Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f055a1d3-7362-426c-bb11-a0cd6e875745.roa
File:                     f055a1d3-7362-426c-bb11-a0cd6e875745.roa (raw, json)
Hash identifier:          3Pdgsvc7Cxg5aaAMIh3YI+rzXc/R8LocPMCI+grE0f4=
Subject key identifier:   E0:7E:BB:4F:F3:66:88:53:96:92:AE:FD:96:CC:6A:60:9A:7B:D9:41
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       25DF13437C96AFCB8FB64041F967F6889DAFB98F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f055a1d3-7362-426c-bb11-a0cd6e875745.roa
Signing time:             Tue 18 Oct 2022 00:00:00 +0000
ROA not before:           Tue 18 Oct 2022 00:00:00 +0000
ROA not after:            Fri 21 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:df:13:43:7c:96:af:cb:8f:b6:40:41:f9:67:f6:88:9d:af:b9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 18 00:00:00 2022 GMT
            Not After : Oct 21 23:59:59 2022 GMT
        Subject: serialNumber=e9bd63b1c2f3fb6d528e9093b8a979fc13ab7fbc770e76caeceadf51f4ce84ae, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:15:66:0f:aa:88:6d:f2:03:06:0e:27:91:d1:
                    ae:80:48:5e:90:e5:5c:a8:29:b3:1b:39:a0:97:56:
                    8d:ba:a6:0e:16:64:a7:0d:7c:d7:a1:d2:db:f4:78:
                    ab:23:9a:7a:6b:23:aa:e3:dc:84:b9:a0:4d:45:17:
                    8e:fe:ca:2d:26:66:fe:d9:77:a0:fd:d2:29:ee:13:
                    d4:f0:71:b4:05:91:a4:64:3b:20:fd:a5:5b:8e:88:
                    ea:c7:97:47:2e:dc:5b:5d:ff:72:ee:96:7a:9a:33:
                    12:2d:a6:57:d2:5a:7c:51:c2:dc:0b:62:14:1d:75:
                    09:c1:22:ce:15:60:a3:37:77:ac:38:be:b8:29:de:
                    03:6e:b0:5d:4a:de:73:ec:a8:a6:aa:df:31:0f:77:
                    46:b6:4b:e6:f8:61:65:fd:a1:ce:40:57:1b:be:88:
                    a3:a3:94:ee:ad:41:72:a5:de:0e:37:32:08:99:30:
                    30:c2:88:19:e8:67:ab:60:1a:12:1b:64:04:37:0a:
                    3a:4c:80:8a:ae:fd:2a:c0:45:3d:fa:f4:a2:38:2d:
                    f8:6c:a4:fd:8f:77:6d:32:35:42:31:e4:60:a7:5c:
                    c7:e4:19:0d:f7:65:5f:91:ec:1f:c7:bd:cd:e5:ef:
                    48:d3:5c:7f:6f:ad:d4:6a:ea:92:11:5e:e8:bd:84:
                    75:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7E:BB:4F:F3:66:88:53:96:92:AE:FD:96:CC:6A:60:9A:7B:D9:41
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f055a1d3-7362-426c-bb11-a0cd6e875745.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:fd:00:d6:38:c7:d5:28:6f:a9:ef:3a:5f:20:03:e9:4f:45:
         d7:95:99:7a:03:cb:c9:45:0f:45:d4:38:3e:74:3c:38:bc:70:
         ec:19:df:5e:86:4d:a1:68:f7:55:fa:08:ff:cf:54:d3:e0:df:
         c1:d5:95:5f:23:3e:d9:0e:31:88:cd:47:35:65:6b:2e:b8:23:
         54:68:4a:9b:25:db:cc:c5:53:11:86:90:55:e5:b0:d6:62:7a:
         85:03:2a:d0:a3:1e:7a:6b:3d:d9:ab:b9:8c:93:0c:24:77:04:
         6b:16:75:a6:5c:f4:0b:80:73:3f:72:21:02:b4:68:6c:7b:b2:
         f5:1b:9b:11:37:b5:d2:7e:87:e8:12:63:a4:e2:07:82:ad:2b:
         3d:85:12:c2:a9:09:55:05:fe:d4:d8:d4:1a:d1:50:74:af:8d:
         0a:28:27:d0:be:78:aa:3a:fb:b1:f8:16:f8:f2:3d:3f:74:37:
         03:a0:ce:85:bd:a1:b7:40:8c:46:66:1a:22:99:f7:26:07:a3:
         1b:bb:1a:00:fe:17:a1:08:64:d8:44:2d:dc:01:29:e1:2d:9c:
         92:58:d6:7c:83:6a:78:a1:4b:32:25:d8:41:a3:9f:35:e8:dd:
         23:f5:15:fb:af:2f:ff:5e:a6:ff:07:c9:4c:17:12:cc:dc:5e:
         43:a7:b8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----