Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/dfc7b16d-28a3-4f1f-9dd4-4d00be01230d.roa
File:                     dfc7b16d-28a3-4f1f-9dd4-4d00be01230d.roa (raw, json)
Hash identifier:          sHmt+hBujOsNAE9RHd6F40jjMkggB5c98HYRkT1oX/I=
Subject key identifier:   30:40:DC:B3:6C:F5:F9:9B:A1:36:E3:CF:D7:BC:24:EA:F0:40:79:9D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       564357D25562444348F2B0D970026D34E2607CFA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/dfc7b16d-28a3-4f1f-9dd4-4d00be01230d.roa
Signing time:             Wed 04 Jan 2023 00:00:00 +0000
ROA not before:           Wed 04 Jan 2023 00:00:00 +0000
ROA not after:            Sat 07 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:43:57:d2:55:62:44:43:48:f2:b0:d9:70:02:6d:34:e2:60:7c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan  4 00:00:00 2023 GMT
            Not After : Jan  7 23:59:59 2023 GMT
        Subject: serialNumber=0bc8cb26902e8f0986e04c6f8e780f6e5ab035a1ed11030a9ea5e13729d74dbf, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1b:c4:b5:8c:f2:47:01:ef:da:89:c7:61:16:
                    15:56:98:19:00:06:d0:f3:c9:23:75:8b:c3:40:29:
                    e9:e1:0b:78:c2:13:42:51:5e:89:db:a4:04:31:0d:
                    6b:29:ef:fc:12:72:d1:4e:e1:42:45:f3:94:f4:c5:
                    08:6b:16:85:a5:3c:d0:1e:6e:39:ff:31:d5:be:b2:
                    ec:5f:05:1f:90:ee:10:eb:63:43:78:bd:0b:64:ca:
                    7c:cc:ca:26:bd:dc:f2:d3:65:8a:3c:b1:0b:19:18:
                    b6:c4:35:dd:41:aa:d5:87:0f:e5:68:8a:31:04:a6:
                    62:58:a6:57:43:73:3b:39:ad:a1:a6:c5:52:32:13:
                    fe:98:19:a2:98:c3:ce:7a:29:ed:51:67:7c:79:4c:
                    44:d8:13:ec:4d:20:1f:54:76:50:5f:c4:d2:56:9d:
                    0a:c2:0a:57:2e:19:d1:60:2b:a9:bc:41:d8:19:5f:
                    9e:f6:99:49:2b:6a:50:60:ae:2b:75:5a:93:a0:58:
                    c9:c7:f2:24:a2:bf:8f:51:f2:ab:f8:7f:80:0b:8f:
                    57:cf:47:80:a0:92:fa:1b:c1:49:b6:7a:a4:27:13:
                    0b:e9:ec:4a:66:9d:61:0a:d4:d2:57:dd:b9:02:d0:
                    9c:38:e7:87:c0:2c:ed:96:7e:35:e7:7f:54:77:0b:
                    e0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:40:DC:B3:6C:F5:F9:9B:A1:36:E3:CF:D7:BC:24:EA:F0:40:79:9D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/dfc7b16d-28a3-4f1f-9dd4-4d00be01230d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:0d:85:6b:4e:a6:f3:31:1c:78:a4:fd:51:00:96:13:c1:ea:
         0c:bd:41:0e:f2:fe:6a:16:dd:d6:2b:ef:46:a7:8c:df:16:64:
         da:8a:6e:ef:ff:b7:b4:30:1e:7b:0c:1f:bf:87:e0:d6:1b:e2:
         55:a9:3e:8a:7f:d3:3b:d9:11:4e:dc:b7:b9:be:80:f5:3f:d4:
         32:40:5e:fc:e9:ad:54:1b:3a:79:fc:01:f0:ab:d1:b8:a3:4f:
         12:37:38:52:cf:ae:d3:4d:8a:24:c1:1a:94:47:4d:10:b7:67:
         9e:8f:12:d5:1d:87:72:6d:99:12:e0:45:4b:91:66:1f:8b:86:
         60:3d:14:81:98:2e:03:e0:e5:6e:bf:d7:89:1c:9f:85:54:06:
         5a:0f:8b:d4:cf:1d:84:25:33:55:d7:9f:0d:66:d1:53:06:53:
         74:ec:ce:14:5d:d1:07:ed:24:83:b7:75:d0:ce:da:91:b5:b4:
         eb:4f:c8:9b:4d:1c:d1:89:e2:0c:d5:a4:c9:9e:d0:79:61:31:
         62:00:6a:52:4c:6e:dd:0d:d0:bc:3b:8a:21:6d:04:57:ae:32:
         98:b0:eb:74:78:01:ee:36:55:70:c4:f2:1a:da:e6:5a:d2:0c:
         46:7b:5c:a4:54:42:d5:8a:fe:af:7e:e0:78:a8:ca:06:b5:f9:
         57:3b:ff:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----