Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a8a2ac4b-2078-4127-ae8f-a854eda3ee0e.roa
File:                     a8a2ac4b-2078-4127-ae8f-a854eda3ee0e.roa (raw, json)
Hash identifier:          9B+rS4cwJnFR6uyLu47Z9gMk0eaB56QOC8DoGsbC4Os=
Subject key identifier:   D6:21:A6:C1:C1:E4:A7:07:BE:1C:CC:55:5C:C2:16:23:05:6A:2E:36
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7CD3465DF46F6C537781DCC703E5FFC3547AEBDE
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a8a2ac4b-2078-4127-ae8f-a854eda3ee0e.roa
Signing time:             Tue 13 Dec 2022 00:00:00 +0000
ROA not before:           Tue 13 Dec 2022 00:00:00 +0000
ROA not after:            Fri 16 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d3:46:5d:f4:6f:6c:53:77:81:dc:c7:03:e5:ff:c3:54:7a:eb:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 13 00:00:00 2022 GMT
            Not After : Dec 16 23:59:59 2022 GMT
        Subject: serialNumber=c33048228ca74097c141e2e2cc79faf017ff95b4addeb89a4a03d9ce0740a63d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f1:79:97:13:cd:b4:f1:62:e4:f9:ca:7e:89:
                    ba:0c:fe:19:6c:00:b1:48:e5:86:8a:56:a8:b7:ee:
                    a3:14:f3:17:08:d0:1e:d3:a2:f8:13:f2:4c:47:f6:
                    da:34:0c:7a:75:e6:74:66:25:f2:b7:77:c6:6a:3a:
                    9e:32:ba:1a:99:59:1f:41:7c:53:78:08:80:b8:e2:
                    96:07:54:35:82:64:8b:05:a6:e0:59:b4:f0:cb:50:
                    5b:c1:e7:96:b7:9d:e0:d8:44:b1:b0:df:4a:97:ee:
                    b4:cd:b5:7b:47:b1:af:17:16:09:3b:42:1c:cd:c0:
                    1e:46:70:b3:f8:d8:3b:c0:b0:ca:21:31:f7:38:43:
                    35:0f:96:e5:c9:31:85:e5:a2:34:23:45:4f:25:93:
                    bd:6e:17:0a:8b:e6:10:8b:0e:01:fd:61:df:43:d5:
                    8a:b1:f2:ba:5d:ee:b6:0c:02:f4:26:56:af:73:ea:
                    63:c9:c6:1c:8c:ce:ff:82:f2:51:f1:12:45:35:59:
                    b6:73:88:a7:4c:9a:56:d7:a6:41:5a:fb:fa:7b:d8:
                    ce:84:66:ff:26:5e:05:07:77:9f:65:00:15:a8:26:
                    8c:61:9a:1b:bf:98:18:3f:77:29:70:1a:75:db:f4:
                    39:7c:d8:46:b1:b4:8c:de:5d:40:cb:4c:75:0b:47:
                    42:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:21:A6:C1:C1:E4:A7:07:BE:1C:CC:55:5C:C2:16:23:05:6A:2E:36
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a8a2ac4b-2078-4127-ae8f-a854eda3ee0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:e4:d9:89:92:04:bf:cb:e5:0d:08:35:d0:83:95:ea:5d:71:
         91:11:79:a7:6f:2b:d5:0e:1b:76:1f:b3:d4:8a:4f:ae:cc:e8:
         78:19:52:fb:4d:2d:ad:77:c5:f9:a2:32:f4:db:bd:bd:a3:3f:
         ca:1d:3d:a9:54:1a:67:ab:1b:2a:17:21:ba:df:02:89:2d:d1:
         1d:ed:76:21:75:c9:ff:21:d7:68:a9:65:3f:ea:2f:fb:c6:c0:
         5a:b1:0f:75:91:33:04:f1:bb:84:03:32:f4:83:bb:d4:71:d8:
         e4:ac:f3:5a:6b:9a:b3:6e:d0:54:51:df:07:f4:7c:35:4e:5c:
         49:4a:1f:1e:ab:b2:4a:79:30:6b:8f:7f:35:67:a0:dd:01:a4:
         f0:f1:41:ac:52:f0:55:ce:43:f1:de:8a:8a:eb:3a:58:9c:c2:
         24:01:b7:67:97:62:61:6a:2c:c7:95:27:64:16:92:9d:f5:3c:
         41:47:96:af:1d:9a:55:b2:4c:15:26:88:c6:01:c7:77:b4:34:
         67:fa:ae:22:27:80:df:46:dc:5d:24:25:65:2b:20:6e:79:80:
         6e:c0:5f:ad:d7:3c:50:48:c8:f6:dc:1f:90:86:60:c1:f0:20:
         0f:83:36:e8:0c:c9:39:88:f1:eb:2e:32:f8:a8:9e:2c:be:4a:
         1c:4e:d5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----