Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/288254bf-78a6-4d1e-978b-892281b24103.roa
File:                     288254bf-78a6-4d1e-978b-892281b24103.roa (raw, json)
Hash identifier:          wI4JEjfEV434+MfzoJ8c7WGskLOeKYeV827YEgDTEIU=
Subject key identifier:   2A:58:C5:FB:80:39:DD:94:73:7D:B8:2B:F3:BD:86:AA:10:C7:4C:6B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       13892926B932A5A7B4EC0937E085595CD99A21A4
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/288254bf-78a6-4d1e-978b-892281b24103.roa
Signing time:             Sat 25 Feb 2023 00:00:00 +0000
ROA not before:           Sat 25 Feb 2023 00:00:00 +0000
ROA not after:            Tue 28 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:89:29:26:b9:32:a5:a7:b4:ec:09:37:e0:85:59:5c:d9:9a:21:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 25 00:00:00 2023 GMT
            Not After : Feb 28 23:59:59 2023 GMT
        Subject: serialNumber=ffabb6fa9cfe76e0970e7b7839a91b8a08b80c40e2d5b8c81cf5a7ce922aa7a9, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:ae:ce:8f:58:5c:ea:7e:6a:36:c0:91:8d:
                    2f:c4:00:8b:cb:e5:03:fa:ee:75:6d:8f:af:93:f9:
                    4d:f0:96:60:41:bc:51:66:a4:6f:e4:0b:10:88:ef:
                    ba:f3:ad:7f:16:c0:6c:0c:c4:8c:85:ec:3f:b0:77:
                    79:bb:e9:30:69:2a:bc:00:d1:05:5c:43:fb:f9:62:
                    95:57:63:2d:b0:84:b7:00:0e:7b:6d:5f:14:3b:fc:
                    22:4f:0d:2d:7d:1a:c8:4f:f3:ac:e3:3a:15:10:e7:
                    b3:95:98:4a:75:bf:9b:e0:35:b7:51:e1:80:ee:ce:
                    e5:0f:2a:06:4d:98:a8:c3:cb:1f:7f:6c:7c:4d:2e:
                    ba:11:00:f1:6d:c0:2d:92:87:eb:65:bf:84:72:37:
                    c7:b1:3d:00:1f:a8:5a:86:d5:25:82:05:69:6b:63:
                    cb:d8:a5:ce:fe:9f:53:25:91:72:18:d1:d9:e6:35:
                    82:16:23:d5:21:b5:db:df:ac:5b:c3:00:e3:38:57:
                    3a:ca:59:d3:fc:56:43:00:86:10:c5:a3:3a:a3:77:
                    02:41:21:b3:bf:89:2e:68:ad:ef:ba:91:37:47:2b:
                    cf:a6:ce:8c:bb:35:c4:e0:20:cc:62:61:4c:98:b2:
                    2d:4d:ee:8a:13:3e:ee:cd:17:fe:47:7d:94:89:ff:
                    aa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:58:C5:FB:80:39:DD:94:73:7D:B8:2B:F3:BD:86:AA:10:C7:4C:6B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/288254bf-78a6-4d1e-978b-892281b24103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:32:4b:a1:20:40:e9:54:f1:08:c8:3f:05:75:0f:58:44:89:
         5e:e5:cc:31:e0:9f:a1:5f:44:e1:0a:c1:43:6d:b9:f7:b4:47:
         0c:74:6d:38:26:9b:4c:32:0b:94:43:41:b9:03:0d:fc:62:4a:
         b3:f5:79:80:68:a2:27:c0:19:31:52:ff:4a:a0:6b:59:07:9c:
         01:a2:15:3f:14:f0:a7:e2:81:e5:5a:fa:20:e2:a3:c8:03:21:
         e9:7c:1f:75:2a:5b:bb:bc:fb:ec:d6:19:1c:49:06:c9:1d:af:
         7c:af:24:09:7e:67:dc:5c:27:14:a1:e7:2e:19:0a:59:71:dd:
         71:0d:21:b4:65:8a:62:28:49:12:8c:f4:10:3a:42:52:25:ab:
         c8:0a:46:9c:e3:da:32:ac:ce:a2:64:49:fb:06:44:91:5a:62:
         59:95:8e:ef:62:a5:d6:75:da:63:73:1c:aa:34:d0:76:ac:8f:
         9d:b3:29:0b:b6:2e:a9:32:ff:d5:14:ec:6e:a3:bd:82:14:48:
         b7:fd:ec:74:cb:61:41:d9:84:ff:39:69:67:f2:e4:07:3a:8d:
         45:1c:da:ba:0b:45:d7:9f:df:1b:ab:b6:8d:a3:12:02:a4:64:
         0f:53:e0:d6:5e:e0:e1:b2:c1:52:de:07:54:bb:10:b1:7d:db:
         8a:7e:41:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----