Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/070159e1-a7e6-4dbc-9b6b-9306a2cf5f43.roa
File:                     070159e1-a7e6-4dbc-9b6b-9306a2cf5f43.roa (raw, json)
Hash identifier:          YlaX+YND0+YYmkNQO7Ro8kZfhUvQWsw1XkW3YPGm9TE=
Subject key identifier:   83:04:99:A0:0C:A7:61:D6:35:86:21:D5:23:01:D9:F7:12:1B:C4:5F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7748CCEC287D48D222E8DE6496C5071D597FBDD8
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/070159e1-a7e6-4dbc-9b6b-9306a2cf5f43.roa
Signing time:             Mon 06 Mar 2023 00:00:00 +0000
ROA not before:           Mon 06 Mar 2023 00:00:00 +0000
ROA not after:            Thu 09 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:48:cc:ec:28:7d:48:d2:22:e8:de:64:96:c5:07:1d:59:7f:bd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  6 00:00:00 2023 GMT
            Not After : Mar  9 23:59:59 2023 GMT
        Subject: serialNumber=6a2269f9d2b668fe0a63211fcc0b73d23ab8b69ecf52e3f6a07c8f61885e1dcd, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d5:fc:fd:e6:e3:e0:21:25:41:17:86:48:d6:
                    11:8c:3d:16:41:5f:8e:f0:db:2c:79:1d:af:19:0a:
                    da:24:d7:aa:72:b2:48:44:cb:d4:dc:e5:38:3f:a9:
                    fa:31:3e:1d:75:93:f3:65:81:6b:85:0a:9b:a3:96:
                    ae:fd:b1:d8:01:09:65:10:ed:7e:b1:46:9e:d8:56:
                    f0:c8:8b:4c:fb:48:9b:36:32:2c:ec:70:07:ff:50:
                    cd:3d:9f:b1:1a:20:f2:65:2a:4f:44:c5:36:d5:66:
                    c3:e1:db:5b:89:7c:01:f4:56:e2:38:d2:3c:ed:ee:
                    8c:3b:11:35:da:9f:4a:88:0c:e7:da:bb:c9:72:99:
                    04:d1:93:82:b4:87:c5:e8:6f:ce:dd:0e:5b:b6:86:
                    77:e1:78:2d:7e:ab:24:06:9f:51:ef:1c:d7:13:7a:
                    74:8e:ef:4e:df:c2:65:f4:cb:11:df:97:a2:a3:b3:
                    c1:b3:2d:39:00:7e:35:fe:87:d1:c7:d9:fb:15:66:
                    2e:3c:ba:8d:c2:07:46:b4:24:7f:1b:c6:14:5f:ed:
                    ef:1c:aa:ba:8a:28:29:10:87:c5:1f:e8:f2:5a:61:
                    28:aa:f8:a5:95:10:22:d3:bb:02:bc:9d:2d:0d:94:
                    43:ee:ff:65:8e:54:f3:69:ea:14:ff:5d:eb:26:a7:
                    68:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:04:99:A0:0C:A7:61:D6:35:86:21:D5:23:01:D9:F7:12:1B:C4:5F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/070159e1-a7e6-4dbc-9b6b-9306a2cf5f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:48:69:d9:d4:9b:6c:fe:da:c4:f6:fb:38:a1:c4:87:e5:50:
         f8:b8:23:d2:40:35:ef:36:e3:25:e7:a7:cb:7a:2f:74:41:fa:
         ea:9e:43:4c:e0:3e:e6:aa:7c:3b:13:0e:d7:dd:e1:23:e1:d0:
         00:31:7e:f2:1a:a6:4f:69:ba:6d:4c:56:58:d4:10:f0:9b:d0:
         c8:81:05:0e:06:21:b1:17:a2:b9:51:75:9e:77:04:48:a0:3f:
         c0:52:89:8f:31:f9:70:93:71:c7:e5:1f:f5:9a:4e:de:7e:3c:
         e7:bc:f8:11:0c:d6:4d:58:b2:ae:67:16:66:58:cc:e7:8c:be:
         6d:8b:ad:50:26:1a:54:93:60:2d:1e:8f:d9:66:8e:36:9b:51:
         e2:0a:9d:bf:df:7c:54:46:23:90:99:de:6a:f2:04:4b:dd:83:
         52:be:7e:ad:ae:61:56:71:70:f7:b0:9c:c6:59:a7:59:7e:84:
         12:39:7a:97:ff:44:8a:a5:3d:54:9b:dd:1a:72:69:fd:10:4e:
         f1:e9:98:81:3d:95:e1:ed:56:2e:97:cf:78:9f:17:1d:c6:76:
         e5:d5:fd:c7:69:df:c4:ca:d1:de:4a:fe:71:9d:f8:c1:b4:fe:
         b4:96:42:9b:70:27:37:85:9d:7c:49:c1:3f:4c:35:d8:54:b8:
         2a:19:a4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----