Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ad084da8-89f5-4a15-b705-7fc87e37fd28.roa
File:                     ad084da8-89f5-4a15-b705-7fc87e37fd28.roa (raw, json)
Hash identifier:          DI/uWpZmgyQtAxPU/jDZFrIvaP5Cy3KS9svCZpVNZUY=
Subject key identifier:   75:0C:CB:05:31:27:B1:57:5D:7D:5C:0F:3F:EA:6E:FF:72:28:5F:BE
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7C57977F1F9A958FD51F1E076946A9CF1CE79770
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ad084da8-89f5-4a15-b705-7fc87e37fd28.roa
Signing time:             Wed 07 Dec 2022 00:00:00 +0000
ROA not before:           Wed 07 Dec 2022 00:00:00 +0000
ROA not after:            Sat 10 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:57:97:7f:1f:9a:95:8f:d5:1f:1e:07:69:46:a9:cf:1c:e7:97:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  7 00:00:00 2022 GMT
            Not After : Dec 10 23:59:59 2022 GMT
        Subject: serialNumber=5fb4488de5d21d9489d021f1e4e74eda7467d54c8b603f58a35d0a3d1eb8feed, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d8:05:7e:c6:0b:64:ad:d9:e7:2c:77:29:c9:
                    5d:39:42:d2:37:6e:23:9e:60:12:11:72:91:55:de:
                    92:c4:3f:e4:74:69:0e:5d:c6:ab:b8:1f:0b:05:e2:
                    a7:42:c8:30:8c:68:40:45:45:06:3e:da:11:a1:44:
                    ee:90:be:7a:5d:5f:47:ff:db:f3:ef:68:98:56:1e:
                    bc:71:0c:53:89:3d:3e:f6:e4:d1:7f:e9:bc:83:1d:
                    e0:a4:58:82:89:0b:8b:bd:27:65:b3:5e:60:df:97:
                    0b:e1:2a:6a:6f:f5:fa:5b:ab:28:ea:06:06:9b:82:
                    03:5d:14:d7:04:fa:f5:67:2f:23:8d:8f:3c:75:8b:
                    43:4a:c3:90:1e:b1:32:f9:b9:a6:b0:99:97:94:3b:
                    74:d7:82:d0:35:21:de:68:0e:18:9a:b0:07:a3:c4:
                    a0:cc:75:c4:ae:1f:8c:a1:8a:f1:5a:09:52:c4:da:
                    e9:34:47:ad:18:9a:64:78:f6:a0:91:41:06:1f:e0:
                    c0:e7:77:56:b1:6c:d4:42:eb:a8:29:82:3a:b0:c5:
                    ca:18:7f:50:aa:88:9e:58:95:ae:42:85:39:22:d7:
                    65:f7:74:3c:06:e0:11:ea:6c:f8:c9:d2:8f:b6:e0:
                    73:95:4c:a6:f1:0e:15:6b:6e:f1:0f:39:fb:e1:5e:
                    20:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0C:CB:05:31:27:B1:57:5D:7D:5C:0F:3F:EA:6E:FF:72:28:5F:BE
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ad084da8-89f5-4a15-b705-7fc87e37fd28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:83:06:2e:37:b1:ad:f1:19:dc:5b:f0:08:d0:ff:c0:ea:37:
         ce:56:25:01:81:b1:10:bf:71:72:34:82:8b:00:f7:10:09:ef:
         11:38:3f:4f:4f:74:40:69:7d:7f:8a:ae:ac:c8:89:b5:e3:0f:
         9f:46:f9:93:4f:86:9e:48:3b:32:28:46:38:ed:b2:4f:ad:60:
         20:ac:9f:b1:dd:d0:1e:8c:d5:64:5f:1d:f6:69:79:13:96:0b:
         04:c2:40:c3:58:63:f4:fb:ff:16:33:e4:98:3d:d3:37:4e:e0:
         aa:c5:8d:83:3d:a8:ff:73:4c:a6:4e:56:be:51:ff:92:64:70:
         23:f7:fc:ae:40:76:84:7e:18:60:f1:89:35:0d:4d:d6:9d:b9:
         a3:8b:9a:e7:97:17:d0:52:ef:8b:36:0d:45:f1:cf:e0:f7:81:
         ae:6c:f7:0f:63:87:30:7b:d1:1a:a5:00:3b:aa:6d:69:75:bf:
         6d:88:fe:9d:b4:12:d3:97:fb:b7:aa:a8:da:9f:1a:63:6f:a5:
         a8:0f:5c:ee:25:0f:e7:f7:21:89:46:28:2b:18:e5:5a:5d:d2:
         9d:fc:70:9e:a1:7c:d6:10:26:1c:0d:71:73:61:6b:6d:c8:85:
         b6:3a:60:a2:3f:81:ef:0d:a8:20:32:7a:47:86:b2:5d:8e:ec:
         2e:94:e9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----