Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b257849b-5a1a-4524-b3ca-0d0a241f2a73.roa
File:                     b257849b-5a1a-4524-b3ca-0d0a241f2a73.roa (raw, json)
Hash identifier:          8KaoYTSPdUI9Wgvwo5nleEYWHwhGE4N3DGQALkhsL2s=
Subject key identifier:   3E:EE:1D:99:8C:DF:BD:5F:71:99:D0:EF:53:2D:DD:3A:C3:37:3E:98
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       15367F85F5A7A92906FAFA32F1F0790B6B42901E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b257849b-5a1a-4524-b3ca-0d0a241f2a73.roa
Signing time:             Thu 08 Dec 2022 00:00:00 +0000
ROA not before:           Thu 08 Dec 2022 00:00:00 +0000
ROA not after:            Sun 11 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:36:7f:85:f5:a7:a9:29:06:fa:fa:32:f1:f0:79:0b:6b:42:90:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  8 00:00:00 2022 GMT
            Not After : Dec 11 23:59:59 2022 GMT
        Subject: serialNumber=cdcb6ba06a755ace94712754e7d83ab15e08b80868e09b492f9d46d68860c57a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:a6:ac:3b:43:c8:95:2f:69:35:41:f7:5b:
                    70:6c:a5:82:9a:a6:ef:52:60:b0:50:77:33:ba:e9:
                    46:51:bc:72:b4:4f:58:fa:e1:e1:0a:94:f5:37:14:
                    e1:03:31:99:c0:d2:76:80:ea:3a:1e:70:83:9f:87:
                    55:b2:5b:3e:df:1e:71:dc:c9:e3:ec:13:a6:b2:de:
                    5b:27:b6:11:26:53:cf:3f:c9:9c:8d:e1:57:1e:6d:
                    87:d0:37:a9:1d:93:20:55:4a:bb:e9:1a:e3:e7:30:
                    77:64:a2:97:b1:f1:d2:10:4a:65:d7:28:ad:eb:70:
                    d2:ac:72:8c:4b:85:ff:81:72:37:68:e2:3c:e0:7a:
                    1b:95:e3:bb:32:3a:98:f9:8e:34:a9:92:09:81:3f:
                    7a:b4:39:bc:41:f6:bd:0c:f1:4a:28:31:5d:77:e0:
                    d3:e6:f2:14:98:68:65:46:69:b8:bb:8b:a4:9f:1b:
                    e0:82:91:23:ab:21:1f:5a:c0:2e:e7:d3:44:88:17:
                    a2:26:e0:a8:74:e4:ed:02:36:99:dd:42:ac:ac:2e:
                    be:dd:ab:7c:fc:6c:ec:c7:e7:3d:e9:46:1a:6e:08:
                    e1:82:76:8c:c3:e3:99:d5:a3:f7:c8:a2:23:3e:28:
                    6d:b8:ac:aa:ca:9b:86:ae:f4:f4:9f:49:de:32:ef:
                    96:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EE:1D:99:8C:DF:BD:5F:71:99:D0:EF:53:2D:DD:3A:C3:37:3E:98
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b257849b-5a1a-4524-b3ca-0d0a241f2a73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:12:5f:6b:fe:4b:02:bd:db:10:ad:80:0d:e9:62:8a:65:c7:
         79:9e:48:dc:4e:d2:6c:03:2d:9d:2a:16:7f:22:d5:c1:eb:8c:
         4b:a5:9d:ac:82:ee:89:a3:b2:4d:13:c7:ce:2c:a5:5a:d4:42:
         f9:ea:36:d3:31:18:c6:39:de:32:98:c3:c5:2f:35:a5:a5:a0:
         10:57:3b:db:7e:06:95:2d:c9:fe:ae:f0:4f:4d:e9:3a:88:8c:
         bd:42:a7:71:a6:68:76:59:93:3c:05:06:9a:30:aa:67:07:33:
         5b:87:0d:60:4a:0c:a0:28:d8:b7:f9:df:ec:79:5b:cc:6f:1d:
         6b:77:dc:ea:c6:b0:4e:24:df:a0:64:ca:54:40:92:58:4b:8f:
         5a:7f:b0:d4:fb:cf:46:0f:a8:c6:44:9e:65:b1:e4:49:e2:75:
         e3:19:c6:5a:87:9c:af:32:6d:de:6d:6b:9d:5b:10:fa:a2:54:
         0a:cf:55:94:74:7d:23:42:14:28:00:2b:a1:f2:e5:9a:d4:24:
         b2:48:0c:ab:9f:f8:c5:fe:6a:d7:7b:94:37:df:f3:3a:3a:05:
         7c:31:75:f6:c0:c4:bc:2b:ce:0d:96:37:0f:54:67:05:3e:cd:
         7c:e3:bb:e2:18:82:02:5d:44:c6:93:b2:ff:38:9b:fe:31:e1:
         3d:c7:28:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----