Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2ae5b351-9206-4534-80bb-343088b6279a.roa
File:                     2ae5b351-9206-4534-80bb-343088b6279a.roa (raw, json)
Hash identifier:          dYPSeZYUXnuToWkPcY0qj+b1zGYYhVah3p5BwDLjZAc=
Subject key identifier:   10:5B:49:DB:6A:30:BC:1E:EF:9C:A0:08:FB:C6:B6:F8:3E:E5:AD:DF
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       11400F22C0A0627489D88A8EE3F040A2DC0D3410
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2ae5b351-9206-4534-80bb-343088b6279a.roa
Signing time:             Mon 17 Apr 2023 00:00:00 +0000
ROA not before:           Mon 17 Apr 2023 00:00:00 +0000
ROA not after:            Thu 20 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:40:0f:22:c0:a0:62:74:89:d8:8a:8e:e3:f0:40:a2:dc:0d:34:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 17 00:00:00 2023 GMT
            Not After : Apr 20 23:59:59 2023 GMT
        Subject: serialNumber=4ff134e8d5cdcbea9a6dcd8583673650525cb73cd8f8a27275649023ade9cf78, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2a:96:b4:98:b3:be:ac:29:d3:07:bc:7e:12:
                    16:c0:7d:4f:e8:a2:59:f8:84:ec:5b:bd:2c:44:e3:
                    5f:16:c1:a2:59:4e:9e:07:37:c1:a4:33:33:9f:06:
                    a0:16:4b:c2:36:29:6f:29:a0:a8:ce:f0:6b:b1:1c:
                    93:c4:33:57:4a:31:a9:b3:92:9d:1b:1e:fd:36:ba:
                    bd:ec:ee:e1:c7:13:e6:78:d4:5d:aa:5d:15:5a:55:
                    2e:36:44:33:ae:64:91:b0:da:11:ba:e7:6f:25:a0:
                    78:fe:9e:dd:55:cc:7b:5a:b6:9c:e6:ba:c4:85:c2:
                    86:7b:b6:17:f4:f9:ce:0c:22:cb:1c:1b:ad:66:90:
                    b8:44:23:fb:f3:d9:91:d3:f5:15:ca:fc:80:3f:1e:
                    77:f1:37:78:5e:2d:d3:30:28:63:f3:ec:c3:ef:b7:
                    a8:15:c5:9b:80:a9:82:70:82:32:88:5c:d2:10:82:
                    1b:22:cb:41:71:95:ec:f7:b1:cf:36:d4:66:7c:12:
                    aa:3d:6b:fc:ba:ad:fd:7a:31:78:d5:64:cf:f5:a1:
                    57:2b:f3:4b:b7:ef:1b:67:a3:0e:f1:82:10:48:62:
                    99:a6:71:f0:c0:39:0b:27:ad:69:b7:18:0e:89:cf:
                    ba:3b:57:ce:e3:38:0b:ba:28:d5:33:2f:36:b0:7a:
                    9f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5B:49:DB:6A:30:BC:1E:EF:9C:A0:08:FB:C6:B6:F8:3E:E5:AD:DF
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2ae5b351-9206-4534-80bb-343088b6279a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:f6:ae:81:0e:31:00:fc:4e:ab:6a:b4:53:7d:4a:62:15:2a:
         b9:6c:93:45:79:f2:99:bf:e1:1d:e4:e9:55:b8:bc:25:ec:ec:
         8f:84:34:08:8c:42:20:46:2d:34:c5:77:68:5b:39:3b:ab:73:
         00:5f:8c:92:9c:c3:16:91:48:0e:41:41:12:27:4a:f9:d1:d6:
         19:16:6e:9f:fb:54:4f:35:f5:56:52:74:d9:0b:d9:fd:5d:29:
         09:01:db:2a:83:bc:56:41:dc:92:c9:14:f9:9a:c5:6b:65:c5:
         bd:82:c7:b2:2c:02:39:7d:47:42:2a:9b:cc:23:8c:a2:bb:3d:
         af:35:85:83:ca:84:3e:4f:30:ca:2a:8b:30:87:7f:c5:c0:96:
         54:ad:d3:9c:34:9e:c2:7f:d1:2a:21:84:37:33:ed:ba:d5:50:
         b2:c2:65:18:09:53:e3:15:c7:eb:63:73:65:ca:2c:d0:f0:c7:
         c8:8e:a7:59:1f:e7:8b:48:83:83:f1:54:76:36:4e:0f:9f:85:
         7c:5a:bd:b0:e7:60:d2:47:1b:ed:ec:ee:5a:a5:54:80:dc:ab:
         cf:8f:57:7f:03:72:5b:38:cd:e3:1b:fb:34:62:b0:fa:b9:7e:
         64:f5:b2:f3:6e:eb:93:a9:be:27:04:b0:26:b4:93:44:0b:df:
         c2:8c:c6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----