Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/eb8bed03-f2da-46db-beaa-6b78283859c8.roa
File:                     eb8bed03-f2da-46db-beaa-6b78283859c8.roa (raw, json)
Hash identifier:          wBcFbu8bSUje7OusLJCAcoheByNWGIuzltIZDmI1OLk=
Subject key identifier:   17:62:A9:6D:2E:FA:92:9A:52:CA:BD:B0:CA:6A:A6:CE:50:55:85:EA
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       768AAEDCB6BF85DE90A8EC22210A9F8EB8D6C422
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/eb8bed03-f2da-46db-beaa-6b78283859c8.roa
Signing time:             Wed 21 Dec 2022 00:00:00 +0000
ROA not before:           Wed 21 Dec 2022 00:00:00 +0000
ROA not after:            Sat 24 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8a:ae:dc:b6:bf:85:de:90:a8:ec:22:21:0a:9f:8e:b8:d6:c4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 21 00:00:00 2022 GMT
            Not After : Dec 24 23:59:59 2022 GMT
        Subject: serialNumber=3ea8f5cd45a39e9ece0f40568991e11730194fc8622038624180b660fbde4889, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:69:39:3a:c4:46:ae:f7:11:66:35:8b:4e:12:
                    a1:0d:63:ec:56:be:30:ee:37:7f:43:87:59:ed:f3:
                    d7:c9:f8:a0:63:c2:cc:f4:0f:ea:02:8c:c6:f1:0a:
                    7e:7f:4f:64:d8:6d:4a:57:93:bf:de:11:25:a3:ef:
                    ac:f1:92:27:fd:3e:16:e2:5a:56:e0:ee:48:10:40:
                    98:b0:a9:62:90:da:f5:59:c6:f7:2f:15:60:17:6b:
                    0c:e8:c0:8e:4b:d5:b9:35:a5:87:1f:fa:d1:47:7f:
                    04:82:3c:8b:47:2e:36:cb:1d:d7:df:81:b0:1d:26:
                    f1:cc:3a:23:95:bd:a4:f6:0d:37:fb:95:b5:66:43:
                    51:6b:fb:8d:37:5e:10:bd:27:24:e2:0c:89:12:cb:
                    6b:86:a0:ce:67:72:a3:17:e2:e1:bc:2c:90:8c:5d:
                    1d:18:a8:6c:f2:21:0a:1b:92:de:91:ad:9a:b0:44:
                    e9:0a:24:75:52:f6:60:f1:80:ce:11:c7:79:12:34:
                    db:2e:d4:74:f2:f0:75:54:ff:09:3b:9c:3d:4d:f6:
                    f0:19:3e:d9:30:a7:1a:f7:f2:a4:d2:76:4f:ba:f9:
                    96:cc:fe:49:b8:ab:d7:dd:d6:98:c3:3a:d7:01:45:
                    91:ab:e2:f3:eb:da:2e:82:71:9e:df:bc:a3:62:a7:
                    09:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:62:A9:6D:2E:FA:92:9A:52:CA:BD:B0:CA:6A:A6:CE:50:55:85:EA
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/eb8bed03-f2da-46db-beaa-6b78283859c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:54:9e:d8:9c:80:59:8c:21:5a:06:2a:7f:b0:cb:26:e6:3b:
         59:11:75:1c:ca:fe:39:a0:b6:83:ae:d5:53:65:3a:4b:0d:29:
         99:5e:41:a3:4e:62:1e:5b:d9:75:18:b2:94:85:e6:d5:5d:4c:
         8a:1d:7f:2a:bd:b6:36:bc:b4:c1:c6:37:e6:1d:eb:2b:19:7e:
         88:0d:ef:0e:79:e2:7e:a4:54:ce:8d:20:2b:a3:85:16:eb:79:
         ab:b3:21:e8:c7:63:22:15:d3:6c:9e:73:82:ad:9b:c5:23:23:
         19:a6:17:7c:26:2b:b9:4e:53:0d:86:cc:b4:5c:05:25:26:a7:
         3b:80:38:60:af:63:8d:61:ae:34:ba:0d:a9:15:8b:79:65:de:
         03:8a:40:4d:26:06:b9:61:15:0c:e8:a7:5c:e5:fc:48:f5:14:
         2e:bd:2a:5d:13:2a:30:ee:0d:96:2c:c5:42:10:bc:2e:0f:bf:
         19:b3:17:39:83:2d:f6:07:39:18:ad:45:23:2b:ad:dd:1c:c9:
         89:9d:be:64:ca:57:a3:33:db:93:3d:2e:ba:a6:14:6d:d3:89:
         4e:a5:d0:82:1c:f6:9a:fa:09:d5:71:21:8a:21:f6:c1:eb:b1:
         41:eb:36:d7:cf:2b:60:40:10:1f:05:87:80:fa:a9:0a:16:ad:
         f8:5f:50:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----