Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cef95588-8856-4464-975b-a9e82e05df26.roa
File:                     cef95588-8856-4464-975b-a9e82e05df26.roa (raw, json)
Hash identifier:          vq9bB6f6qoQJkJIUrwyMHln5ClGBliv5T4tSJlY8eN8=
Subject key identifier:   31:17:5B:32:DA:52:12:9A:E5:9C:01:B4:F1:FD:C9:ED:58:48:54:83
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6FBB5227A1E7758A0D9869CC577C3E9AA1C9F6C5
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cef95588-8856-4464-975b-a9e82e05df26.roa
Signing time:             Mon 07 Nov 2022 00:00:00 +0000
ROA not before:           Mon 07 Nov 2022 00:00:00 +0000
ROA not after:            Thu 10 Nov 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:bb:52:27:a1:e7:75:8a:0d:98:69:cc:57:7c:3e:9a:a1:c9:f6:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Nov  7 00:00:00 2022 GMT
            Not After : Nov 10 23:59:59 2022 GMT
        Subject: serialNumber=9bb22d91a2f77721fe22ed1b330e03b827dc0168c2199a4ab257b78cc08c3f0b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:dc:f5:e3:12:5a:22:9c:96:70:45:5d:fe:99:
                    e2:f7:bc:6d:d3:b8:68:f5:5a:e3:33:31:55:a7:94:
                    7d:69:ba:07:66:84:4b:05:7e:96:1a:b9:a5:66:4b:
                    37:e8:4b:79:aa:96:98:93:63:96:5f:47:dc:1a:4e:
                    7b:a7:e7:17:18:60:30:57:cb:d0:b7:99:db:58:df:
                    2f:07:8f:04:93:4b:47:32:db:3d:db:27:31:0d:0a:
                    58:3f:54:4a:d9:a1:13:3e:6b:24:0e:ef:bc:71:2c:
                    38:7b:ec:4e:3c:49:14:87:80:4f:cd:6a:d8:39:a5:
                    59:ba:bf:fc:93:56:5e:a5:d2:1b:6b:3c:3c:c4:c6:
                    d0:f5:fc:d6:0e:b7:3f:84:a9:13:1f:70:46:58:36:
                    1b:38:89:42:37:79:d6:03:c8:1c:d5:40:7b:61:69:
                    ec:e8:e3:e2:c6:6d:70:5b:3d:ab:c5:3a:86:93:bf:
                    07:93:61:fa:21:a2:55:d0:5a:c8:27:52:4d:d8:7c:
                    e7:e4:23:d3:99:be:92:41:4a:f4:32:96:23:fc:ae:
                    c1:71:47:72:1f:96:38:d5:41:de:44:77:a5:ab:cc:
                    14:29:6d:a2:cc:cd:45:dd:92:d1:a5:b3:cc:e4:be:
                    3d:0f:27:bb:57:27:48:b5:49:95:78:de:f3:5a:35:
                    f9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:17:5B:32:DA:52:12:9A:E5:9C:01:B4:F1:FD:C9:ED:58:48:54:83
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cef95588-8856-4464-975b-a9e82e05df26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:9b:bf:37:39:87:44:f6:55:9c:2f:59:ba:b9:d1:70:d0:e9:
         e9:89:c6:1a:16:d9:c3:2e:7a:9c:54:05:20:55:29:8e:c9:50:
         00:4a:a2:c5:ae:72:da:ac:89:35:81:bf:76:2a:3f:c7:a7:b9:
         cd:2f:44:40:b5:e1:29:c2:cd:ba:1c:c0:26:32:05:00:14:39:
         70:5b:c1:fb:96:d6:1c:86:70:ee:2b:7f:6f:5b:d7:c4:c3:d8:
         11:b5:e0:92:4f:da:25:45:96:9c:11:45:78:0f:85:7b:9c:02:
         d9:33:50:41:0f:5b:33:6d:8a:5e:c5:d1:20:dc:42:78:b4:74:
         32:a8:b9:ca:ee:f0:de:bd:b2:f1:5c:7e:68:09:06:d9:1b:20:
         05:45:11:a9:61:13:18:dc:3b:88:29:25:bb:ad:a0:ff:37:c2:
         a1:07:ec:8a:d7:0a:29:fb:30:d7:ca:fb:23:14:f3:91:2d:39:
         16:34:2e:97:b9:7f:55:2b:7e:16:3d:7b:b4:f8:6e:f3:f1:dd:
         ca:2b:ee:87:c4:02:49:ec:1e:8a:80:fa:3f:56:05:dd:ea:d1:
         db:6b:99:0d:55:8b:38:c8:20:41:00:32:00:54:36:0b:af:d6:
         f5:c0:66:f7:71:c9:8b:d1:a1:f6:76:e4:ac:47:f6:9c:62:b1:
         08:7d:eb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----