Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a5d09fa0-55a4-4ab1-9e70-52f45b682b57.roa
File:                     a5d09fa0-55a4-4ab1-9e70-52f45b682b57.roa (raw, json)
Hash identifier:          miRuDwcUWtfv603Popees5w7T1M8SBQu5oRNBLweRh0=
Subject key identifier:   9F:C1:64:76:D5:B1:B1:83:19:C7:7B:52:14:AD:62:46:59:9A:2D:29
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       31C1823A9BEFEB4959EA4B2F44FB27278CFABDEF
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a5d09fa0-55a4-4ab1-9e70-52f45b682b57.roa
Signing time:             Thu 01 Sep 2022 00:00:00 +0000
ROA not before:           Thu 01 Sep 2022 00:00:00 +0000
ROA not after:            Sun 04 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c1:82:3a:9b:ef:eb:49:59:ea:4b:2f:44:fb:27:27:8c:fa:bd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Sep  1 00:00:00 2022 GMT
            Not After : Sep  4 23:59:59 2022 GMT
        Subject: serialNumber=acdfaed3dfd2d17e35d7558c70b06f8d6d187b38c27030e49869bf18c5a9aa06, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:08:49:0a:ec:6b:58:91:0a:a2:f5:4c:ce:
                    06:7a:77:9b:f6:35:a9:34:33:ad:f2:94:b8:28:05:
                    9c:02:a2:f0:52:59:dc:d9:cf:81:88:9a:06:7a:77:
                    05:b4:b4:1b:48:e9:0d:b7:90:9a:d1:f3:29:3c:47:
                    56:ed:fa:9f:d1:b0:4e:01:f8:e3:aa:c0:78:00:0f:
                    01:e9:5e:20:41:34:85:e8:87:98:a4:c0:a3:9b:3a:
                    9e:4a:4d:18:b0:57:7b:78:27:51:11:93:ec:fd:ac:
                    22:51:9c:aa:57:a0:9e:c0:65:d6:71:cb:d5:47:52:
                    cd:47:fd:fe:34:d2:e7:89:6e:29:47:9e:c9:df:d0:
                    9e:85:b0:a8:ed:fa:56:5a:1e:5f:0a:3b:12:27:08:
                    c1:0a:4d:5b:aa:4c:3c:23:89:57:ad:f0:52:ae:81:
                    c7:e8:9e:67:4d:2d:c9:19:05:3c:ab:55:46:79:d8:
                    66:a7:94:fc:3b:1b:e6:78:30:65:b5:cf:fd:6f:31:
                    e9:09:b9:db:15:8a:7f:d4:31:2b:69:b8:e3:96:d3:
                    70:e7:83:10:a9:bf:bf:29:4d:12:fd:a6:75:94:27:
                    4b:ed:2f:aa:81:6d:09:c0:7b:f2:0d:d6:7b:b3:c7:
                    e4:34:8c:fa:cd:5c:cb:5e:43:8f:ed:d9:c7:92:75:
                    bc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C1:64:76:D5:B1:B1:83:19:C7:7B:52:14:AD:62:46:59:9A:2D:29
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a5d09fa0-55a4-4ab1-9e70-52f45b682b57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:c4:d5:fe:ad:7c:2e:19:a0:ab:0c:2d:e3:53:fc:1e:ae:1a:
         09:c4:35:ff:39:cf:b9:75:e4:25:ef:97:d2:c5:e1:df:53:a8:
         03:95:ab:fb:7d:89:dd:2b:b3:11:3f:05:fc:3d:17:bf:b7:55:
         e9:96:87:3a:af:81:6d:2b:72:56:89:c0:a1:8a:d8:42:d7:9f:
         1f:70:18:14:d5:d0:5b:bb:ea:30:99:a0:9b:4d:3c:c8:fd:6b:
         96:d5:f9:41:22:6f:8e:8d:23:2f:5e:b8:a0:64:73:30:8e:89:
         8b:86:02:46:94:12:42:ae:2c:3d:4d:a5:9a:90:b8:d3:91:64:
         f4:fe:62:ad:df:a1:a6:14:14:f4:5e:15:20:85:43:72:fb:d7:
         35:b6:f8:a1:e8:d0:16:ec:b3:5d:69:dc:11:4f:9c:39:aa:0a:
         9c:68:18:2f:24:c9:e0:3b:ae:75:f9:81:42:e7:d5:89:8d:97:
         f7:17:71:95:63:aa:31:7f:80:0a:06:1d:79:72:1d:5f:71:87:
         7a:85:0a:e1:bb:a2:e8:62:81:81:6d:23:88:50:75:66:1c:9f:
         00:ca:6a:10:1f:cb:fc:74:8d:25:08:fd:5f:20:8a:66:7d:6d:
         d8:dd:04:8d:22:35:b3:44:b3:a9:48:73:51:95:cd:17:47:d1:
         91:f8:c4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----