Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/feeaf161-0244-44db-99e8-5091fdeaab34.roa
File:                     feeaf161-0244-44db-99e8-5091fdeaab34.roa (raw, json)
Hash identifier:          epEAGTSBWwRMGBAEUwW2wionv3VwEGYP6v3qElIhg58=
Subject key identifier:   E2:C7:2F:37:E2:0F:47:3E:A2:40:5A:CD:7E:A2:56:BC:E4:C5:1E:EF
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0B866734F3587C7822485B3E0C675352A1168EF0
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/feeaf161-0244-44db-99e8-5091fdeaab34.roa
Signing time:             Mon 09 Jan 2023 00:00:00 +0000
ROA not before:           Mon 09 Jan 2023 00:00:00 +0000
ROA not after:            Thu 12 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:86:67:34:f3:58:7c:78:22:48:5b:3e:0c:67:53:52:a1:16:8e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan  9 00:00:00 2023 GMT
            Not After : Jan 12 23:59:59 2023 GMT
        Subject: serialNumber=c8c42e9dda5f5e5ca850d0dbd7f0c972d864d241519c25b00e9bcc5a6395a089, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7a:b5:d6:7d:e9:f7:eb:bf:71:25:5e:b8:56:
                    0a:7d:5f:79:4f:b5:90:62:9c:b3:d7:d5:36:c9:41:
                    99:2d:d2:42:77:60:89:55:0c:06:0e:2c:77:fa:45:
                    42:97:70:68:f2:bf:d2:8e:42:ee:db:7a:47:ec:e4:
                    70:41:20:13:9f:66:3e:7e:fb:21:ba:3e:2a:d0:da:
                    2c:54:c6:ea:6b:cd:aa:86:78:0f:20:38:1d:df:1a:
                    4c:b3:a8:12:88:5b:d4:67:28:7b:8f:99:e7:4a:18:
                    17:8a:c3:13:8a:b1:5b:0d:f7:2e:06:2a:79:63:ec:
                    c5:f2:81:58:02:6c:c6:99:4c:a8:75:4e:00:c7:37:
                    7e:1d:9b:fa:d9:b7:cd:d9:97:87:18:7c:c5:b4:96:
                    e4:b1:c7:91:16:ea:e9:40:4a:32:88:49:91:14:83:
                    55:78:e8:d5:93:1d:44:0c:d2:07:94:26:54:38:c0:
                    c1:e4:53:a5:e2:fa:51:16:49:2c:ca:d3:ae:f7:b6:
                    c3:79:79:e5:5a:a1:14:19:2a:34:35:6c:98:15:94:
                    b5:11:94:b3:ac:34:71:71:cb:f5:d1:4e:3e:a1:f7:
                    6d:c0:b2:4d:45:50:4a:8b:5a:a6:d8:3a:55:57:72:
                    c2:4b:ae:8f:b8:a0:6f:05:78:2d:70:53:03:c8:49:
                    dc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C7:2F:37:E2:0F:47:3E:A2:40:5A:CD:7E:A2:56:BC:E4:C5:1E:EF
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/feeaf161-0244-44db-99e8-5091fdeaab34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:f8:2b:b2:53:9d:7f:18:97:26:fb:aa:f9:c7:e0:e9:3e:a6:
         dc:dc:58:15:34:29:b5:a7:f3:0d:65:3d:1f:3e:6a:71:52:93:
         1c:cf:36:71:0c:f5:25:68:de:49:a3:86:f3:44:51:1d:71:5e:
         6a:e5:c3:95:82:e7:ac:82:d2:4a:ce:cb:9d:be:bc:c9:da:90:
         36:a4:c5:66:6f:d2:96:cb:68:80:91:1e:1a:75:84:09:dd:0f:
         72:6a:6c:19:73:4e:23:ad:2a:6e:12:01:4e:77:49:c2:70:16:
         3c:cc:bf:ef:2f:69:3c:70:93:c8:c5:da:77:5b:64:de:c3:27:
         07:11:15:60:6f:4b:f1:48:eb:3e:50:24:0c:e5:ef:ba:f5:01:
         3b:5f:f3:fb:a4:31:60:6b:16:2c:34:9c:6c:c5:56:1f:34:ad:
         40:96:78:a6:01:5b:f6:1d:31:72:8e:e0:c3:6e:f8:03:98:9f:
         b9:07:21:2d:56:03:80:3c:64:33:8b:9d:06:7a:e6:cf:01:36:
         ca:5f:85:69:2b:d4:75:ff:d0:df:f4:07:bc:7f:2f:5d:23:2b:
         52:bb:fc:40:f0:d2:db:46:84:5a:e4:4a:f2:64:24:fa:52:f4:
         4b:f4:d7:e6:73:06:70:00:38:71:92:be:f6:24:5c:56:14:66:
         18:82:6b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----