Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/31a9b16c-d723-4c14-ab67-b8b5b4edb0d5.roa
File:                     31a9b16c-d723-4c14-ab67-b8b5b4edb0d5.roa (raw, json)
Hash identifier:          6Y6sh2ACZ7OAtTUv6JMWGfYHvp2fJ+DErBkfZkUs8KE=
Subject key identifier:   E0:1D:42:09:F2:F5:2E:D5:3A:8E:83:C9:54:E3:B8:17:CA:A0:DE:B3
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       039173E9D9BD8D19CB6E20B15BFFC6C447A7D808
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/31a9b16c-d723-4c14-ab67-b8b5b4edb0d5.roa
Signing time:             Sat 22 Apr 2023 00:00:00 +0000
ROA not before:           Sat 22 Apr 2023 00:00:00 +0000
ROA not after:            Tue 25 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:91:73:e9:d9:bd:8d:19:cb:6e:20:b1:5b:ff:c6:c4:47:a7:d8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 22 00:00:00 2023 GMT
            Not After : Apr 25 23:59:59 2023 GMT
        Subject: serialNumber=d0e9aadb5e15fc4e4fc76a15dc0b4882275cee58d0d3e7625d6a2f4f1b28618e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:da:03:45:5a:03:69:35:17:8c:33:69:cd:
                    38:7a:d8:f8:16:00:ec:62:bb:96:6b:0c:4a:c9:f9:
                    c2:bb:df:be:5b:67:6d:6c:3f:99:6c:2a:bc:7b:62:
                    57:68:59:24:f7:39:32:72:26:d1:eb:0f:90:e8:33:
                    a6:30:06:2e:9b:80:cf:35:42:8f:83:64:c3:38:ef:
                    99:0f:1f:73:b0:a9:18:11:06:14:cd:04:35:81:f2:
                    95:4a:d3:18:75:53:fb:6c:1a:d1:ab:64:9d:1b:a6:
                    34:df:3d:fe:bb:b4:fa:42:be:35:ba:05:61:eb:f5:
                    9a:28:6d:90:98:54:a4:7f:33:68:98:33:fb:88:0a:
                    99:3a:f2:1f:47:49:1d:0d:bb:20:e4:39:14:4d:fc:
                    de:d8:92:c0:19:90:16:80:b2:c4:16:64:53:e0:b7:
                    32:5f:99:c2:2e:6c:06:01:42:e4:d3:b1:93:78:e7:
                    f1:8f:46:4e:59:9d:8e:8b:71:e3:bf:e8:a7:4e:98:
                    3b:06:46:6f:5d:84:e7:31:69:91:9f:ca:1a:3d:c9:
                    ba:64:a8:17:66:5d:58:03:99:a1:54:4c:be:bc:c5:
                    44:7d:90:a7:40:20:ab:9b:79:a8:16:cf:51:bc:fb:
                    36:15:5a:3f:19:b1:93:68:dd:90:a7:df:4b:9b:6a:
                    2e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1D:42:09:F2:F5:2E:D5:3A:8E:83:C9:54:E3:B8:17:CA:A0:DE:B3
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/31a9b16c-d723-4c14-ab67-b8b5b4edb0d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:9b:74:6e:43:a4:d5:f4:a8:26:25:48:9b:7c:e4:2b:d7:7a:
         81:6a:d9:e1:c9:8e:14:79:51:bb:05:74:e0:fb:55:86:e9:c3:
         e8:13:e8:73:74:3c:75:71:53:e4:b8:a3:23:1d:26:30:3f:80:
         b0:2a:e8:5d:c6:2d:c6:17:37:83:47:d2:6d:ff:fc:b4:d0:6f:
         03:6b:14:57:0c:5b:83:e0:08:83:46:5a:c7:d6:d0:0a:08:c4:
         f4:75:b1:45:94:df:4a:d0:0d:a2:bd:4d:39:e1:6e:c8:e8:2c:
         e0:ac:81:42:6a:60:a2:98:2c:81:41:2c:18:94:40:fa:c9:52:
         e9:a4:72:e6:13:5e:47:1f:71:c8:7d:26:e8:7b:a1:0c:5e:5f:
         00:d7:cf:20:98:db:33:c0:e8:44:c1:6a:8b:d5:33:a5:a9:e7:
         15:87:98:e4:b7:c0:4c:33:45:43:66:08:55:4a:27:45:69:7a:
         da:93:3b:eb:82:58:1b:31:2a:1d:53:5c:78:8b:e3:e5:cb:ca:
         0f:9b:b6:91:19:8a:cd:68:4e:3d:60:0f:ca:39:47:3a:2f:a3:
         f2:18:29:ee:f6:9c:fb:b0:a4:2c:bb:52:1d:40:29:fe:6a:3e:
         39:f4:e5:52:4f:be:31:43:76:0d:b5:eb:2c:46:39:59:e0:bd:
         18:fb:74:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----