Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cab07494-e473-4558-92a3-717375d682cd.roa
File:                     cab07494-e473-4558-92a3-717375d682cd.roa (raw, json)
Hash identifier:          jEM88H3JEsGS2++8/Y+zBGCkr8H3GwZF7GPRhNJ3g1w=
Subject key identifier:   75:85:BC:00:99:B8:44:89:98:D1:BD:B9:33:64:71:E7:F7:A0:46:CB
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       01D698E5D404B00F535028A54FDE223F6DA7F726
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cab07494-e473-4558-92a3-717375d682cd.roa
Signing time:             Thu 28 Jul 2022 00:00:00 +0000
ROA not before:           Thu 28 Jul 2022 00:00:00 +0000
ROA not after:            Sun 31 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d6:98:e5:d4:04:b0:0f:53:50:28:a5:4f:de:22:3f:6d:a7:f7:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 28 00:00:00 2022 GMT
            Not After : Jul 31 23:59:59 2022 GMT
        Subject: serialNumber=262e07f4768713e956ae97d9a7e3326b2b9910be39e03d8dd8f71450ab9bc532, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:c4:73:7b:88:b8:1a:a1:ed:ac:e7:85:f7:
                    4d:f3:48:d3:6e:23:04:3e:53:81:70:ee:cb:99:15:
                    25:67:43:f3:21:73:5f:aa:f3:d0:f1:16:59:f7:c3:
                    cb:66:ed:65:f5:db:8a:73:8b:2a:f0:8d:26:21:98:
                    e7:3b:aa:90:89:72:3e:dd:84:9e:4c:6a:77:0c:a4:
                    a0:c5:69:fe:65:4a:31:d3:50:b2:3b:53:4c:ca:54:
                    93:af:58:0d:3f:06:2a:2c:8e:da:1d:0e:b5:fe:04:
                    dd:5d:e7:d8:8d:7d:8f:64:6b:64:f9:d4:80:5c:67:
                    11:55:17:e0:78:60:4a:57:ae:b5:de:2d:7d:3d:d0:
                    7c:e9:73:b2:6b:37:f4:1a:69:57:25:91:bd:b8:0b:
                    b3:55:ae:ec:f6:93:b7:5c:96:07:59:4d:84:1d:17:
                    fc:cc:07:0e:db:54:01:ed:c9:a8:88:a0:23:88:ee:
                    a1:11:be:09:b6:06:a1:06:c0:d8:41:70:67:5f:06:
                    e8:ce:cd:66:fb:fe:7f:de:e1:d7:5c:92:ca:13:95:
                    bb:8f:23:65:d3:21:75:12:d0:7c:02:4c:20:0e:ef:
                    7e:a9:92:67:ce:97:e3:d2:88:dc:fe:aa:ca:ff:c2:
                    ee:24:f0:d5:a2:6c:70:c0:9b:85:77:f0:89:c4:f4:
                    21:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:85:BC:00:99:B8:44:89:98:D1:BD:B9:33:64:71:E7:F7:A0:46:CB
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cab07494-e473-4558-92a3-717375d682cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:38:1f:d1:de:19:3d:24:fb:b5:b4:3a:ab:7d:bc:06:bd:fa:
         ae:27:e6:c4:af:4c:6a:6d:16:7d:3a:6b:04:cf:a2:ec:8d:e9:
         db:99:8f:3a:46:24:0d:d5:f2:76:79:6c:69:ca:8c:94:bd:31:
         37:f7:9e:ac:9b:cc:2b:0b:ef:93:10:5c:7b:71:32:2e:ab:59:
         9b:af:94:2a:27:17:14:08:2d:75:b0:03:58:bb:74:f6:1c:53:
         f1:65:e1:49:70:8f:df:ed:f0:a8:00:23:e1:b4:75:1a:36:ce:
         e5:18:a4:04:b8:0a:fd:50:99:4b:1d:dd:14:24:f8:62:76:ac:
         f2:27:04:ed:50:81:fd:be:06:a7:8b:08:ff:ad:26:51:7d:b9:
         8a:92:2a:23:b4:b7:55:3b:14:da:87:2a:1d:66:38:2a:75:fa:
         b7:00:d9:04:77:e0:78:69:c0:b7:bb:4e:f2:13:67:2c:c1:ad:
         f2:4e:9f:64:f3:96:be:23:6f:e3:95:1d:7c:8e:c1:86:f8:f5:
         61:41:82:c9:45:fa:a3:15:d0:82:ce:34:a0:f8:f1:c9:eb:e1:
         ad:55:da:c4:73:a7:81:0f:d3:9b:6b:66:ea:7e:92:70:f5:9d:
         86:af:c7:28:27:1b:bf:43:17:4f:b1:1e:8f:57:a4:0d:ad:59:
         57:0c:11:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----