Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ae97aa55-3e1e-4e77-bcf5-97b8122ee780.roa
File:                     ae97aa55-3e1e-4e77-bcf5-97b8122ee780.roa (raw, json)
Hash identifier:          rONPBrMJXf9QAi/Wnq4+ioPk5mWUZmV6MJNd/P+KZ5Q=
Subject key identifier:   0A:59:00:2D:E2:5D:74:7A:8C:C4:EC:54:FA:08:16:DC:C6:9A:2D:A4
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       306C296E072BFFE58DA858460702DB0480882B36
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ae97aa55-3e1e-4e77-bcf5-97b8122ee780.roa
Signing time:             Wed 12 Oct 2022 00:00:00 +0000
ROA not before:           Wed 12 Oct 2022 00:00:00 +0000
ROA not after:            Sat 15 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6c:29:6e:07:2b:ff:e5:8d:a8:58:46:07:02:db:04:80:88:2b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 12 00:00:00 2022 GMT
            Not After : Oct 15 23:59:59 2022 GMT
        Subject: serialNumber=4d2f2abb1c674e7b15d41e7028ba885296f88180363a13a7864396a80b63bb02, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ac:04:a0:e5:3e:68:4e:4c:81:7f:50:7b:5c:
                    52:1c:ef:58:82:ba:38:0e:6b:0e:79:e1:85:40:93:
                    ff:a1:30:87:76:69:46:16:58:2e:b8:89:c5:ce:22:
                    9c:89:36:08:e6:90:a6:1b:0f:e1:d3:b6:c3:f1:33:
                    3a:e4:49:00:62:a1:04:21:f6:73:b1:e9:a9:41:da:
                    d2:1f:3d:41:4f:f5:97:b6:88:c5:05:73:fd:a2:74:
                    9d:de:b0:bb:ac:10:0a:d7:e5:c0:a3:e3:24:73:bb:
                    cf:5c:ce:27:b0:79:5b:dc:9b:9a:9d:41:90:91:f3:
                    1e:a7:1f:e8:7a:96:61:10:78:d4:62:d9:32:40:80:
                    c6:a6:01:f4:5e:d0:4a:19:d4:78:e6:c3:fc:ec:43:
                    c9:1d:43:29:e3:3f:86:73:ae:59:22:e4:12:0e:31:
                    6b:21:8a:db:c3:0f:d8:28:a6:de:32:99:22:4a:cd:
                    f5:92:df:79:42:5c:a7:57:f4:66:f8:53:5a:05:d3:
                    73:5c:25:d0:cc:b6:37:29:b0:4e:5f:b7:cd:b0:a1:
                    2d:4c:3d:70:cc:2e:fa:cd:f9:49:91:36:ef:3c:e8:
                    ce:61:94:95:49:61:d9:c6:dd:ee:f1:c7:41:32:eb:
                    46:4e:39:a8:1c:6d:90:0c:f0:7e:cc:a1:0d:f8:25:
                    3f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:59:00:2D:E2:5D:74:7A:8C:C4:EC:54:FA:08:16:DC:C6:9A:2D:A4
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ae97aa55-3e1e-4e77-bcf5-97b8122ee780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:cf:90:db:22:73:18:aa:68:39:06:4d:d0:28:c3:88:a2:81:
         8f:60:77:cf:d4:ab:75:d2:e2:9f:fa:59:fe:cc:a6:68:3a:34:
         e6:48:35:7a:45:aa:fd:87:8a:4d:7a:98:b5:b2:0b:63:f9:ea:
         01:14:c0:4c:0a:b2:e1:c3:ff:d9:78:a6:74:ba:c2:bd:6b:b2:
         cd:f1:b4:ef:07:7a:dc:06:74:2f:0d:18:9c:64:f1:2d:7b:4a:
         cb:64:cf:5e:a9:ab:f8:84:bc:3e:ba:aa:55:ae:07:95:62:9d:
         10:37:31:eb:20:09:5f:21:a6:49:20:a8:c1:36:3c:60:66:87:
         ad:73:20:ab:06:5b:47:7d:8f:22:5e:19:9b:6e:ff:0a:ce:e7:
         75:9f:82:47:81:ed:34:c6:df:8d:af:8f:dd:e7:9d:44:5b:48:
         74:93:3b:4c:cd:7a:c6:47:50:b0:82:7d:fb:2d:2b:3f:7a:29:
         93:e1:33:01:ba:3e:81:91:e8:8d:36:a8:b7:68:5c:39:af:b0:
         e6:6d:5d:ee:6f:0f:73:e1:ad:71:4f:5b:79:06:24:6c:e7:64:
         ea:88:f9:58:5c:fc:d9:27:05:b0:47:e5:52:8b:6a:7d:29:b2:
         d0:ba:69:fd:24:5d:40:be:7b:d0:f6:c6:8f:2b:81:fe:8e:82:
         85:8d:b8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----