Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c815f6ae-d250-44e4-8b96-e8ac14993d6e.roa
File:                     c815f6ae-d250-44e4-8b96-e8ac14993d6e.roa (raw, json)
Hash identifier:          UHJTBe6PG0CEbhW/OYRiS8AAX9jSRIVkB8PWtBn4NKM=
Subject key identifier:   DC:2E:80:E9:28:AB:28:21:42:52:36:B0:A5:D8:EA:60:8F:53:03:4A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5117BA376948C7CA101C1BCBAE1AD882903565AC
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c815f6ae-d250-44e4-8b96-e8ac14993d6e.roa
Signing time:             Sun 26 Jun 2022 00:00:00 +0000
ROA not before:           Sun 26 Jun 2022 00:00:00 +0000
ROA not after:            Wed 29 Jun 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:17:ba:37:69:48:c7:ca:10:1c:1b:cb:ae:1a:d8:82:90:35:65:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 26 00:00:00 2022 GMT
            Not After : Jun 29 23:59:59 2022 GMT
        Subject: serialNumber=6214f5ef87c3ae43ccdf51df5363c7dc389d5ddd018b958584c214638a8e7c39, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c7:15:b0:b7:0a:2e:50:b6:45:bf:ad:19:ca:
                    c6:d1:9a:25:bc:b9:4e:6d:f6:f9:dc:30:51:ef:2b:
                    f2:81:31:40:dd:16:67:01:40:d1:a8:0a:20:e2:35:
                    ae:6d:ad:de:37:13:43:0e:2f:48:c8:b1:66:87:30:
                    39:84:85:c2:c3:af:31:c9:6e:19:b1:1e:a8:e7:5e:
                    de:ef:4f:67:81:19:56:11:24:97:d4:00:a5:48:07:
                    06:80:3a:05:73:ab:fa:83:a2:c3:44:d5:ef:fe:79:
                    66:3b:4a:f3:2b:0e:c5:d6:5e:a2:08:55:72:b7:0d:
                    be:b5:06:6d:f8:34:52:ba:95:d4:2c:18:9f:af:1f:
                    eb:d5:77:40:80:c4:b1:55:4f:54:3e:ee:6c:29:26:
                    b1:20:ed:94:19:ad:ad:21:9f:91:9c:0f:b1:5b:07:
                    5c:9d:ff:ee:53:e2:9e:0c:5a:1e:70:21:c2:34:38:
                    06:ff:a1:fc:5e:44:05:e7:ab:b9:14:6c:e0:40:05:
                    5d:8e:f6:46:8e:b0:79:ab:79:b6:09:89:99:31:29:
                    82:5a:f9:ed:4d:2d:7a:9d:1f:5c:cc:1c:63:77:bc:
                    1e:6d:c8:64:50:ef:b1:e4:b5:ca:f3:99:d5:97:8b:
                    a5:cb:bb:4e:ca:2b:ef:ad:4a:bd:99:72:a2:76:fc:
                    a8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2E:80:E9:28:AB:28:21:42:52:36:B0:A5:D8:EA:60:8F:53:03:4A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c815f6ae-d250-44e4-8b96-e8ac14993d6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:4e:ef:3f:85:cd:5d:f2:ff:3b:e9:b3:1d:40:13:df:54:82:
         4f:dd:2b:75:d7:e1:d3:33:25:b9:c2:5a:02:36:08:97:9b:63:
         cf:db:27:4b:e5:c2:22:56:e4:9d:d6:35:28:61:6e:59:88:c8:
         95:c8:52:97:53:ea:4d:37:ee:b5:f3:7d:23:1b:2a:eb:97:4e:
         e8:d6:88:fc:aa:5a:a7:e0:1f:03:29:df:9f:3c:db:8f:88:fe:
         8b:f7:ad:8b:1c:1a:97:a4:a8:e6:1b:81:66:6a:b7:2b:d1:d9:
         e3:a6:28:1e:5c:80:8d:d8:c9:0b:5f:0f:51:80:6f:02:3b:96:
         4b:11:49:da:99:50:9c:ee:c6:03:4d:c2:4b:4a:01:39:27:48:
         48:29:a3:f7:d5:4c:2c:87:74:f8:6b:09:86:eb:32:11:ff:d4:
         10:65:7d:54:23:7f:e0:59:7c:d7:fa:4b:35:0c:c8:c8:cb:70:
         ed:62:a3:a1:e6:0d:93:02:a3:b8:2c:8a:29:49:61:4e:d2:8a:
         52:ef:dc:95:78:6c:2d:b4:de:20:dc:08:8b:1f:d3:ef:b7:c7:
         29:8e:e6:d2:6e:76:de:ea:4e:1c:f7:a3:00:d9:c2:6f:87:af:
         4c:90:b9:92:e8:33:cf:e9:a7:28:b1:97:d1:b1:46:2c:d2:75:
         61:f0:28:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----