Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b3351727-7b19-4ab9-84e4-2a35e282738c.roa
File:                     b3351727-7b19-4ab9-84e4-2a35e282738c.roa (raw, json)
Hash identifier:          BlI3Hx/rRBDDzuHWDURNINeO7hb/i8Pflly4VKZu77o=
Subject key identifier:   0D:99:41:74:29:D6:83:94:8E:DA:C2:C9:EA:2A:9A:28:0C:D2:8C:AA
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       04BA7C3D635BE5DC9AD2DB9437C37C06D3678F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b3351727-7b19-4ab9-84e4-2a35e282738c.roa
Signing time:             Thu 15 Dec 2022 00:00:00 +0000
ROA not before:           Thu 15 Dec 2022 00:00:00 +0000
ROA not after:            Sun 18 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ba:7c:3d:63:5b:e5:dc:9a:d2:db:94:37:c3:7c:06:d3:67:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 15 00:00:00 2022 GMT
            Not After : Dec 18 23:59:59 2022 GMT
        Subject: serialNumber=deca9891424e8a5def915c396d9f6f91b0810e9d7450a0c362fd2003f9287cb0, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e7:fc:fe:3d:d6:cd:9e:86:94:58:4e:96:5b:
                    97:3d:0b:2f:77:3e:dd:4f:e5:47:7e:5d:b7:9b:8e:
                    4b:c3:63:2e:71:cd:a4:9b:51:ae:3e:d1:31:5f:3b:
                    54:30:9e:6c:72:e9:b7:6e:30:bd:33:a5:d5:65:82:
                    4a:f2:35:74:b8:7b:15:aa:69:ee:64:6e:41:cb:d0:
                    fe:a8:db:1f:95:a7:ca:7a:25:f4:9d:a5:f0:7a:06:
                    fd:ab:30:ab:4e:65:c5:f6:a6:1f:37:54:ad:85:6f:
                    ad:8c:67:4b:90:b2:db:01:c4:e4:ca:9f:a5:45:0d:
                    40:5d:e3:92:05:b8:ad:c4:fd:c7:91:6b:a1:5f:de:
                    5c:64:c4:94:8c:b6:96:32:a7:78:56:50:0b:6e:d6:
                    5b:b7:bb:6f:f9:e6:13:63:f2:7c:10:f8:28:cb:4f:
                    e0:fc:64:99:df:1d:42:cd:ac:4f:07:cf:40:03:c9:
                    00:8e:e1:d3:c4:1b:c0:ab:3b:7d:3d:63:e8:38:8a:
                    2f:70:e5:24:3a:af:6b:f3:c4:db:6d:fc:6d:4b:1c:
                    11:e2:bd:fc:6d:16:17:42:c3:a1:cc:83:38:88:ba:
                    e9:fc:35:9c:1d:50:a7:69:51:fe:5f:36:84:12:28:
                    33:81:d2:af:94:e8:86:b0:66:27:f6:63:42:40:81:
                    bd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:99:41:74:29:D6:83:94:8E:DA:C2:C9:EA:2A:9A:28:0C:D2:8C:AA
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b3351727-7b19-4ab9-84e4-2a35e282738c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:59:6c:7b:0d:1b:67:4f:c4:16:f9:0b:ba:73:75:a7:80:a5:
         96:f4:61:96:52:2e:6b:d9:32:e5:dc:fe:0e:3d:81:80:1a:2a:
         29:29:85:bb:0b:c1:16:e6:3a:6f:70:d6:3b:f9:2e:3e:3c:45:
         c0:ee:57:58:66:18:15:5e:a6:73:ad:85:f6:af:4e:d0:62:94:
         7b:9b:fa:90:fa:ad:40:b5:45:2e:78:29:f9:ee:c5:b1:b7:42:
         63:b7:dd:b1:a4:2d:a7:16:64:62:dc:07:d7:29:3e:d2:7f:32:
         8d:21:93:52:45:cb:9a:47:e3:31:16:5d:41:78:fa:f0:6f:21:
         48:c7:5f:46:05:c4:10:e8:7d:e5:b0:7f:88:de:1c:8c:5f:72:
         ce:2f:71:0f:46:77:30:43:36:47:2e:0c:ef:33:6d:90:e3:11:
         0e:b5:eb:ef:ad:60:fd:79:98:70:13:5c:f1:3b:04:17:7a:e1:
         1b:0e:68:65:3d:2a:da:b0:0e:10:40:80:46:22:89:74:70:28:
         31:dd:58:3f:33:b1:38:7d:b2:cb:d9:ef:b1:c7:d2:a6:b3:9e:
         b3:80:3d:13:fe:a1:55:31:6c:65:9e:21:55:3e:f7:ac:49:fb:
         7f:af:3d:5e:3c:76:48:e7:a7:b8:63:68:df:9a:68:62:45:a7:
         53:ba:e6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----