Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bcdb2054-502e-4919-9bd2-eba741ba6d33.roa
File:                     bcdb2054-502e-4919-9bd2-eba741ba6d33.roa (raw, json)
Hash identifier:          BVDQVk/aGuDvsOV6+rKstcOLvDV6JOMFtJ2jPeVKQvQ=
Subject key identifier:   7B:15:D6:28:38:08:44:17:E4:99:7F:C8:3B:04:B9:8B:05:AC:CE:90
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       67A05CFF2E428BA9A0176C59792A008D4DD99352
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bcdb2054-502e-4919-9bd2-eba741ba6d33.roa
Signing time:             Fri 21 Oct 2022 00:00:00 +0000
ROA not before:           Fri 21 Oct 2022 00:00:00 +0000
ROA not after:            Mon 24 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a0:5c:ff:2e:42:8b:a9:a0:17:6c:59:79:2a:00:8d:4d:d9:93:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 21 00:00:00 2022 GMT
            Not After : Oct 24 23:59:59 2022 GMT
        Subject: serialNumber=7bd28ebbcd71c525f177229984eb5377d2f6b7d49adb35e518cb656b827ab217, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:1a:22:1c:7a:80:49:6b:56:45:c6:1e:c1:
                    f4:a8:1f:f0:8c:b9:2e:7d:75:f7:b0:9c:0d:6f:44:
                    4c:2a:b5:3b:f7:0e:06:83:fc:b3:ce:92:34:b0:0e:
                    2b:ed:c5:79:f1:41:67:60:be:77:b7:0a:28:68:cd:
                    df:41:f5:48:76:a9:81:39:73:df:95:4d:3f:7c:7c:
                    1a:75:5b:ef:1f:aa:f4:b7:34:d5:f1:7c:1b:d3:9d:
                    65:d6:db:80:31:9b:24:79:3a:f1:90:19:30:a2:be:
                    d7:56:ab:b1:1e:b8:2a:36:5e:ee:5e:cf:b2:47:14:
                    31:07:8e:a6:c3:42:98:35:ce:88:b0:16:35:e4:e2:
                    9c:a3:b8:43:02:bf:25:45:b2:3e:a9:a7:6a:de:ab:
                    48:29:08:f6:d7:1b:05:e9:72:5f:a9:09:fa:6c:9b:
                    ad:a9:c8:25:d4:ba:71:df:34:e3:9e:fc:18:f8:36:
                    51:fe:10:0f:b1:b7:0c:9f:c3:b1:bf:6d:4c:0d:27:
                    59:43:1d:f6:cb:f7:36:e0:2d:19:ff:1f:9d:e6:2d:
                    1e:34:3a:f9:5d:96:2f:9e:c5:47:78:be:8b:b8:88:
                    13:33:d9:f5:12:ad:17:78:2a:e1:c5:15:04:73:2a:
                    8f:85:1b:ef:b1:17:65:45:ce:dc:b6:67:0b:48:b8:
                    09:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:15:D6:28:38:08:44:17:E4:99:7F:C8:3B:04:B9:8B:05:AC:CE:90
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bcdb2054-502e-4919-9bd2-eba741ba6d33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:27:e5:7c:d4:00:c3:a5:09:1e:65:4b:02:3f:72:dd:64:f9:
         b8:e6:50:e2:e6:5a:f4:1f:d1:d1:30:a3:ec:2f:af:e8:bf:66:
         8a:08:a8:58:ad:fd:19:72:68:d3:75:ea:c2:21:a7:1f:0f:e4:
         6c:6c:f1:be:ed:3c:42:9f:67:8e:d3:61:ed:e8:6a:4b:2e:4d:
         18:06:6b:66:2a:c4:34:a4:26:41:3f:f5:87:c6:32:7f:94:f5:
         8b:93:bf:28:e7:ef:3f:62:59:05:fd:a6:dd:01:a7:41:12:75:
         d5:e4:27:b3:69:95:b7:fa:e4:d9:0e:96:7a:19:c6:25:43:58:
         5e:91:e2:42:16:06:3d:c6:d3:ca:dd:3e:dd:b3:c8:0a:87:0f:
         ef:a7:e6:60:cf:67:6c:bb:c3:9b:05:a1:e6:fa:02:d2:e6:50:
         8e:3c:8e:0b:57:2c:83:44:59:c2:fe:ee:b5:3f:44:e7:1d:79:
         4d:0e:e0:7a:4d:83:dc:46:82:01:fc:60:9e:cf:dc:a0:1c:4f:
         13:41:25:31:c6:9d:88:30:e3:ba:6c:51:85:8e:52:36:e7:cf:
         c5:87:f3:84:41:f9:02:70:52:dc:c5:32:7c:6e:21:81:2d:5c:
         c0:9a:8b:b8:e2:6a:65:af:7d:c0:19:7f:b6:67:5c:8c:7d:12:
         01:36:92:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----