Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/01e507c6-3968-4fd3-a3e9-078cb90befc4.roa
File:                     01e507c6-3968-4fd3-a3e9-078cb90befc4.roa (raw, json)
Hash identifier:          zWAqhwDQ4+TGnPnmge+UyrEN9MTVgMxJpahCIIpn73U=
Subject key identifier:   2C:F2:E0:10:7F:5C:F0:9C:DE:93:21:F4:D2:A8:52:25:06:4B:BD:76
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       384FCE780DBA16FD5564DFB900FCDAD800D2A1F0
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/01e507c6-3968-4fd3-a3e9-078cb90befc4.roa
Signing time:             Tue 23 May 2023 00:00:00 +0000
ROA not before:           Tue 23 May 2023 00:00:00 +0000
ROA not after:            Fri 26 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4f:ce:78:0d:ba:16:fd:55:64:df:b9:00:fc:da:d8:00:d2:a1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 23 00:00:00 2023 GMT
            Not After : May 26 23:59:59 2023 GMT
        Subject: serialNumber=d5fe0c2303661eeb259542fe37d31567a646900c99c63e0898c5a5e9b25ffd60, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:81:25:7e:a7:e2:1e:16:e1:57:a5:87:93:
                    c2:e3:ef:2b:c1:6b:b9:b9:9d:7a:fb:77:7c:43:c7:
                    1d:3c:cc:37:5c:3a:b7:5f:3a:04:26:bd:9c:6c:d3:
                    90:44:3f:37:31:83:6e:09:01:bf:c8:59:7c:d2:47:
                    8d:8d:cc:d1:23:8a:17:90:51:57:e8:68:89:90:ce:
                    bf:5b:87:fd:02:f5:5c:21:af:76:02:d6:6f:14:9e:
                    0f:04:92:9f:1c:b7:8b:17:ab:0d:56:c5:16:a2:a0:
                    6b:b6:dc:32:11:3d:90:c9:87:f6:1b:d8:bc:80:d0:
                    5e:9c:3c:77:2f:4e:c1:14:c6:e3:9a:69:8f:b2:23:
                    f0:02:3a:eb:f5:78:57:f2:31:8d:38:a0:a6:c8:c7:
                    77:8e:d4:b5:e6:f0:80:52:b7:72:1c:d3:56:62:ab:
                    c1:ac:16:7b:b7:d9:19:d4:0d:53:bf:a0:3a:64:77:
                    4e:ba:00:02:38:21:67:82:23:df:8f:0a:08:f4:76:
                    8d:59:70:b2:2d:cf:f3:5f:e7:1c:7f:a3:a2:67:62:
                    65:a0:c2:b8:57:be:e0:c3:bc:fa:76:74:c1:be:d6:
                    14:1e:cc:14:71:08:07:67:01:75:fd:87:f1:40:d8:
                    7a:89:50:b0:9a:f6:8b:a6:90:06:fa:cb:0d:ab:00:
                    47:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F2:E0:10:7F:5C:F0:9C:DE:93:21:F4:D2:A8:52:25:06:4B:BD:76
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/01e507c6-3968-4fd3-a3e9-078cb90befc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:18:88:43:40:bb:fb:07:aa:ab:b1:a0:79:2a:68:bd:c0:81:
         64:07:11:34:d7:4f:df:18:ba:83:cc:e6:84:9b:d4:fa:ea:d5:
         e9:49:16:70:d7:9b:45:5f:27:7d:47:80:4b:b4:78:bf:85:7b:
         f6:d3:84:3a:29:5c:56:68:22:e9:f0:ba:48:8c:aa:de:dc:96:
         af:c7:2e:23:36:3f:6b:c8:21:ef:1f:0c:cb:80:82:69:d7:f4:
         7d:03:83:aa:f0:8d:f3:c9:b2:d0:69:2d:03:75:35:83:4c:fb:
         3f:08:2d:2c:a9:88:90:42:35:e7:72:11:6d:d8:79:07:b0:4a:
         ad:72:d1:f1:6d:3e:ca:08:43:ab:4c:cf:34:6b:98:1a:b8:22:
         20:44:d7:61:bd:e1:48:ac:09:21:af:e0:0a:3a:50:33:ad:12:
         f6:9d:2e:d9:d5:90:37:bf:15:88:98:f2:3e:e2:1b:23:08:74:
         3e:2a:14:93:61:d3:2e:38:f0:b4:63:59:ff:2e:9c:7a:38:27:
         fc:4f:d9:ce:e4:c5:4e:f5:dc:b2:13:c0:b7:33:79:1e:8f:96:
         30:b5:e4:69:11:22:91:f9:5f:85:f5:7a:9b:2f:71:6e:c5:3c:
         08:f1:26:c1:b8:86:e8:8e:dd:83:25:9a:0f:2f:2d:9c:14:73:
         9d:e2:5a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----