Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0dd3488b-90fa-47a4-917e-2fac28f406a8.roa
File:                     0dd3488b-90fa-47a4-917e-2fac28f406a8.roa (raw, json)
Hash identifier:          Jj/fh1KQS4ZnSoZ5swJY1t4LPwflbSJevR7EN/TI/Ec=
Subject key identifier:   58:27:ED:17:AF:02:FC:BC:11:0B:AA:A3:D4:DB:FF:1B:65:83:36:4C
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4DE580195AF1FB80F7E2D82118AF0162C57C21FF
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0dd3488b-90fa-47a4-917e-2fac28f406a8.roa
Signing time:             Sat 06 May 2023 00:00:00 +0000
ROA not before:           Sat 06 May 2023 00:00:00 +0000
ROA not after:            Tue 09 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e5:80:19:5a:f1:fb:80:f7:e2:d8:21:18:af:01:62:c5:7c:21:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May  6 00:00:00 2023 GMT
            Not After : May  9 23:59:59 2023 GMT
        Subject: serialNumber=2c600e58dccb895da21174e8b895fcb34e9fb8766a27efd0052dea325e5a38d3, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:49:2b:c8:9c:d2:f3:d9:ec:07:a1:76:f1:cd:
                    81:4b:a8:31:b3:cd:0c:af:dd:33:82:6b:7a:41:54:
                    3e:c1:40:28:89:c1:ec:a7:66:14:7b:20:b1:01:3b:
                    05:f3:88:73:62:88:f5:e8:17:dd:15:41:82:89:c6:
                    5d:6e:d8:c4:f1:f3:d6:45:c9:c9:9a:fe:e2:a4:e2:
                    e2:a1:fe:3d:0d:cb:ea:c7:42:ee:1f:98:fe:9a:43:
                    a8:5b:26:99:c1:8c:26:f9:e7:85:72:d8:80:06:58:
                    23:1f:4d:5f:92:ee:b0:89:1d:d9:3d:c0:8f:da:35:
                    04:86:ba:c4:12:7c:2d:5f:95:34:ef:4d:7d:db:aa:
                    3a:70:37:e8:be:64:59:01:18:12:75:16:26:ee:a5:
                    d9:97:1b:df:3f:a4:c4:f9:0f:86:38:4a:a0:de:d4:
                    0a:d3:ed:a8:25:d5:36:ca:74:a9:c1:97:c9:06:dd:
                    ef:cb:7d:b8:19:6e:73:7f:01:a5:da:d8:c4:6c:2d:
                    b1:3d:19:58:86:11:8b:dd:6d:62:ca:d0:c6:bc:cc:
                    2d:f5:2f:a2:46:c0:ab:5b:9a:c9:7c:01:31:f9:cd:
                    a4:94:33:99:72:4d:86:d3:a7:82:bb:25:47:f2:f7:
                    5d:61:b0:4b:e4:84:81:42:4f:e1:b4:5d:17:6f:0f:
                    bf:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:27:ED:17:AF:02:FC:BC:11:0B:AA:A3:D4:DB:FF:1B:65:83:36:4C
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0dd3488b-90fa-47a4-917e-2fac28f406a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:f0:14:02:41:62:79:50:4f:f4:32:13:91:5b:b7:35:de:5f:
         cc:8e:4c:ba:8f:e5:37:b9:e9:8e:4e:cc:b6:0a:5d:c7:1c:63:
         5f:c9:cb:24:35:78:e8:35:94:f1:d1:2e:ab:5c:20:f1:83:88:
         dd:3f:66:ed:01:c8:37:db:51:4d:20:26:c4:5a:b4:dd:cf:b2:
         9a:2a:7e:08:e8:27:fe:09:39:ea:16:c6:af:f7:9a:85:b1:d8:
         6d:f3:c0:03:32:72:c1:c7:96:c8:99:ca:21:e1:2b:94:84:a8:
         39:18:c0:42:60:5c:19:dc:92:c4:e6:a2:71:10:68:39:ba:6a:
         26:90:e5:b5:f6:ac:cb:e6:75:05:3d:21:e9:ba:18:da:12:d6:
         86:17:63:09:cf:cd:12:28:18:28:73:7c:92:f6:f1:e7:e1:3b:
         88:e3:1c:c2:87:fe:53:88:11:9c:bf:d3:ec:71:96:34:07:74:
         ce:98:18:10:90:ad:fc:20:d8:21:79:98:6c:ed:5c:d1:43:60:
         e3:36:24:dd:1a:a1:e2:bb:7b:3d:94:27:1d:72:b5:21:53:a4:
         a6:ca:93:b5:1a:e4:ab:22:de:ac:f0:ce:45:c6:a6:dc:f1:c8:
         96:be:5d:fd:d5:6d:dd:fa:46:40:59:98:bf:03:07:2a:5e:9d:
         f5:7f:8a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----