Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1b931b60-92f8-48e1-b4b0-fc427a4d2afb.roa
File:                     1b931b60-92f8-48e1-b4b0-fc427a4d2afb.roa (raw, json)
Hash identifier:          KC0cCRfXXwyi2Pyf+EhBhX525YEKKHn/M0e3cg2mLRE=
Subject key identifier:   82:7C:75:78:11:F6:3C:6A:AA:AF:27:C3:3C:0E:78:67:B0:50:8A:79
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       22C3E197C9AD91BD1708E51F621DD38D8832373D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1b931b60-92f8-48e1-b4b0-fc427a4d2afb.roa
Signing time:             Wed 03 May 2023 00:00:00 +0000
ROA not before:           Wed 03 May 2023 00:00:00 +0000
ROA not after:            Sat 06 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c3:e1:97:c9:ad:91:bd:17:08:e5:1f:62:1d:d3:8d:88:32:37:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May  3 00:00:00 2023 GMT
            Not After : May  6 23:59:59 2023 GMT
        Subject: serialNumber=562bcdb363a2e1d61ebd863a79267d82c6dd206a0a93c763de99db289cf7eb77, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:40:a9:0b:e9:7b:d4:a6:db:8d:af:f4:c8:47:
                    a1:4c:6d:d5:1f:fa:1d:15:24:9d:86:83:a7:58:5d:
                    21:8c:3d:c5:76:7e:62:45:73:15:1b:5e:80:76:b2:
                    ef:66:d7:96:42:e4:c7:dc:26:9c:3e:eb:18:b5:f0:
                    ae:3e:55:60:8d:5f:dc:d0:8e:3c:a6:9b:7d:0f:d2:
                    35:a4:ac:4c:83:c5:3c:91:f2:52:a8:36:f0:23:77:
                    cf:ef:bf:72:d3:b0:74:3d:13:ab:af:15:0b:63:5e:
                    52:e2:d8:04:86:3b:79:d3:68:25:e0:f9:66:3f:c4:
                    fd:0b:aa:43:89:13:d3:b0:8a:63:13:99:4c:a1:b5:
                    6a:c7:9b:80:14:b0:06:3c:b6:46:a6:90:5c:07:48:
                    9d:b9:0c:7c:0e:9a:00:77:d5:54:73:f2:f5:12:ab:
                    e7:15:97:d4:84:2e:e2:1d:4d:01:76:e7:c8:dc:bc:
                    e9:12:05:43:92:b5:e5:94:31:35:0c:07:33:5f:e3:
                    bc:4a:dd:2d:79:92:bc:3a:6e:a7:38:ba:9f:8f:67:
                    0e:f6:04:92:64:e2:cf:bf:28:5c:4f:18:c9:33:ad:
                    d7:37:ac:30:bf:a7:fa:2c:18:02:f5:be:cd:66:1d:
                    0f:7c:57:1a:b7:65:3e:00:c1:0e:78:82:cb:8f:7d:
                    a7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7C:75:78:11:F6:3C:6A:AA:AF:27:C3:3C:0E:78:67:B0:50:8A:79
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1b931b60-92f8-48e1-b4b0-fc427a4d2afb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:ef:4e:7b:39:ef:34:c1:7a:4d:65:83:f0:43:cf:17:89:4c:
         98:b0:5f:1f:5c:1c:16:cd:00:18:d5:46:a4:ea:22:71:97:e3:
         6c:ae:a9:8d:ed:a3:3d:29:6b:76:40:f1:03:a4:d3:53:15:50:
         82:b3:63:12:0d:ec:1a:db:b1:5f:15:0b:d5:5a:91:01:4c:bd:
         8d:ea:39:01:75:89:05:c5:15:e7:be:2a:59:4f:38:d8:a2:9b:
         3f:71:8f:2a:94:22:52:54:05:17:ff:b3:41:38:78:dd:5e:6c:
         7f:e8:05:5c:d9:9e:05:7b:41:70:e9:06:52:b2:14:c5:4a:57:
         af:e0:68:79:f1:46:bd:d1:a4:f3:4a:34:e6:be:a7:32:ab:0d:
         7d:82:e4:2f:ce:1d:48:e2:24:25:4a:65:c2:cf:65:9e:a4:ce:
         1a:be:3a:05:b1:56:86:c4:2e:8b:14:14:af:6b:6d:5b:4f:c9:
         f6:9e:bf:37:da:fb:70:53:49:21:a3:69:0a:ce:7c:b6:db:cb:
         78:93:db:b5:03:29:79:f3:26:45:79:f1:15:35:b1:fb:31:c8:
         54:d9:8b:c0:6b:e5:27:56:5e:9d:5e:e7:04:f5:74:0a:1b:4c:
         e4:38:c8:0d:4f:70:1f:ea:5d:16:e3:da:93:0e:45:24:77:3e:
         e7:e3:78:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----