Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d7eb9d9b-9ce2-4393-91c9-90ea9ac6ab68.roa
File:                     d7eb9d9b-9ce2-4393-91c9-90ea9ac6ab68.roa (raw, json)
Hash identifier:          TiPi+eRIovry++p8u0eFuJCKDd1SrpGvQVOAS+ydYhM=
Subject key identifier:   76:5A:E4:D0:2A:DA:74:F0:15:28:EC:F0:05:5E:65:2D:EF:F6:13:39
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2F3D39A574040846FF062833A15C6D6522EF79F9
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d7eb9d9b-9ce2-4393-91c9-90ea9ac6ab68.roa
Signing time:             Mon 12 Dec 2022 00:00:00 +0000
ROA not before:           Mon 12 Dec 2022 00:00:00 +0000
ROA not after:            Thu 15 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3d:39:a5:74:04:08:46:ff:06:28:33:a1:5c:6d:65:22:ef:79:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 12 00:00:00 2022 GMT
            Not After : Dec 15 23:59:59 2022 GMT
        Subject: serialNumber=1c235417d036799f982b4fea0e102d776b99dcef095cf93d3887ac445110e2d8, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:24:24:00:b9:cb:8f:7a:40:10:82:fa:64:e5:
                    06:10:94:09:3b:be:93:1d:29:c3:de:9d:94:b2:8d:
                    29:d6:f0:2c:97:7e:1d:3e:02:d8:8d:8a:84:2b:2e:
                    54:30:8a:7b:4d:a1:8c:68:01:2e:4c:3d:3d:81:64:
                    bb:30:3e:ea:50:49:21:36:1c:0e:74:1d:7b:c1:0f:
                    9d:2b:19:f7:f6:10:b1:48:6a:89:84:f6:cf:a8:d2:
                    36:b6:68:ad:21:44:16:6e:af:0f:38:58:15:53:f0:
                    17:d7:d7:36:7b:db:11:b2:92:01:0b:da:65:c8:eb:
                    80:e1:f4:74:41:a9:ac:51:d7:7c:cc:fc:ac:4d:a0:
                    6f:f5:d2:68:84:bb:12:a7:4f:42:e1:51:cb:68:7c:
                    e3:91:87:95:4b:ac:7e:e0:ff:0b:e8:28:2f:5f:47:
                    b7:1e:dd:50:c9:93:93:b3:a7:2c:d1:0f:83:97:2b:
                    5e:93:5c:2f:5c:77:c8:fa:c5:8d:3f:fe:2f:19:86:
                    2a:e9:4a:e1:df:9b:f8:9b:7c:58:8f:4d:74:5a:47:
                    d2:a7:a6:76:dd:ff:c3:83:cb:5f:f4:d4:d1:d3:07:
                    0d:c1:0e:8a:56:3d:08:92:54:12:ab:9d:fe:c5:0d:
                    b0:c7:ea:c1:11:54:43:1b:9b:f5:98:1b:5a:63:50:
                    38:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5A:E4:D0:2A:DA:74:F0:15:28:EC:F0:05:5E:65:2D:EF:F6:13:39
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d7eb9d9b-9ce2-4393-91c9-90ea9ac6ab68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:e2:18:da:22:a5:0f:7f:93:b0:6b:63:ab:11:8a:12:73:1c:
         63:a1:34:66:ac:2a:2c:1b:05:e0:c5:eb:bb:c0:fe:81:2a:98:
         70:6c:67:2d:dd:21:8c:ca:ce:71:89:15:5d:18:79:f8:16:48:
         30:d9:b5:ca:e9:63:bd:80:a7:6b:b8:72:3b:ee:06:dd:fa:59:
         ff:7d:07:97:31:bd:d0:b7:65:69:16:e9:18:9d:a6:bd:f4:af:
         13:90:13:84:f3:9d:64:33:49:40:0e:96:c9:23:38:90:65:a9:
         a0:48:bb:9a:4b:3e:3d:ff:5d:db:09:40:9c:4a:25:16:d5:87:
         2e:b1:8c:a8:b4:24:73:88:4a:64:3b:4e:07:1d:55:a4:d1:1f:
         2c:e1:78:34:10:83:90:ba:4e:53:2d:85:bc:36:4b:cb:91:7e:
         ab:92:84:3f:53:50:c7:ec:42:1e:50:34:b1:82:8f:26:00:34:
         9b:ca:1e:cc:04:7d:4e:6d:ac:0f:fc:c0:13:ac:08:75:2f:f6:
         3f:3c:2b:f2:bb:92:a5:ce:db:49:60:07:41:fb:64:63:cb:4d:
         8f:55:46:2a:5d:a8:8e:ff:63:38:09:e3:fa:78:0f:c7:af:07:
         78:0f:03:77:5a:de:5e:c1:ab:49:fe:43:ff:79:46:f4:79:c9:
         28:37:23:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----