Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0df8b70a-6738-4722-ad57-5f61884dfbeb.roa
File:                     0df8b70a-6738-4722-ad57-5f61884dfbeb.roa (raw, json)
Hash identifier:          +kiAfa6FSfT0UmrOYzkB6qOc+mojIyMiaVls3/EJZG0=
Subject key identifier:   1F:EB:F3:FC:0D:1B:0C:82:DF:C2:55:8E:93:ED:88:9E:7A:A2:62:F0
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       36B1AD18A5AD48F37EFA602F7FA88E3D4EE77B92
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0df8b70a-6738-4722-ad57-5f61884dfbeb.roa
Signing time:             Sat 18 Feb 2023 00:00:00 +0000
ROA not before:           Sat 18 Feb 2023 00:00:00 +0000
ROA not after:            Tue 21 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b1:ad:18:a5:ad:48:f3:7e:fa:60:2f:7f:a8:8e:3d:4e:e7:7b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 18 00:00:00 2023 GMT
            Not After : Feb 21 23:59:59 2023 GMT
        Subject: serialNumber=6c9da62950987529c2e8c18cf42d5a0c54199c9b3e022a235e866777db2d2ccd, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:22:c0:f7:6a:1d:10:ec:00:93:13:9b:8e:90:
                    72:81:d9:78:d2:32:08:aa:67:b5:a9:94:de:7e:18:
                    5e:be:16:90:88:bb:81:25:3e:1f:79:4e:ef:fb:aa:
                    cd:04:3e:9d:8e:6c:8b:0e:3a:4c:ad:a8:8f:df:34:
                    d7:ae:f8:98:43:71:5e:f1:58:c4:95:7d:86:eb:2e:
                    1a:e2:a8:f6:ef:2f:5b:28:cf:46:be:3b:62:da:b5:
                    ee:bd:ef:10:65:e3:7c:ee:74:92:80:0a:63:e6:e9:
                    21:47:d2:cf:ec:42:1d:65:a4:3f:d2:c1:db:d5:06:
                    c8:e7:cd:5f:40:76:c3:3f:ee:f9:d3:e7:5c:40:b7:
                    df:99:fc:7b:71:75:e0:fc:bf:5f:f5:fa:de:54:ad:
                    d9:c9:4c:d4:43:08:cb:3a:4c:d5:fa:db:a6:1c:63:
                    c5:d1:c6:bd:a3:04:14:4a:d2:60:ec:90:03:a5:4b:
                    09:e4:6a:17:87:f7:95:0d:64:d5:94:ad:e2:f7:01:
                    e1:d0:da:f9:60:56:ce:45:b1:59:ae:6d:0e:c4:70:
                    09:45:9c:7d:68:0d:1f:7c:77:b5:ea:82:5a:5b:6c:
                    d2:0e:56:8c:58:b8:9d:54:79:f8:e6:72:fe:20:04:
                    db:7b:67:f7:a7:26:9c:8c:07:11:cb:78:7f:e5:da:
                    f6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EB:F3:FC:0D:1B:0C:82:DF:C2:55:8E:93:ED:88:9E:7A:A2:62:F0
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0df8b70a-6738-4722-ad57-5f61884dfbeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:e7:20:9c:2f:06:d5:c6:77:74:e2:1a:e4:21:83:83:e4:e9:
         7f:4b:d0:11:43:bc:3a:04:ba:19:a4:99:8a:e6:53:20:42:1e:
         13:3d:6d:fc:cb:9c:44:c0:3f:ad:0d:20:22:51:0e:19:6f:2a:
         ac:1b:d3:3f:6c:69:bb:6e:2a:37:2d:f9:5e:66:33:00:c9:94:
         63:2c:73:f3:57:91:8e:e1:63:82:c9:0f:15:f0:f3:7c:8f:8e:
         7f:a3:a3:74:ef:47:65:cb:85:41:d1:92:f7:41:42:40:3f:ea:
         25:b8:93:48:55:22:67:f8:0a:24:96:e2:9f:51:03:a9:fb:b0:
         10:3b:d2:16:fe:8f:71:1f:76:0c:92:49:d6:fb:99:de:ca:b4:
         c6:b9:8c:ba:a3:94:fe:7d:62:1f:9f:82:f5:ba:91:95:51:c2:
         75:a0:d4:ac:16:a9:fc:37:3f:df:3e:dd:f1:1a:8e:e8:3c:95:
         59:3a:b3:32:bb:66:42:2a:6b:b0:a6:f9:a1:da:9e:28:59:85:
         b3:3c:fe:a4:91:9c:eb:16:de:5f:00:bd:07:9f:43:4f:61:bb:
         fd:f4:92:04:e8:a8:62:9c:21:c4:e5:59:ed:b2:3d:40:81:5b:
         2c:c7:22:5a:f4:f1:fb:17:91:9e:6a:87:04:c1:3c:5a:81:b6:
         64:ee:3b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----