3A:AA:DE:63:D9:BC:30:47:62
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a4f99ac0-8326-427f-aca2-1da838d686fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:62:ed:fe:1e:70:b0:5e:b2:7c:e6:5f:f4:1d:05:8d:21:c5:
         4e:48:1c:f6:53:b2:22:e0:7d:d5:2f:d5:a7:6c:24:3e:78:dc:
         4b:f0:33:6b:c3:63:93:d0:b0:2f:3d:d0:5a:45:9d:55:ae:b7:
         7d:9d:94:3d:64:3b:be:6e:7b:ea:02:a4:35:9a:af:92:cb:db:
         d3:b1:eb:ba:04:cc:1e:b8:5f:81:28:8b:18:4d:2e:c2:c5:6f:
         60:3e:f6:f0:18:71:7f:18:5f:e7:36:71:6a:bc:de:a5:3a:b6:
         b8:08:81:0a:f2:5c:64:5e:e3:b4:68:05:38:08:46:2c:3d:b2:
         37:de:4d:52:b7:6e:d7:aa:7a:b1:1b:37:ba:43:36:c9:a1:6f:
         f4:a7:6c:d7:0e:79:de:37:16:78:8d:65:1f:17:f8:fd:3c:ac:
         85:69:39:02:60:b8:39:60:1b:be:2b:8f:fa:72:30:51:7e:0e:
         4c:e1:00:56:5c:1a:df:f0:ce:5e:ac:0d:33:fa:7d:89:bd:67:
         e2:75:8e:cc:ed:d2:9a:49:b3:f1:c0:15:19:2d:d5:5a:d3:5b:
         c6:9c:ba:1c:9d:f4:9a:76:11:a1:ad:b4:d4:80:ac:d7:ec:4f:
         58:6f:96:fe:65:eb:ef:e5:f9:ef:15:f3:83:1b:60:0e:85:b1:
         3f:de:1e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----