Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/dd0c74b1-119a-49a4-afab-798df60eec38.roa
File:                     dd0c74b1-119a-49a4-afab-798df60eec38.roa (raw, json)
Hash identifier:          Xy6sk//dRL7SgmdXInFMdIWMEeklvOe0OWWq4TfB1Kw=
Subject key identifier:   13:86:B7:24:A6:5B:38:B3:76:FF:49:87:CC:FF:8C:68:EA:AD:A4:E7
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       247187D649CD56F619C37F06015961B8B9EB5F93
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/dd0c74b1-119a-49a4-afab-798df60eec38.roa
Signing time:             Thu 18 Aug 2022 00:00:00 +0000
ROA not before:           Thu 18 Aug 2022 00:00:00 +0000
ROA not after:            Sun 21 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:71:87:d6:49:cd:56:f6:19:c3:7f:06:01:59:61:b8:b9:eb:5f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 18 00:00:00 2022 GMT
            Not After : Aug 21 23:59:59 2022 GMT
        Subject: serialNumber=8e3dfdcbfe439b3516b6559c26c09bdde78cc184c531776b639af813e465b2cb, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:fa:48:fa:5b:f0:81:f6:40:bb:78:03:bb:
                    7b:17:ea:84:2f:75:b8:6a:52:7d:87:39:fb:cb:ae:
                    76:bb:d2:bc:20:25:5e:91:e0:02:54:51:14:a7:47:
                    6e:ae:ea:bb:3d:87:bf:a6:1c:35:e7:42:d8:a5:cd:
                    ba:35:c0:1f:33:c5:43:ad:07:2a:3c:4a:0e:98:b8:
                    a4:8d:9c:6f:5d:11:e3:5f:3f:0f:d4:63:93:4f:39:
                    7e:10:ac:36:d9:75:42:20:3a:19:81:68:fd:19:c5:
                    e7:0a:7a:f1:3e:5b:81:0c:b7:01:a7:1c:1e:f7:ea:
                    6b:57:fd:72:5e:93:90:16:54:96:40:f8:b4:1b:ed:
                    ec:eb:2e:70:2b:b7:17:b9:d4:d8:16:17:e5:7f:d7:
                    5d:e3:51:9b:22:fb:05:f3:0d:87:97:d6:8a:a1:07:
                    c4:62:7a:c3:e2:e1:59:0d:5d:1b:53:52:5f:f1:bd:
                    08:0a:37:f1:be:5b:b2:54:8e:6c:cf:f6:34:2b:79:
                    75:c1:10:27:f0:d1:1b:80:39:9e:f8:f0:13:3a:71:
                    90:0b:7a:fe:dd:29:f9:ca:18:e1:ea:32:31:93:70:
                    27:20:47:4f:3c:f6:3e:78:69:35:fe:8a:78:a8:2a:
                    2c:ce:9e:ee:3e:91:c3:25:3d:bb:f7:57:b3:4d:1a:
                    99:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:86:B7:24:A6:5B:38:B3:76:FF:49:87:CC:FF:8C:68:EA:AD:A4:E7
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/dd0c74b1-119a-49a4-afab-798df60eec38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:9b:91:c5:83:37:4f:4f:40:82:b5:c5:2c:3a:f1:31:20:fc:
         cb:db:8a:64:43:fe:e1:e6:c0:65:10:e7:8e:b6:bc:fb:cb:52:
         69:7f:e0:42:e8:71:d6:3f:0a:ed:fd:93:3b:32:36:92:b2:8a:
         e3:5e:79:8e:1d:98:ba:84:b7:2e:aa:7d:1b:c6:3e:03:d4:e0:
         77:f8:fd:80:bf:da:76:c9:84:be:82:74:61:8f:c6:3f:23:c1:
         ef:8f:94:18:29:26:3a:aa:13:5d:07:52:ca:e9:8a:1b:6b:13:
         66:ed:39:6c:31:15:07:3b:06:05:5c:68:37:48:78:7c:ff:b2:
         e1:83:fc:97:44:c6:32:4b:33:97:44:58:9e:c1:fb:9a:3e:99:
         84:86:7c:f6:44:bf:8a:ff:95:eb:bd:ab:34:c8:31:40:1a:ec:
         76:e5:f0:81:a2:0d:ce:f8:ee:42:78:26:f8:72:06:5b:cd:68:
         94:eb:6d:7f:fc:3b:12:ca:ef:2c:30:ca:6b:e7:43:21:b6:58:
         fd:b4:ed:12:9b:55:3d:93:14:b8:4d:cc:92:7c:4c:5c:b1:be:
         a9:0e:8c:51:df:6f:67:9e:a2:32:ee:9d:1b:26:2c:70:ef:57:
         5c:67:fa:a4:c6:54:7a:31:4e:c3:9e:17:80:36:df:cf:35:2a:
         6b:31:58:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----