Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e4c78be5-6223-4e6f-a3b5-66b40d6d0866.roa
File:                     e4c78be5-6223-4e6f-a3b5-66b40d6d0866.roa (raw, json)
Hash identifier:          MR/FjqGn5IdgY/pYkOtDRmb8tPjR6NmaQ8kRlmnpi4w=
Subject key identifier:   F7:DB:B0:B6:A1:E1:4D:D4:2C:C3:D5:5B:61:97:67:F7:40:00:83:52
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4AFEFA4304C5404793D10AF3F870FD0D7908A670
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e4c78be5-6223-4e6f-a3b5-66b40d6d0866.roa
Signing time:             Sat 08 Oct 2022 00:00:00 +0000
ROA not before:           Sat 08 Oct 2022 00:00:00 +0000
ROA not after:            Tue 11 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fe:fa:43:04:c5:40:47:93:d1:0a:f3:f8:70:fd:0d:79:08:a6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct  8 00:00:00 2022 GMT
            Not After : Oct 11 23:59:59 2022 GMT
        Subject: serialNumber=a0d1b9e9fdc5204ba463422e23806daa6316519820bab2442f265bbc7676f56a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6b:45:fc:f1:ba:d7:a3:1e:c0:e7:c5:64:fa:
                    b0:5b:1b:1a:41:c4:28:52:5d:2d:22:a2:99:11:9e:
                    13:a8:4a:e2:bc:96:1f:b7:c8:8c:a8:6a:f7:0d:d7:
                    d0:6e:b8:a6:4b:b3:40:4e:8a:cb:c2:a1:12:d5:ce:
                    4e:ec:d4:76:51:44:d4:4b:17:b8:b7:6b:b1:49:a0:
                    43:10:22:22:b9:50:16:12:ab:4e:01:c6:48:20:2f:
                    44:a5:f3:f2:95:92:5a:4a:9d:5c:0c:39:4d:10:68:
                    cf:dc:be:1a:69:1b:b6:9e:21:ca:e2:cf:7e:8d:1a:
                    81:65:a6:98:11:23:9f:ec:e2:96:48:1d:26:0a:16:
                    f3:e8:c1:84:60:9e:32:9c:29:2e:1b:77:a2:30:d1:
                    f3:c9:78:e3:b3:ae:cd:fb:82:26:51:d4:ee:61:fa:
                    b4:38:d1:7c:db:6b:a4:a2:c5:b8:e5:7a:73:ab:c3:
                    75:df:f7:49:47:79:22:6b:e9:d9:2d:81:5b:c5:7b:
                    0e:67:79:e2:f3:56:fb:83:70:3d:f5:bd:c2:ba:ec:
                    e4:cd:23:29:d4:b4:44:35:b0:2a:ee:9d:e4:ae:58:
                    00:47:d2:44:ed:d7:06:a4:59:c0:0a:59:3c:dc:bb:
                    03:16:1e:86:c0:e4:55:69:b5:1e:33:e6:20:71:13:
                    d5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DB:B0:B6:A1:E1:4D:D4:2C:C3:D5:5B:61:97:67:F7:40:00:83:52
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e4c78be5-6223-4e6f-a3b5-66b40d6d0866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:57:37:84:c0:16:c4:93:71:e5:5c:52:73:8a:79:ca:31:07:
         00:25:37:d9:d6:29:9d:69:3c:57:70:e5:d1:bd:2c:74:a3:b9:
         df:9a:c9:65:2c:e0:94:8c:13:7c:51:5a:0a:ec:7b:8f:d1:3e:
         a9:20:da:c6:5c:b9:b6:9c:66:1f:05:cc:22:1a:1d:a1:05:96:
         92:12:b0:36:35:2d:a4:7c:39:8d:e4:91:ee:eb:d8:b5:4f:07:
         7a:8c:49:61:2d:a0:aa:8b:7d:6f:07:93:bc:9f:20:89:9c:10:
         8e:9d:4f:03:8b:82:32:1b:09:d2:4e:d6:14:89:73:97:12:b7:
         99:e1:39:06:88:9f:e7:9b:5b:8a:6e:01:b8:20:8f:ef:81:09:
         80:b6:ea:95:7e:22:ea:01:21:6a:1f:66:f3:94:99:a5:81:0b:
         c2:d3:b2:29:cd:c4:0a:d1:e9:9c:4d:68:c7:78:1e:14:c9:1c:
         8b:ef:1b:e8:ea:23:f2:1c:db:ec:e4:50:63:43:3d:e6:46:e4:
         c3:97:05:c7:6a:5f:92:e4:85:31:f1:81:6a:77:a2:cb:af:0a:
         de:f8:64:ee:7b:6d:10:3d:48:c6:7a:42:16:fe:c1:75:c7:3e:
         ba:91:47:46:07:2a:41:ca:60:5f:06:d3:8e:22:4a:66:20:c9:
         0e:3b:2d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----