Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/02049acd-397f-48f5-b18a-6980e3240dcd.roa
File:                     02049acd-397f-48f5-b18a-6980e3240dcd.roa (raw, json)
Hash identifier:          RZ7c2zFF450Bc2caU2g6nz4QSozWVC1a5/v71GH1faU=
Subject key identifier:   51:2A:2E:0C:FA:3D:DC:52:19:73:B9:E7:62:0C:0E:52:0F:FC:10:A5
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4A554B02A01A346987BE3AE8EE7D3A89386CA652
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/02049acd-397f-48f5-b18a-6980e3240dcd.roa
Signing time:             Fri 06 Jan 2023 00:00:00 +0000
ROA not before:           Fri 06 Jan 2023 00:00:00 +0000
ROA not after:            Mon 09 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:55:4b:02:a0:1a:34:69:87:be:3a:e8:ee:7d:3a:89:38:6c:a6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan  6 00:00:00 2023 GMT
            Not After : Jan  9 23:59:59 2023 GMT
        Subject: serialNumber=ea1c54300cebb54fdb19125fd1602e8f3219b0b01a067718bc61afa8a0271ee3, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:78:48:39:59:ef:b4:b0:12:06:a9:db:e1:4f:
                    51:a4:ac:71:27:8c:14:19:cd:55:a2:32:75:68:5c:
                    35:a4:73:31:e8:ef:c4:9e:1a:08:1c:f4:06:d1:4f:
                    ea:bb:2d:6e:f6:24:7e:c5:38:c3:0a:d8:65:18:4a:
                    12:c4:10:b2:2f:d6:ef:03:da:19:29:ec:2a:ad:31:
                    b7:6b:53:39:9a:0f:25:4b:fc:ae:6b:1c:34:4f:9e:
                    6b:a3:1f:b2:50:2a:e8:01:32:21:ee:8e:e8:a9:8a:
                    6a:b9:4d:0f:3c:3e:11:14:99:88:15:76:58:89:1d:
                    93:81:ca:93:c3:46:a9:ad:c2:3a:b4:c6:af:4f:71:
                    a7:ad:5b:95:a1:8b:c2:ca:a0:60:f1:77:f3:23:fb:
                    07:5e:d8:2e:f5:fc:8e:bc:ae:2c:e9:6a:c5:62:f4:
                    53:d9:c7:be:1d:40:12:a1:65:d4:d5:63:48:42:8d:
                    20:91:cd:69:a1:0b:36:b1:95:24:a5:45:0b:f9:53:
                    ee:f2:f8:53:13:38:9f:a4:8d:d5:19:7a:04:4a:93:
                    4f:a7:65:5e:fc:fb:9f:dd:32:e9:91:c0:0e:20:1c:
                    e6:9a:be:8f:63:56:18:64:3b:5a:cc:de:e7:8c:80:
                    f1:2e:71:e5:e7:3f:da:79:50:f4:45:ed:66:92:15:
                    87:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2A:2E:0C:FA:3D:DC:52:19:73:B9:E7:62:0C:0E:52:0F:FC:10:A5
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/02049acd-397f-48f5-b18a-6980e3240dcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:83:22:2b:34:eb:ee:7f:96:73:a5:5e:3e:cc:d4:ad:12:ed:
         d6:a1:3a:ed:18:f2:31:ea:05:3b:21:bc:ec:54:f9:a9:d5:a3:
         2e:a3:b4:16:47:05:38:94:87:b1:1c:8f:88:22:7a:b7:93:0e:
         b0:5d:90:db:db:14:7d:34:1f:fb:e9:8d:43:ba:4b:43:b7:7c:
         82:73:17:e9:75:f9:6c:1c:dc:b2:4c:09:20:96:3f:d7:5d:65:
         43:bd:01:38:2b:c0:a1:47:66:99:00:40:9f:95:58:84:e0:5b:
         c9:54:81:af:82:4e:bc:02:59:84:f1:4c:3a:ab:03:33:ea:d0:
         48:2e:b3:3e:55:ad:55:c1:b8:48:f4:54:40:c7:2e:16:69:aa:
         ea:3f:89:66:10:ff:fb:d3:61:21:7b:16:22:f4:c8:4f:c2:ed:
         71:b7:4e:fc:87:fb:03:d6:de:f7:1d:3a:de:f6:fd:c7:7f:ff:
         9e:46:91:23:ff:23:c6:15:35:a4:30:89:5a:6f:19:90:90:41:
         2c:15:d2:8a:4c:47:a5:44:f5:1f:74:c9:a6:cd:76:af:89:2b:
         19:e6:1e:f1:26:2a:78:97:2b:d3:10:77:c4:fb:4d:06:1c:f8:
         05:c8:7b:f4:94:e0:03:aa:3c:9b:28:0b:34:3d:88:67:c8:3b:
         d2:1f:3a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----