Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2d93fca5-938e-4e88-812d-c4ae4a9bf9b7.roa
File:                     2d93fca5-938e-4e88-812d-c4ae4a9bf9b7.roa (raw, json)
Hash identifier:          7Tt4BhMmA/IRTYdHpM8XYPArgitD86Cqeol/6gKxQfg=
Subject key identifier:   1F:CC:3F:B6:95:84:2E:6E:4F:5D:51:3C:67:48:DF:82:49:02:36:9F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       493516CB76B000340472DD212C7609284C40B8A5
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2d93fca5-938e-4e88-812d-c4ae4a9bf9b7.roa
Signing time:             Wed 26 Apr 2023 00:00:00 +0000
ROA not before:           Wed 26 Apr 2023 00:00:00 +0000
ROA not after:            Sat 29 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:35:16:cb:76:b0:00:34:04:72:dd:21:2c:76:09:28:4c:40:b8:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 26 00:00:00 2023 GMT
            Not After : Apr 29 23:59:59 2023 GMT
        Subject: serialNumber=1912fdf57d07d42adef1ab7d6302946857573d17ffef703f5fd77f42f96edcd2, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:68:6c:82:9d:99:3c:c3:d3:65:1f:dd:3c:
                    80:9e:ce:a4:1e:a3:6c:86:d9:6d:73:ab:8b:86:2e:
                    58:09:81:2c:65:71:e1:3e:f3:d4:eb:6a:57:a1:20:
                    68:1c:78:a5:d1:c2:90:11:e1:ac:0a:ee:dc:49:ec:
                    31:dc:7c:00:3a:02:7d:e0:21:dd:36:48:03:38:a5:
                    d4:fa:b3:80:44:f1:7d:b7:e3:2b:4d:41:f5:a2:20:
                    fb:48:65:57:85:ac:4e:7e:ef:7a:41:09:ee:41:28:
                    5a:97:44:eb:ac:8f:0e:d1:b6:ae:76:1f:37:41:2d:
                    65:26:72:38:fc:0c:3e:34:4a:77:64:d2:cb:44:65:
                    1f:b1:4f:2f:27:ea:f2:60:66:e4:ab:f9:91:f1:cf:
                    82:33:7d:e4:31:e1:a0:83:be:f0:23:f9:69:4a:e3:
                    12:d5:36:67:9f:9f:13:d2:e9:a9:74:df:15:0d:d7:
                    20:18:79:e1:78:73:a8:48:56:4e:fd:85:41:fc:a8:
                    06:24:85:a4:5b:d2:35:ea:83:97:60:76:62:b2:a4:
                    6c:7d:55:98:f6:7c:10:05:bd:9b:9f:96:00:61:88:
                    b7:a5:73:79:9c:85:36:e8:21:34:a5:5f:d2:d1:09:
                    6b:c1:ef:0c:69:c2:c8:56:e0:00:e9:af:17:aa:da:
                    fb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CC:3F:B6:95:84:2E:6E:4F:5D:51:3C:67:48:DF:82:49:02:36:9F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2d93fca5-938e-4e88-812d-c4ae4a9bf9b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:08:6d:69:0b:89:23:d1:66:16:e1:88:e6:9e:ac:c2:20:dc:
         f5:e0:47:6e:c7:7a:cd:72:21:38:76:eb:77:78:38:06:8e:19:
         31:0d:99:5b:f7:d3:be:83:3b:34:75:0c:26:19:ef:8a:8e:86:
         04:89:1f:46:6a:2e:1e:ab:a1:82:d1:6d:74:03:c1:13:7c:16:
         ba:2f:c5:8d:8e:9f:4e:69:2b:c2:aa:c9:c6:6c:0e:40:b2:36:
         32:bf:5a:88:fe:3b:52:16:74:ff:27:30:d0:70:75:ea:9b:02:
         c6:d4:92:ed:40:40:e5:60:7c:57:94:14:5a:ac:87:69:ff:15:
         ff:40:25:db:7f:95:5d:6e:34:0e:ac:d3:bf:58:cf:c3:30:6b:
         08:a8:d5:07:26:29:e5:ef:e9:09:1e:d0:9a:cc:c5:b3:f8:6a:
         1e:03:be:05:7c:75:14:a2:43:84:ad:8d:47:d4:a2:9b:d2:d2:
         de:4b:60:74:75:13:e4:4c:6f:9d:4d:a1:00:87:eb:b4:da:d2:
         5c:23:c5:1d:6f:58:42:6e:3f:c8:9b:48:fc:68:f6:b0:ee:56:
         8c:77:4e:32:b4:79:ca:f8:e4:7d:bc:1a:6e:f2:2a:e7:2f:8c:
         2f:cf:f9:71:81:a1:40:52:c3:de:ff:56:d1:40:55:2b:6e:6f:
         9f:7f:63:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----