Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/13a12e30-88e7-46fa-a04c-ac803eaeae7b.roa
File:                     13a12e30-88e7-46fa-a04c-ac803eaeae7b.roa (raw, json)
Hash identifier:          GDVsVNyAJ1ILV+ye0o9kE91A8cFXHQYbxXn8lx4uDQU=
Subject key identifier:   25:E0:35:1F:A3:59:80:0E:0C:E0:43:23:4B:9E:09:32:B6:60:30:FB
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       159041FFDBF0F47247D278CA2A5EFA8B7F55657B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/13a12e30-88e7-46fa-a04c-ac803eaeae7b.roa
Signing time:             Wed 18 Jan 2023 00:00:00 +0000
ROA not before:           Wed 18 Jan 2023 00:00:00 +0000
ROA not after:            Sat 21 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:90:41:ff:db:f0:f4:72:47:d2:78:ca:2a:5e:fa:8b:7f:55:65:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 18 00:00:00 2023 GMT
            Not After : Jan 21 23:59:59 2023 GMT
        Subject: serialNumber=dccc1f8130da38e9f5908094dc3026028451018570cb557194a7038eca4907ba, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:25:42:a3:93:dd:13:20:c6:57:26:72:fc:
                    d6:b6:66:9e:fd:01:6b:68:e1:4b:ca:58:b4:5f:88:
                    36:84:31:08:98:f8:81:0d:1d:cf:cb:46:c3:16:77:
                    35:ed:14:9d:0a:38:c2:8a:12:a3:cc:5f:2a:35:49:
                    2a:48:6a:1e:5d:22:4d:37:7d:22:56:3d:22:5d:2d:
                    6d:50:0e:40:f0:d8:11:ad:d6:cf:ab:e1:d1:49:07:
                    66:cd:3a:71:37:b2:f9:3e:8c:4c:1d:62:b6:08:e4:
                    ab:82:ce:94:77:52:a3:31:87:a4:51:e6:87:3a:64:
                    b7:f9:40:1e:a0:6c:25:63:58:1a:35:8e:30:a0:e9:
                    70:46:ce:68:9c:81:fd:f8:23:a1:7b:73:46:76:cd:
                    2a:7a:be:63:63:a4:b5:00:4a:4f:a6:b8:a5:05:b9:
                    dc:d6:0b:c1:6d:85:0d:f3:f7:8b:f9:5f:c8:88:59:
                    ed:ef:3f:dc:d6:48:5f:35:b3:03:e6:28:17:47:80:
                    6e:99:a9:f7:5e:1f:26:2d:9e:3e:ce:31:1a:2d:35:
                    ec:da:cd:62:7a:01:c9:a2:1f:f8:ed:83:f7:d3:06:
                    fc:51:90:21:d2:d2:f3:33:15:f7:5f:3b:d9:33:c4:
                    3a:16:9b:ad:3b:c4:e9:4a:6b:80:ac:08:97:5d:43:
                    c3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E0:35:1F:A3:59:80:0E:0C:E0:43:23:4B:9E:09:32:B6:60:30:FB
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/13a12e30-88e7-46fa-a04c-ac803eaeae7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:ed:b5:9e:0d:7e:bc:5c:fc:ef:bb:0a:d9:eb:76:c7:99:52:
         04:77:08:7e:e9:ff:e7:64:33:6c:cf:52:2c:fc:5c:79:10:d2:
         fb:ea:6e:28:4f:f1:90:19:4b:67:c8:c8:9f:a9:9b:d0:7c:74:
         d1:a8:a1:30:63:9b:74:be:2f:4e:26:db:e9:81:ea:0d:15:ae:
         3a:37:c0:e7:a9:6b:99:b5:69:a4:8e:cf:44:27:33:38:8d:37:
         72:fc:bb:a9:bf:40:00:8d:27:e7:38:36:ad:44:b9:02:cd:49:
         df:62:6b:f8:df:ce:3e:e9:ff:db:10:5f:4f:41:c0:1f:a4:e3:
         3b:71:b0:46:03:f3:50:7d:68:8a:12:3c:37:5b:01:0a:24:c3:
         06:92:53:67:32:72:cd:a0:29:75:a9:e3:52:66:d8:c1:69:fe:
         92:18:4b:9e:a7:95:fd:22:20:21:78:83:4a:75:ac:8f:5b:a1:
         e8:87:1a:03:dd:4b:d5:d4:1e:9a:a1:94:f4:e7:e0:0e:54:b6:
         1b:cf:bd:f5:0d:f5:4e:3b:cc:9b:75:8f:93:1a:4d:41:ef:8b:
         52:c1:6b:03:71:a2:cf:81:79:b1:22:e4:45:03:41:7d:ef:16:
         eb:4b:15:01:9c:c8:09:cc:b5:0b:dc:21:6b:68:af:df:ab:e5:
         97:8a:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----