Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e4d4093e-0389-48ed-a724-80841852b92d.roa
File:                     e4d4093e-0389-48ed-a724-80841852b92d.roa (raw, json)
Hash identifier:          hbMD5zZH8TfyVCTWa2/7BqfesgP+qzt4VN6/lWHLUu0=
Subject key identifier:   71:7E:7E:3F:15:47:DE:69:0B:1E:31:6F:50:1E:41:C6:59:F0:7F:91
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2B399CBB2822E47A6284C3ABB392C6B5ECDD4722
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e4d4093e-0389-48ed-a724-80841852b92d.roa
Signing time:             Tue 20 Dec 2022 00:00:00 +0000
ROA not before:           Tue 20 Dec 2022 00:00:00 +0000
ROA not after:            Fri 23 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:39:9c:bb:28:22:e4:7a:62:84:c3:ab:b3:92:c6:b5:ec:dd:47:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 20 00:00:00 2022 GMT
            Not After : Dec 23 23:59:59 2022 GMT
        Subject: serialNumber=caf4ef7342b9eb38ee1c0b668045e8d76abae7848356d2d839bdd7ff1c8563aa, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:66:61:60:1e:fa:0a:70:ec:7d:90:5c:93:ec:
                    67:69:80:34:cb:6d:99:dc:23:1d:83:88:58:0b:77:
                    ed:84:b6:5d:33:c3:70:4f:ce:42:94:8c:c6:76:87:
                    69:1a:f5:c0:b9:49:a2:e1:95:27:6f:18:26:1f:42:
                    1b:a5:1b:3a:10:13:f8:38:00:38:f3:35:61:81:c5:
                    63:9b:00:86:2c:89:19:5a:a2:4c:36:89:b1:a5:7e:
                    cd:4f:0c:c9:06:ab:1a:11:f3:25:f0:ea:df:de:97:
                    9e:0a:ab:59:b6:1d:49:d1:9c:8e:57:5d:e9:7b:38:
                    f9:b9:3a:da:6d:0b:3d:4e:0e:5c:0e:8a:66:d9:e7:
                    3d:a5:dc:eb:78:5f:42:41:8d:18:2d:f6:80:dc:40:
                    7c:76:18:72:46:3a:1f:62:6e:4c:1f:05:96:dc:d3:
                    ab:fd:f3:01:89:f3:6c:13:56:71:86:e1:81:93:4b:
                    34:e1:a5:88:9c:1c:4b:f4:a4:c1:61:00:d2:1c:4a:
                    f1:d6:bc:da:96:ad:b1:af:66:20:a4:04:f2:f4:58:
                    bc:0c:36:97:f3:e6:49:1c:64:06:ff:ef:60:8b:02:
                    3b:2f:00:b1:5a:25:60:cb:9e:be:34:9c:9a:b0:15:
                    15:d8:fd:2f:72:75:dd:35:b1:e8:7b:c9:71:d0:52:
                    46:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7E:7E:3F:15:47:DE:69:0B:1E:31:6F:50:1E:41:C6:59:F0:7F:91
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e4d4093e-0389-48ed-a724-80841852b92d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:49:02:4e:f6:93:dd:45:49:c7:3a:24:0f:f4:5b:80:d5:4a:
         a6:d4:b8:73:23:d4:86:53:91:ca:32:db:5f:98:64:5f:0b:96:
         6e:06:64:e9:fa:aa:6b:91:44:f6:2d:91:f4:88:5a:8a:bc:4a:
         e8:10:75:78:ee:ce:67:3b:2a:84:51:66:6d:02:b4:62:c0:4e:
         37:38:cf:b7:c0:1c:83:eb:ed:9d:4c:64:4c:6c:c0:5e:b3:be:
         d9:7b:7e:f2:7d:47:1b:08:f6:31:ce:f0:3a:b9:db:26:c3:c9:
         a7:e0:c0:d6:00:d3:8d:ea:a7:e4:95:55:f8:bf:53:d4:6c:be:
         b2:32:1c:d8:8d:3f:be:e7:e7:61:bf:09:3e:d1:a7:bd:13:73:
         9d:cc:d5:d7:e0:94:7d:70:64:d0:14:df:fd:d4:bb:db:d7:d3:
         92:7c:94:9d:ac:67:46:9b:2f:7f:c1:c3:e4:fc:c5:c4:54:dc:
         b5:70:8a:e8:a3:1a:3c:a7:e4:4f:e8:dd:23:6a:68:5f:88:2d:
         57:65:73:4a:6c:88:6c:cb:f2:db:b1:38:2b:c1:34:09:23:3d:
         81:73:2b:33:af:bd:7b:ee:ab:68:ec:4a:09:70:de:17:85:cc:
         43:9c:46:a3:5b:c6:fb:e9:0c:bd:b8:ec:e7:05:7d:00:91:4e:
         0f:46:67:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----