Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3194ea20-efe0-42b5-9276-60207badc96d.roa
File:                     3194ea20-efe0-42b5-9276-60207badc96d.roa (raw, json)
Hash identifier:          0u9IGWdFCPnbSUwFxaT7ztpz8RSWFS8voZItCjZCPCs=
Subject key identifier:   44:4D:10:6D:51:62:51:28:F6:19:BB:A3:EC:77:FF:37:3A:A2:60:91
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       41E3FCD4411F8802C91D7A88F93958AA543D3C88
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3194ea20-efe0-42b5-9276-60207badc96d.roa
Signing time:             Mon 13 Feb 2023 00:00:00 +0000
ROA not before:           Mon 13 Feb 2023 00:00:00 +0000
ROA not after:            Thu 16 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e3:fc:d4:41:1f:88:02:c9:1d:7a:88:f9:39:58:aa:54:3d:3c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 13 00:00:00 2023 GMT
            Not After : Feb 16 23:59:59 2023 GMT
        Subject: serialNumber=d2df9274490ffda612c285d5405bc569d938320c13bb348b6696ed2b31517b31, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:28:8c:b7:ad:34:a8:16:68:fd:15:be:45:6f:
                    ad:d3:83:a2:ea:95:a8:f0:95:82:db:9b:e9:ba:8c:
                    ae:a1:d0:bb:23:a5:d5:8e:18:74:85:5c:3a:b1:e4:
                    82:bf:a4:74:8e:d0:d3:99:85:58:03:2d:ac:31:25:
                    12:bc:61:1e:16:39:d3:15:1f:96:eb:e4:18:79:f7:
                    67:1c:82:9b:06:4d:b6:b4:fd:4e:73:19:95:0a:3e:
                    06:1f:24:79:86:95:dd:69:1f:7d:a6:6b:5b:96:68:
                    f7:46:f5:99:e5:bc:2b:96:78:bf:e7:4a:21:1c:e1:
                    78:1d:48:2d:7b:19:65:f4:5e:09:e9:7e:3c:08:8d:
                    50:a3:dc:1b:28:10:6a:60:b6:66:97:57:94:b4:a1:
                    f0:33:d9:4f:61:61:44:05:89:7b:d0:63:3b:07:8d:
                    b6:ad:fe:08:9e:2d:9d:c0:3f:77:cd:6d:42:75:35:
                    16:5d:23:b2:1e:74:ba:0c:8d:28:08:59:9c:57:33:
                    fb:b9:80:91:a0:22:d0:77:22:7e:54:73:86:f7:08:
                    ed:80:fa:3e:ba:0e:79:b9:2d:ea:c5:ba:8b:b8:ad:
                    3e:b0:24:8d:aa:ff:54:8a:c5:1d:a2:57:38:c6:23:
                    11:73:d0:7d:05:b9:a7:90:cc:a1:9d:cc:f7:ca:3a:
                    3a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4D:10:6D:51:62:51:28:F6:19:BB:A3:EC:77:FF:37:3A:A2:60:91
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3194ea20-efe0-42b5-9276-60207badc96d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:5d:6e:8e:f8:40:f8:2d:6b:0f:5c:ed:b1:3d:ae:60:67:1f:
         25:5f:54:5b:cd:32:73:d4:49:52:14:98:63:b4:18:bd:8f:23:
         48:2c:da:5f:9b:fe:4d:c5:e6:dd:88:a7:11:95:e0:4a:f9:d3:
         0b:94:f1:fd:6b:4f:89:66:02:13:f2:b2:36:89:07:30:a3:46:
         7e:d0:c1:bc:72:6a:cd:d7:bd:d9:0b:c5:4f:f1:52:3e:0c:8b:
         18:d4:37:05:21:af:6a:30:29:9a:e6:c4:0f:2f:fa:7c:fa:6a:
         5c:cd:9e:fa:e6:8b:fd:0e:b2:22:41:b1:c4:c2:3e:4b:f1:39:
         09:c0:29:5a:1f:eb:b9:3d:be:f4:67:8a:be:24:a2:9c:bb:07:
         70:aa:40:9a:49:7f:fc:5e:4c:25:e7:62:b3:90:ef:ae:60:db:
         a7:ec:b1:4c:74:c1:cd:89:34:94:0f:e1:bd:0e:58:47:0d:fa:
         fd:d4:4e:32:44:10:8d:73:55:1a:16:d1:d4:b9:22:fb:f9:da:
         ae:33:a3:92:77:43:9f:ee:0e:64:4e:fe:59:5b:e1:b9:bc:ef:
         c7:c2:c2:2a:b5:7b:50:c2:d4:6a:ad:f5:b1:30:68:46:84:4d:
         d6:ea:af:27:49:16:73:c6:58:b2:df:b8:ea:2a:cb:23:05:60:
         10:14:1f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----