Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/15de7bb1-8da3-4240-8c40-12b00c4b0c97.roa
File:                     15de7bb1-8da3-4240-8c40-12b00c4b0c97.roa (raw, json)
Hash identifier:          WoxFPWXPUZ6amMO1gWt2o9g6dAcp3FAQK10DaPxf6wk=
Subject key identifier:   3D:88:C8:57:B0:55:40:1E:84:C6:12:51:5E:C7:27:49:B5:75:32:76
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4BBE98AED1A5EF946675BB9E8E32849282C7D074
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/15de7bb1-8da3-4240-8c40-12b00c4b0c97.roa
Signing time:             Sun 19 Mar 2023 00:00:00 +0000
ROA not before:           Sun 19 Mar 2023 00:00:00 +0000
ROA not after:            Wed 22 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:be:98:ae:d1:a5:ef:94:66:75:bb:9e:8e:32:84:92:82:c7:d0:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 19 00:00:00 2023 GMT
            Not After : Mar 22 23:59:59 2023 GMT
        Subject: serialNumber=85ff2a3a955958f28730da5b69c0435ebd394f73bb828e7191085ff620dde865, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3c:0d:e3:3a:e2:25:6d:98:84:55:a7:ee:cf:
                    35:2b:0d:3c:d4:2d:ee:80:ad:36:54:7f:d8:84:4b:
                    55:b6:7e:56:20:47:fc:2d:ec:09:f2:be:43:4e:7d:
                    7f:7a:09:02:b7:92:28:ea:7d:f0:ee:5e:84:41:fa:
                    78:34:a6:b3:12:07:40:28:41:44:4b:f5:30:6b:63:
                    66:b3:ed:79:f1:bb:cd:78:a4:87:c7:f1:4f:b2:c3:
                    18:38:46:ae:31:15:35:07:d9:34:4d:40:13:b7:d7:
                    57:ee:ae:f6:0b:f8:57:71:be:db:17:3f:a3:76:22:
                    82:aa:80:e7:62:e8:28:31:30:0f:2d:3f:a7:b9:90:
                    0a:51:b9:23:e3:c5:eb:74:d6:62:7c:07:a4:94:ba:
                    42:d4:68:7f:a5:27:37:d7:a7:95:36:0e:73:62:0f:
                    9f:6a:2c:5b:d9:4c:f7:6d:4d:e5:2a:6f:91:ad:3e:
                    9d:62:b3:af:d4:42:1b:83:5e:6c:3e:a9:7e:dd:3a:
                    25:a5:54:77:94:cc:93:87:39:1e:0d:68:ec:0c:ef:
                    4c:f4:d2:34:62:0a:ed:19:3f:94:cf:8b:d4:4c:b2:
                    4a:fa:28:9f:83:8f:89:d8:38:8d:61:00:41:a0:a2:
                    45:7c:81:fb:9b:95:01:f5:d7:25:44:b8:f8:41:0c:
                    86:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:88:C8:57:B0:55:40:1E:84:C6:12:51:5E:C7:27:49:B5:75:32:76
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/15de7bb1-8da3-4240-8c40-12b00c4b0c97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:84:17:4c:24:3a:38:bf:af:6b:0c:9a:f4:c5:fc:34:02:02:
         30:13:88:35:c3:7f:93:2d:90:7d:84:dd:97:6c:fe:1a:ab:f1:
         bb:e9:01:ff:fd:9e:31:11:c6:47:46:83:f1:2c:8a:29:fc:a5:
         29:92:9f:90:f9:93:53:84:38:47:d1:b9:e5:6a:fa:cb:bc:ef:
         f4:d7:94:65:50:3c:90:26:63:27:4d:79:ed:7f:d0:ba:6a:ae:
         ff:d2:4f:a1:a9:15:ef:52:44:65:b2:8b:54:9e:4b:b1:ee:58:
         9f:0b:f5:57:6f:b4:d9:fe:88:4a:35:80:b8:6a:ed:44:f3:e4:
         b8:0b:a4:99:9d:a1:8d:ec:d0:30:1b:2c:c2:9d:ae:9e:31:86:
         b6:62:9d:a5:8f:b1:f9:c9:70:5b:99:d7:d7:81:7b:ec:21:b7:
         19:3c:e0:c6:bf:00:98:1a:a8:c2:e5:c2:f5:97:4a:ef:e9:71:
         e3:15:16:c3:24:e1:ae:87:e5:d3:d3:9f:e4:e0:82:fd:ac:84:
         d6:e5:bf:74:52:ab:f8:50:91:43:d0:fe:08:12:52:d3:77:fb:
         c0:3f:bb:2c:7d:12:26:95:b4:9b:17:e0:d8:e7:de:51:4d:7f:
         45:97:0a:c3:5d:33:4c:35:09:f2:4a:11:d3:b1:8d:f2:e6:45:
         80:d3:d9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----