Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/15e1e79d-c170-4e20-8fd2-0ea2e6ee19c5.roa
File:                     15e1e79d-c170-4e20-8fd2-0ea2e6ee19c5.roa (raw, json)
Hash identifier:          MeVrxkdY7dnFOwvOuYlo3BfAsoFlEcVTtM4teyyAQeU=
Subject key identifier:   74:10:59:91:31:3D:68:70:50:6F:CB:DB:4A:8C:DC:28:DC:19:97:AD
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2AFD45092A33D059721944CEF05FCFAD510E150E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/15e1e79d-c170-4e20-8fd2-0ea2e6ee19c5.roa
Signing time:             Wed 22 Mar 2023 00:00:00 +0000
ROA not before:           Wed 22 Mar 2023 00:00:00 +0000
ROA not after:            Sat 25 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fd:45:09:2a:33:d0:59:72:19:44:ce:f0:5f:cf:ad:51:0e:15:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 22 00:00:00 2023 GMT
            Not After : Mar 25 23:59:59 2023 GMT
        Subject: serialNumber=1179d315bac88ffc48285ff9d5b6a512d9e9743e21fb7586c905db63f9f57865, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2b:5d:bd:c6:6e:80:96:1d:f1:25:13:3b:61:
                    b6:49:33:ec:3b:cc:71:63:9e:07:45:5d:c0:ad:d7:
                    2c:3e:1f:fd:5d:27:71:b0:d9:14:f0:d8:b0:42:85:
                    65:e5:49:ea:b4:1e:12:bf:9c:c6:b8:03:ce:f1:3e:
                    6c:7c:27:a5:ce:fc:59:12:11:1c:24:a3:db:54:9a:
                    7d:16:ef:24:f9:01:51:23:b5:54:ad:6c:9d:84:9f:
                    98:06:4f:7a:f4:e8:30:08:08:96:2f:76:be:40:e4:
                    ab:ba:10:7a:41:23:17:c1:02:54:69:77:b1:4c:16:
                    7a:a7:e7:91:9d:c8:44:f8:ed:dc:e4:14:27:c2:cc:
                    67:55:8a:6e:5f:6f:72:d7:91:c3:99:8a:a6:af:98:
                    5c:92:e5:40:cd:bc:ff:78:f1:15:8f:f3:c1:97:33:
                    0a:e8:ff:22:ee:ba:64:02:f5:e5:c1:cd:d3:94:1f:
                    5b:37:98:18:c9:3b:c8:47:df:7b:1c:9d:dc:bd:64:
                    aa:bb:8b:a7:07:5e:aa:43:ba:87:8e:14:ba:f0:55:
                    5b:d0:0e:88:df:ca:15:b3:d4:c9:ab:92:9c:03:eb:
                    45:a0:3a:c5:57:24:f6:6b:a8:a8:36:b4:d9:dd:aa:
                    f2:fe:d9:4e:5a:05:9e:93:fe:8e:60:e2:23:e7:91:
                    3f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:10:59:91:31:3D:68:70:50:6F:CB:DB:4A:8C:DC:28:DC:19:97:AD
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/15e1e79d-c170-4e20-8fd2-0ea2e6ee19c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:cf:c0:ab:83:d7:64:fc:7b:af:30:4c:ab:6d:5c:34:84:1c:
         aa:db:27:b2:6f:8b:3b:87:d1:2a:0f:01:cb:d2:9f:dd:57:b7:
         12:14:0c:f3:bf:11:31:a8:04:9d:99:0d:03:64:a8:2f:90:9f:
         f5:2d:3c:89:2c:2e:69:96:60:94:c0:11:ae:de:f6:b8:2b:07:
         83:71:73:74:87:1e:ad:59:19:8e:cc:f9:90:fc:59:2a:1a:ab:
         50:c0:07:22:ea:d9:21:97:45:26:b5:83:56:4d:99:22:42:04:
         f3:af:53:d5:3c:97:0a:cf:94:dc:a3:d3:99:91:c7:63:89:d2:
         67:37:9e:b5:a3:2b:9a:3d:8e:e3:d1:3f:db:ae:73:76:86:67:
         36:47:c6:c7:9b:f3:f8:2b:64:5b:a2:82:7a:5b:5c:8e:5c:d0:
         14:5c:5e:1f:ec:94:7f:60:54:73:d9:30:fc:b6:99:5f:2d:cd:
         71:08:e9:d4:5b:23:ce:18:89:36:0d:b3:90:c4:20:cf:dc:ad:
         bb:dd:14:c3:9f:05:39:55:99:d2:60:ed:76:7d:07:02:fa:fe:
         dc:d8:08:8c:e5:35:ae:6c:fe:13:df:12:25:80:a8:4e:7b:d4:
         39:54:1e:70:24:11:9e:b7:f5:be:54:90:9d:c3:0b:a2:13:15:
         d3:72:80:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----