Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/af5ac07a-7c87-4173-9804-747295de9ac7.roa
File:                     af5ac07a-7c87-4173-9804-747295de9ac7.roa (raw, json)
Hash identifier:          6T3n4BgexrMo9w2bx9c4iUaxbyeUTxeuXpHV/l0UjcY=
Subject key identifier:   FF:F1:17:7C:D1:8A:37:51:74:EF:13:4A:4A:FD:67:BD:60:F9:04:06
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       78D47311E224D4518529D9B864AC937161765048
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/af5ac07a-7c87-4173-9804-747295de9ac7.roa
Signing time:             Tue 27 Dec 2022 00:00:00 +0000
ROA not before:           Tue 27 Dec 2022 00:00:00 +0000
ROA not after:            Fri 30 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d4:73:11:e2:24:d4:51:85:29:d9:b8:64:ac:93:71:61:76:50:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 27 00:00:00 2022 GMT
            Not After : Dec 30 23:59:59 2022 GMT
        Subject: serialNumber=4cecbfa8109a57ff977ad958f6adf3e57ee78c5c8238872493144d8ab3a1bfd9, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:07:74:83:5f:4f:29:47:05:a3:c6:1a:17:
                    19:43:0b:52:bb:ef:e7:ad:51:ae:2b:84:7b:a5:21:
                    22:7c:8b:b0:fc:e3:72:fd:ba:ce:fa:e2:5c:25:c7:
                    b6:18:8d:b7:f3:fe:c8:e1:06:c9:ca:d1:46:b0:76:
                    cd:50:5b:e4:ec:ab:e7:e9:a8:a5:76:1a:4d:f3:1c:
                    f4:ee:4c:e2:f6:ca:bd:ab:e2:9b:a4:fb:a6:dd:f6:
                    ca:c2:2b:27:21:78:ea:d3:26:39:f5:a1:38:e8:e8:
                    8a:ab:95:6f:93:2e:0c:44:b2:ca:99:d1:b5:44:e2:
                    54:c6:47:7a:9a:11:c7:46:a3:7d:45:9a:80:4e:85:
                    e1:d7:44:b0:5d:d0:35:d3:a6:eb:9b:b5:37:60:b4:
                    33:fb:89:db:02:ca:9f:3e:ac:96:6c:2d:81:8e:3b:
                    f2:c7:64:2e:01:bd:7e:de:cb:63:13:8d:38:25:76:
                    f3:9f:40:58:45:bd:86:37:ce:a8:49:39:7b:f6:6c:
                    ca:26:4c:55:1e:87:9e:ae:b1:cf:36:ab:fc:1a:a7:
                    41:4e:df:73:e9:e5:97:44:b2:a1:0d:75:4d:7c:45:
                    25:13:b9:a2:ca:3a:65:03:f3:7f:ea:c0:ce:17:80:
                    d7:18:ea:3e:9f:26:d3:89:2f:59:ba:8f:e2:e1:77:
                    29:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F1:17:7C:D1:8A:37:51:74:EF:13:4A:4A:FD:67:BD:60:F9:04:06
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/af5ac07a-7c87-4173-9804-747295de9ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:45:be:b4:c3:e3:10:55:41:71:90:4d:b9:50:59:e0:b7:2f:
         6a:ca:8b:ae:ae:df:ee:a3:cf:ad:5e:91:f9:40:3e:54:57:ea:
         88:5c:77:46:e6:a9:0a:25:fc:2e:16:5a:8d:1c:89:ce:66:94:
         8b:8f:76:b0:4c:39:82:5e:41:98:b5:56:55:ae:4e:fd:9b:ab:
         68:8e:f2:0a:cf:d6:1d:51:ce:c2:11:f8:05:46:8e:1a:90:fe:
         f0:db:9d:1a:56:fc:25:7a:6b:67:e2:81:6c:eb:fa:11:48:95:
         92:ad:5f:33:93:47:14:87:11:56:3c:a4:18:e1:4a:3f:b4:de:
         84:cb:1e:06:5b:4d:ce:99:4f:36:30:2c:eb:b4:ae:72:28:47:
         08:e6:5b:bc:e5:e0:33:43:58:e6:c6:ee:57:07:d8:12:60:76:
         25:ae:a3:69:f0:de:82:af:f3:55:85:29:a5:c7:26:10:b9:31:
         a5:1d:5d:8a:35:9c:bf:32:0c:eb:bc:11:25:32:83:fc:f3:5c:
         a2:86:1a:10:5e:12:2d:db:07:99:c7:f3:cc:db:0c:c7:62:aa:
         21:de:05:af:45:4f:37:c2:8c:19:7d:ef:d9:65:7b:2b:ab:91:
         52:06:2f:c0:d9:58:7c:ab:5f:06:fb:f3:69:c4:b2:93:99:f2:
         fc:85:7b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----