Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0882b107-a996-4f4d-92c0-2a0df4a35d91.roa
File:                     0882b107-a996-4f4d-92c0-2a0df4a35d91.roa (raw, json)
Hash identifier:          TSuoTx/HEACxcgBdXt3HzFbcvwXnHHQP1SZZJunCv7g=
Subject key identifier:   6F:7B:34:8E:EC:CB:E6:F4:A4:76:42:94:07:96:64:CB:76:14:71:94
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       196E524A72DD840AEAAA7CA8A24F14651379D064
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0882b107-a996-4f4d-92c0-2a0df4a35d91.roa
Signing time:             Sun 26 Mar 2023 00:00:00 +0000
ROA not before:           Sun 26 Mar 2023 00:00:00 +0000
ROA not after:            Wed 29 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6e:52:4a:72:dd:84:0a:ea:aa:7c:a8:a2:4f:14:65:13:79:d0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 26 00:00:00 2023 GMT
            Not After : Mar 29 23:59:59 2023 GMT
        Subject: serialNumber=958b4b5950f3b11be1d4593d67cd7f44de87ef4911ae5a5eb96fd2201bb347b4, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:38:f7:f7:02:77:6c:87:7e:8f:5d:2b:47:28:
                    ae:8d:48:da:83:59:86:df:a3:63:c9:6d:6a:9d:18:
                    d3:32:38:81:40:21:34:2d:08:60:cd:81:49:8d:be:
                    36:bd:4e:e1:d3:cd:7e:92:9c:d9:eb:87:63:aa:37:
                    01:96:80:9c:f9:f1:fb:96:b4:8c:e4:ae:3c:a3:47:
                    8b:56:52:88:73:2a:82:53:80:ff:a8:db:0f:6f:16:
                    fd:bd:56:9c:aa:4b:58:e2:0e:b3:13:87:ba:fb:8a:
                    f8:3b:d6:2c:0b:94:76:e1:a2:31:57:e5:23:f4:98:
                    a0:34:60:d5:6d:88:67:09:c2:91:04:85:42:5c:ee:
                    7d:8f:2c:e7:08:1d:10:68:27:71:52:23:57:41:a7:
                    ad:c9:45:3d:1d:da:c6:7a:f4:45:a0:e4:7d:31:fe:
                    3e:29:c3:7e:5d:a0:71:a2:7c:a6:6e:8c:1b:9b:04:
                    58:75:51:be:45:79:18:b0:b9:b8:55:81:78:b9:c9:
                    88:39:7d:06:d7:11:c0:59:27:5b:62:78:15:e9:2e:
                    86:90:54:c9:1d:8f:54:be:7f:06:e3:e8:04:0b:ce:
                    94:a8:1a:d6:e0:94:e0:4b:2a:65:d3:31:70:e2:5d:
                    ec:26:cd:40:c4:e9:36:14:db:75:0d:f1:a2:4b:9d:
                    c4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7B:34:8E:EC:CB:E6:F4:A4:76:42:94:07:96:64:CB:76:14:71:94
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0882b107-a996-4f4d-92c0-2a0df4a35d91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:d2:c5:8b:ca:da:4f:2e:e1:2c:10:61:56:4c:fc:51:a0:c6:
         19:7e:18:e6:36:1c:10:16:6f:a1:3f:56:38:9d:ea:03:2c:4e:
         cb:e7:4a:6f:d7:4c:35:d4:6e:89:b5:a3:f8:96:f9:2a:62:4a:
         83:1a:1e:42:c3:6e:fc:8a:ac:e5:70:2f:4b:6c:81:fb:d6:db:
         84:27:c0:8e:c2:6f:24:a7:39:b9:7a:87:c1:2d:b3:11:c3:fa:
         fb:3a:e5:34:dd:f4:6f:05:d2:fb:a4:f2:75:b4:93:73:cf:5c:
         22:30:25:11:58:5a:51:0d:84:4a:63:c3:78:f7:08:e0:18:ea:
         51:10:a1:1b:a1:39:4d:33:a4:16:90:5b:f5:6c:d4:90:7e:61:
         99:52:ea:b6:dc:5f:fc:c6:c7:31:db:ad:d6:89:07:27:45:b2:
         b0:f0:d5:24:9f:ff:e0:1b:1e:28:85:df:7d:99:d4:8e:0e:a3:
         2f:ee:96:f0:21:23:05:3b:e7:a2:92:b1:ae:3c:c9:7f:6f:1c:
         d0:7f:a6:17:80:3f:6e:74:b9:e4:d9:55:09:29:40:54:bf:d6:
         ee:05:68:42:e9:b4:2a:30:eb:5b:23:98:5a:63:d5:55:c7:b7:
         23:e3:87:0c:3d:24:43:16:d7:01:e8:5a:7d:d1:b4:cf:5c:15:
         fb:0a:86:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----