Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1584e14e-f443-473f-b7a8-5024d0843606.roa
File:                     1584e14e-f443-473f-b7a8-5024d0843606.roa (raw, json)
Hash identifier:          Xh0Z0fOn6Ute3rl25NX5i8C5wRZjB1i/VvMFpLi2EBw=
Subject key identifier:   83:0C:43:28:AE:90:0B:B3:34:17:8A:10:01:4B:1E:CC:8B:2B:E5:3B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3F17F30F33D537A7FF35E744F7D5BF4E9B71BC08
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1584e14e-f443-473f-b7a8-5024d0843606.roa
Signing time:             Tue 14 Feb 2023 00:00:00 +0000
ROA not before:           Tue 14 Feb 2023 00:00:00 +0000
ROA not after:            Fri 17 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:17:f3:0f:33:d5:37:a7:ff:35:e7:44:f7:d5:bf:4e:9b:71:bc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 14 00:00:00 2023 GMT
            Not After : Feb 17 23:59:59 2023 GMT
        Subject: serialNumber=62b090ff14847c22aaa90a074efa9a3f313527ab53e5110b7335e2500f33e189, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:60:2c:ab:c8:f9:8e:fb:ef:cb:3e:ca:62:85:
                    3e:a3:9f:1a:30:3c:51:f4:78:70:ec:2b:1e:00:bc:
                    0c:d4:c6:2b:47:84:ec:37:43:95:b3:68:0f:04:a2:
                    d8:7d:cd:8f:c4:41:55:7d:9e:e5:50:61:b7:61:00:
                    0f:33:34:a1:25:34:fb:45:34:a6:54:25:06:50:58:
                    50:64:91:39:9e:b8:5f:8a:b4:a0:1a:65:b8:b7:51:
                    73:e3:ce:58:c2:09:12:20:76:7a:7f:f6:f1:79:6e:
                    66:8d:3a:45:c0:8d:8b:d7:d0:22:fa:70:d3:e0:ba:
                    3b:2e:40:7f:f1:74:cc:6c:ee:10:cd:3a:94:11:54:
                    e3:4c:0e:e0:6b:76:95:cf:1b:a3:cc:af:2c:5d:14:
                    c6:f2:e7:33:01:0c:e7:e4:19:6e:90:a2:dd:d9:a6:
                    26:f4:dc:24:be:65:fa:f9:9f:67:2a:ca:ad:fc:24:
                    a2:eb:be:0e:ae:9a:d1:b7:25:13:08:ad:b5:33:c4:
                    3f:40:aa:4b:79:01:6d:1a:76:dd:dc:fc:27:43:82:
                    5c:28:0f:48:47:ab:1d:2a:53:7d:c4:56:c6:d4:22:
                    e4:60:c4:4a:36:72:1a:15:e1:2d:8d:42:a2:1f:60:
                    82:52:a6:f6:cd:64:75:ee:92:22:ea:64:f6:66:df:
                    a4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0C:43:28:AE:90:0B:B3:34:17:8A:10:01:4B:1E:CC:8B:2B:E5:3B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1584e14e-f443-473f-b7a8-5024d0843606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:02:38:df:e1:60:0d:45:6f:a7:9e:6b:d6:ee:d1:a8:0e:33:
         e3:ce:e3:1c:4c:b7:be:f6:d0:8b:84:35:27:c7:da:97:db:ba:
         0e:3b:15:1e:82:54:48:b3:e2:02:b2:de:a6:62:13:c3:69:2a:
         19:c9:ad:ad:52:72:60:cf:24:4b:3f:cc:11:c3:14:91:37:a2:
         25:8d:f0:37:02:c1:77:8d:ac:91:07:c2:9c:88:5a:03:d6:ff:
         e7:62:58:07:1f:ab:6a:15:2d:56:61:f2:c0:25:21:dd:dd:90:
         ba:a7:38:56:fd:37:10:aa:ba:ba:a6:b5:41:ea:a0:63:34:5d:
         28:0a:29:dd:d5:61:9f:bb:32:21:53:1b:e5:23:38:28:9a:f3:
         99:02:d7:cd:5e:cd:2a:ed:15:8c:2f:b1:62:70:5e:24:00:ca:
         df:d8:ac:96:fb:8d:12:27:df:00:42:26:74:df:cb:c4:e6:b2:
         c3:34:40:e7:66:7b:a4:92:8e:c2:41:28:c9:7a:c5:b2:b8:e9:
         a7:9a:bd:58:b5:84:ad:00:b2:26:1d:9f:fd:d5:86:19:11:43:
         33:53:2d:47:d6:fc:c0:16:eb:2b:63:d3:9b:3e:e9:4c:4c:98:
         e3:39:b5:ff:7e:61:3c:74:1a:9d:2c:a9:ec:0b:fc:8c:ee:b3:
         68:fa:06:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----