Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2f7599eb-76c4-4a57-82cb-c6074c8da90b.roa
File:                     2f7599eb-76c4-4a57-82cb-c6074c8da90b.roa (raw, json)
Hash identifier:          KcvNLM7BFejl793S4SS/QWH37CWy6NMiDj1WK3RBIjU=
Subject key identifier:   AF:6D:10:B8:E8:2F:5E:52:AB:F6:2E:4E:7C:42:98:49:05:C2:A9:D0
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       45955742F79B2C4BEB19A86A49C47DAFAD3AFDFA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2f7599eb-76c4-4a57-82cb-c6074c8da90b.roa
Signing time:             Sat 22 Apr 2023 00:00:00 +0000
ROA not before:           Sat 22 Apr 2023 00:00:00 +0000
ROA not after:            Tue 25 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:95:57:42:f7:9b:2c:4b:eb:19:a8:6a:49:c4:7d:af:ad:3a:fd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 22 00:00:00 2023 GMT
            Not After : Apr 25 23:59:59 2023 GMT
        Subject: serialNumber=b8d4c575fac86a647783f9600b6059ccaa5472c64a755bfb418dee2d61d08d45, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9d:f4:38:2f:7a:03:07:d2:26:16:b9:a4:d3:
                    30:e5:f2:88:6e:c0:38:dd:40:38:06:64:30:4b:42:
                    52:0c:1c:55:82:4b:77:35:fa:9c:9f:05:4c:ab:0d:
                    00:ba:f2:da:bf:1e:e1:68:d0:42:34:f9:20:b3:20:
                    90:be:3d:bd:df:2d:90:ff:71:09:b4:89:8e:58:1e:
                    97:89:93:67:9e:22:b9:29:2b:1a:8e:8e:3d:89:e0:
                    9b:41:84:c8:d3:96:18:67:a1:10:0e:f5:2f:09:a8:
                    79:32:57:64:b5:97:cb:11:6f:5f:af:4c:12:51:89:
                    d3:1b:15:98:09:5a:95:af:10:28:f9:5b:0f:82:b3:
                    1e:71:1c:11:18:5c:05:c8:26:ec:e7:25:b6:b6:e4:
                    1d:c6:6a:e1:6c:4d:80:e5:41:41:07:b7:2e:e1:ae:
                    3a:a9:99:44:5b:a7:0d:65:75:a8:1c:2d:a9:c8:99:
                    75:f7:55:7f:15:02:e7:8f:ba:56:0a:61:5b:f3:cb:
                    63:69:fc:a4:b0:31:05:7f:cc:e7:51:70:48:a3:85:
                    31:53:37:79:5f:47:75:0b:c0:a5:39:b3:66:db:6a:
                    b1:d1:00:08:07:46:f4:5a:59:47:19:a3:71:a7:17:
                    76:15:13:be:a7:12:c7:b8:ad:9a:6c:af:c9:ab:2d:
                    be:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6D:10:B8:E8:2F:5E:52:AB:F6:2E:4E:7C:42:98:49:05:C2:A9:D0
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2f7599eb-76c4-4a57-82cb-c6074c8da90b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:a9:ee:8e:99:ae:41:1e:a0:b6:92:b2:e8:92:25:af:11:94:
         06:d0:ed:d5:27:7f:18:3a:0d:de:a6:9b:de:0d:5b:f7:54:96:
         3b:8d:87:90:ce:9d:9e:7d:42:5d:4d:15:37:bd:ce:c6:c7:54:
         08:18:51:3d:7b:77:59:ba:e6:0f:59:ce:d7:34:45:4c:18:c1:
         28:2b:c4:43:ab:46:d5:c6:7a:17:4c:0e:c7:e4:a2:3d:9c:e3:
         f3:60:0c:53:91:93:88:ae:94:29:1c:ff:37:85:d3:cc:c6:01:
         d3:2e:3e:f0:1c:c9:f4:ba:9b:cc:48:09:f0:98:4d:d3:31:f7:
         74:bf:a7:ab:f9:9f:f6:78:d9:fa:66:95:3c:c0:65:5b:29:4d:
         b0:f6:bd:9b:09:df:10:e9:de:13:80:c4:a3:59:24:ad:f2:a3:
         2a:d3:b6:83:85:3f:36:2c:40:87:a2:1a:f8:ec:e4:a4:90:6d:
         2d:32:9c:08:47:9e:7e:ab:c5:11:10:58:8e:ed:38:b7:29:6e:
         d7:8d:fd:aa:bf:a3:99:16:76:85:99:dd:fc:01:55:82:93:be:
         d6:3c:bb:22:b6:a0:05:3a:f0:7d:86:41:60:5b:d7:6e:dd:9c:
         e3:34:76:57:36:f0:fc:12:af:4e:40:30:0c:53:bd:2c:d7:f8:
         81:cf:cd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----