Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/eac7eb6f-f43b-4c61-85d3-93ea3aa38113.roa
File:                     eac7eb6f-f43b-4c61-85d3-93ea3aa38113.roa (raw, json)
Hash identifier:          Yk86QfvOqTBjP1n+jU71w6GibFdq87vvofIdiVUwigY=
Subject key identifier:   1F:17:44:6F:79:7A:71:75:50:65:7C:0F:09:EE:99:A9:42:99:10:2B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7261E9BC85C3385A8E35B53AA5A1C70AE207A38E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/eac7eb6f-f43b-4c61-85d3-93ea3aa38113.roa
Signing time:             Mon 12 Dec 2022 00:00:00 +0000
ROA not before:           Mon 12 Dec 2022 00:00:00 +0000
ROA not after:            Thu 15 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:61:e9:bc:85:c3:38:5a:8e:35:b5:3a:a5:a1:c7:0a:e2:07:a3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 12 00:00:00 2022 GMT
            Not After : Dec 15 23:59:59 2022 GMT
        Subject: serialNumber=cc7a3eadf1dabe4afcb365b1fb72ecfe204cf6f9bd0c0924e40a739a68c6884c, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:e8:78:00:b4:32:91:f1:fa:35:85:c2:9e:
                    89:7e:38:b4:58:94:bb:d0:40:5b:8b:82:80:81:6e:
                    3a:8b:13:5c:c9:f1:f9:fb:13:d0:b3:c3:e6:a0:d8:
                    ea:d2:9b:86:19:79:12:a0:bf:85:fa:71:74:61:be:
                    8d:74:95:10:9e:3b:14:1a:b3:1d:cd:06:e7:c3:82:
                    d5:6a:f2:53:2d:84:7f:28:35:73:6b:1f:46:8e:e3:
                    dd:94:9f:09:75:9d:5a:d3:e8:64:e9:a0:26:96:f4:
                    3d:1f:75:eb:5b:d2:59:b5:ce:91:0c:0c:e1:51:13:
                    83:69:1b:88:51:be:c1:67:13:d4:12:3f:ad:05:51:
                    0a:e7:05:a8:5e:15:b8:4a:47:39:51:f7:3a:14:06:
                    cc:ba:af:1d:2c:20:bf:9a:95:97:1f:97:1c:c8:16:
                    05:b3:d4:de:91:49:18:f3:10:f8:59:e6:28:9e:37:
                    e3:88:bb:c0:25:66:80:18:72:23:f7:4c:67:7a:8a:
                    85:bb:07:a7:5e:56:81:52:a8:16:59:4f:a8:95:b2:
                    bb:39:6e:65:ba:19:5f:f7:9b:8b:c1:9a:ef:19:54:
                    1e:7c:b4:8d:55:5b:20:f5:dc:eb:00:50:60:f7:c1:
                    25:af:14:35:61:71:4a:d2:86:7a:33:c7:8f:4f:3d:
                    b2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:17:44:6F:79:7A:71:75:50:65:7C:0F:09:EE:99:A9:42:99:10:2B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/eac7eb6f-f43b-4c61-85d3-93ea3aa38113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:60:c7:65:61:7c:a4:21:4f:d3:de:6c:47:85:83:53:4c:db:
         fc:94:9e:c3:f9:5a:68:8b:39:87:6c:34:16:bd:2e:ad:c8:3d:
         d4:b8:5a:24:66:6c:3f:90:f9:a8:c6:57:13:86:9b:f5:7d:9b:
         2a:41:68:66:b9:d3:fd:57:90:77:4a:67:2c:31:63:85:aa:d3:
         86:f9:62:a5:1d:02:ce:7c:02:6f:a0:f9:00:51:74:84:cb:c9:
         d0:03:1f:dd:c9:ca:ed:ac:fc:93:f9:e1:38:97:d9:1b:38:6f:
         6a:e4:e8:ad:7d:e2:bc:5a:4d:c8:ac:fc:8b:80:ac:9e:b9:fd:
         03:80:83:e0:b5:a3:e2:97:89:ff:8d:d0:2b:04:06:e8:21:61:
         9d:77:67:08:75:c2:a4:50:56:18:0e:cc:2a:36:e9:f2:9c:37:
         5a:a0:9a:06:74:fa:cd:b7:eb:61:51:bf:79:ec:ec:ef:c2:54:
         1e:53:68:a0:4b:f1:a0:77:81:cc:76:05:c1:f8:90:9e:ae:da:
         03:c2:c0:0c:cf:0e:66:c4:b1:ff:d6:80:08:f6:a1:7e:06:85:
         fb:4f:24:83:db:b5:b8:63:93:f1:6c:ae:53:f4:a6:dd:77:79:
         da:86:b6:7f:b3:0c:53:49:08:bb:61:18:16:d6:83:4e:ca:50:
         43:d3:ab:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----