Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2e6ecc13-6e03-4cb7-bba6-656a3548b644.roa
File:                     2e6ecc13-6e03-4cb7-bba6-656a3548b644.roa (raw, json)
Hash identifier:          bLprw97cGRNfn2ckIyf3HIu/nOmxshKmOQk9saoSnLg=
Subject key identifier:   75:CA:33:3C:09:E6:5D:90:7A:80:EC:4D:D4:72:C2:83:3D:BF:F5:AF
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3D47C329CB472ED29A28D243E190C1E1D6A3BC3E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2e6ecc13-6e03-4cb7-bba6-656a3548b644.roa
Signing time:             Mon 27 Feb 2023 00:00:00 +0000
ROA not before:           Mon 27 Feb 2023 00:00:00 +0000
ROA not after:            Thu 02 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:47:c3:29:cb:47:2e:d2:9a:28:d2:43:e1:90:c1:e1:d6:a3:bc:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 27 00:00:00 2023 GMT
            Not After : Mar  2 23:59:59 2023 GMT
        Subject: serialNumber=6b078a6edeffbd2744a3f337dc7e8ac56c3ca813d3e04f4781ac084aeb783038, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:76:83:77:75:3f:84:4b:72:72:d7:87:4a:
                    a6:9d:1f:f9:46:aa:b1:cc:96:80:ac:d1:1c:00:0c:
                    f4:6d:ac:d6:d3:f4:be:ea:6c:cd:9a:c9:36:2a:ac:
                    21:b9:13:8f:84:e3:f5:5c:b4:76:49:86:ea:cb:44:
                    26:a6:bb:0a:79:c1:e1:d1:2a:06:ef:9a:45:91:df:
                    d2:b0:a7:31:e8:c2:19:7d:ee:c3:cb:bf:13:27:61:
                    fb:c0:2b:aa:df:98:e3:99:17:9d:b5:49:a7:e5:17:
                    9a:46:87:89:8a:c3:dd:63:d7:35:51:76:c5:6b:91:
                    a6:47:f4:3d:ff:54:cd:e0:bd:57:5b:ef:9c:66:37:
                    ea:6f:92:35:b4:2b:96:35:69:c9:8a:06:bc:b2:29:
                    5a:78:4c:6f:6f:de:16:ca:a3:45:48:d6:58:79:16:
                    dc:5a:37:24:0c:f4:c2:84:7d:9a:ab:8a:ac:48:54:
                    2c:8c:22:89:91:5f:25:ac:c5:c7:c9:40:95:51:a5:
                    ff:7d:c3:fd:5a:6f:be:d0:5d:70:8c:bd:fc:2f:e1:
                    4a:a2:87:d3:05:5f:c4:ad:a5:57:b6:88:8c:e8:af:
                    da:58:83:1a:93:bc:1e:ce:37:5e:27:31:4d:9e:fc:
                    d8:6e:82:0c:a9:98:58:b6:d6:c3:cd:86:99:04:4e:
                    45:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CA:33:3C:09:E6:5D:90:7A:80:EC:4D:D4:72:C2:83:3D:BF:F5:AF
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2e6ecc13-6e03-4cb7-bba6-656a3548b644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:91:d8:41:83:94:cc:36:2a:50:a0:4a:1f:f0:19:a0:ef:b3:
         6e:03:9d:97:98:85:d3:17:80:6c:cf:54:5a:76:ef:c3:63:3f:
         f3:35:ed:35:83:68:01:31:65:7c:be:c6:50:f7:cc:1a:ac:37:
         ff:c8:b5:87:02:2d:8a:83:f2:cf:e7:40:21:a1:f4:08:91:7c:
         02:e5:6c:77:07:6e:e8:f7:ad:5a:f3:dc:07:32:00:82:97:56:
         f6:b8:81:4e:d8:cb:7d:39:2f:87:c5:3c:70:ce:83:05:63:f2:
         e0:1c:aa:da:e3:6b:fb:5e:60:04:49:47:80:e2:2a:e9:c2:bd:
         0f:05:94:93:f0:70:eb:3a:29:18:05:f8:ab:f8:98:3f:9e:c4:
         77:c5:dc:f9:e0:3c:35:40:f6:9b:f0:72:38:a9:7c:6a:9d:67:
         d5:07:eb:4b:8e:fa:44:38:05:0c:ca:8b:fd:fa:1e:0a:9d:a0:
         52:4e:58:ef:4b:26:9c:ef:68:f6:17:2d:01:24:3d:1a:b1:27:
         74:a9:6c:bb:39:2b:00:77:e9:f2:12:b5:01:5e:f2:62:fc:7f:
         43:09:cb:12:5b:77:14:f1:1d:d0:5e:7a:db:e8:84:90:33:70:
         9a:51:d3:83:fe:0c:62:ef:9c:f0:6b:70:fd:db:5e:f6:c7:d3:
         05:a1:4c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----