Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/279e57ef-2b89-41ca-a9f6-c65de5d48647.roa
File:                     279e57ef-2b89-41ca-a9f6-c65de5d48647.roa (raw, json)
Hash identifier:          VygNAUrFtSgNKVgfUboJAYdYmDh1wWH7W2W+XVthDzo=
Subject key identifier:   AA:B4:17:D2:D7:61:28:15:93:0A:2B:69:5D:D3:C3:0D:8F:DC:DC:51
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2BEB7748D3ED861DFC35B62BCAACE51449DF8223
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/279e57ef-2b89-41ca-a9f6-c65de5d48647.roa
Signing time:             Sat 14 Jan 2023 00:00:00 +0000
ROA not before:           Sat 14 Jan 2023 00:00:00 +0000
ROA not after:            Tue 17 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:eb:77:48:d3:ed:86:1d:fc:35:b6:2b:ca:ac:e5:14:49:df:82:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 14 00:00:00 2023 GMT
            Not After : Jan 17 23:59:59 2023 GMT
        Subject: serialNumber=abf75f7a59ae2961ac53b2d1babd6559c216b1a58cd6cff7af29022179793549, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:77:50:cf:8f:5f:2a:0e:da:98:2e:52:e2:
                    0f:d0:87:df:41:6e:66:8e:8a:1e:de:46:67:d8:58:
                    e4:b4:30:88:08:c5:2e:48:77:7d:44:42:61:cc:29:
                    88:8b:b3:ed:8b:a4:c5:74:25:81:a4:fb:a3:ce:54:
                    b2:60:e6:68:90:08:e5:54:f8:6f:1e:c8:21:b0:df:
                    8e:75:1d:79:c5:bd:42:cd:dc:bb:77:e8:bc:34:0f:
                    fb:c4:8a:37:b9:5f:38:4f:cf:29:b4:08:aa:7e:c0:
                    e4:82:5c:4b:ac:ca:73:74:46:9c:50:69:2f:57:0e:
                    d7:ea:77:19:67:67:a7:17:e9:c0:c3:31:b1:bb:42:
                    e9:1d:95:a8:6a:cf:90:a1:dc:7c:4e:d6:c8:75:03:
                    1d:26:77:d8:98:ce:31:4a:3e:ca:5c:ae:c7:2a:dd:
                    d5:f1:1b:a3:ae:05:8e:07:1b:17:eb:0a:bf:61:4e:
                    da:69:e4:8c:d4:62:16:09:08:f8:cf:32:17:7b:47:
                    c2:93:5e:1d:ab:dc:dd:d5:0a:2c:dc:83:bb:94:6c:
                    bc:49:0e:f5:b5:78:1e:87:21:07:03:1f:b7:e6:d3:
                    7c:47:a7:fb:a0:e3:ee:a6:57:a6:85:72:15:7b:15:
                    cd:3e:e3:fa:28:da:e0:d9:4e:42:31:a0:96:a7:f4:
                    5f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B4:17:D2:D7:61:28:15:93:0A:2B:69:5D:D3:C3:0D:8F:DC:DC:51
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/279e57ef-2b89-41ca-a9f6-c65de5d48647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:33:17:ed:fd:f2:25:8d:22:95:c7:5e:e6:92:50:99:4f:5b:
         8d:ff:bd:eb:6e:54:15:80:84:db:f3:68:00:62:d6:ac:98:1f:
         f8:92:d7:50:2c:7d:c3:b0:54:71:ce:05:34:f5:59:04:f4:65:
         2d:27:3b:02:79:b8:a2:b4:2d:3f:4a:6d:47:a2:7d:16:13:a7:
         8a:cc:90:34:1b:68:ac:4f:99:d8:74:1b:4b:b9:51:40:88:30:
         a0:bf:e0:1c:80:2e:c5:51:85:ac:b2:d9:d1:fd:88:e4:e5:64:
         63:b7:4d:74:5a:9c:f6:d6:41:c6:07:90:fa:4b:73:7f:87:aa:
         81:01:60:5f:c7:b3:6c:a3:01:3e:5a:44:f7:05:d1:d6:a3:3c:
         3c:ea:aa:80:01:58:9e:5d:e8:66:69:8c:20:c3:98:94:3b:a1:
         39:ce:14:59:41:d6:04:e7:bd:d3:88:4e:8c:3b:e9:1e:bf:04:
         b8:0c:cd:17:e2:33:3e:4f:05:8c:0f:a8:ed:6e:d1:76:52:d4:
         6a:b1:ef:ef:35:95:70:9c:e5:37:30:77:cb:6c:93:b1:ef:7d:
         29:47:47:f5:f5:0e:16:c2:ef:6e:a1:24:12:59:21:47:94:ee:
         72:ba:d8:ec:f1:32:3f:5c:e0:63:c8:64:bc:69:68:18:80:92:
         cb:0e:d4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----