Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/34cbe45f-a50c-4736-b45e-bf029ba320e6.roa
File:                     34cbe45f-a50c-4736-b45e-bf029ba320e6.roa (raw, json)
Hash identifier:          mrRCsaWCs8St7u/Efa0O1uIOtuobvL9xAsKzvJt/5z8=
Subject key identifier:   CA:DA:8D:0C:75:86:3A:00:1B:D0:30:17:CF:F3:C5:4A:A0:02:F2:F9
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       66141AA99ACFFEA9D2EA58F0EB6BAD739AB753EA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/34cbe45f-a50c-4736-b45e-bf029ba320e6.roa
Signing time:             Fri 24 Mar 2023 00:00:00 +0000
ROA not before:           Fri 24 Mar 2023 00:00:00 +0000
ROA not after:            Mon 27 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:14:1a:a9:9a:cf:fe:a9:d2:ea:58:f0:eb:6b:ad:73:9a:b7:53:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 24 00:00:00 2023 GMT
            Not After : Mar 27 23:59:59 2023 GMT
        Subject: serialNumber=15a22d81acb3bdea60caa725de5d3e02ecb0576318712922fef3ba61c7b2a5cb, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8b:b5:3a:ba:2e:b3:fe:42:41:72:10:b3:ff:
                    1a:bc:3d:af:cf:91:bb:15:3b:dc:93:f1:f9:a7:ca:
                    6a:d9:f0:3f:e7:eb:3f:81:78:9d:a5:21:5d:8b:e7:
                    ec:5d:2a:0f:e4:a6:7c:12:b1:b6:77:43:ff:76:fa:
                    2c:85:02:85:8c:4a:7b:91:8c:1e:8f:c5:df:59:95:
                    48:0c:76:09:a3:d1:2e:25:39:25:67:68:62:2a:87:
                    ac:41:73:14:96:72:65:55:f5:b3:3c:9b:c3:f8:88:
                    23:fb:b3:7e:29:54:bc:04:c3:43:55:e9:34:2f:5a:
                    5d:b4:e2:21:a6:f2:fc:c0:10:a6:af:d5:b6:c2:0d:
                    3a:b5:8b:9f:d0:6c:fd:0e:09:28:79:8c:fb:57:1e:
                    f1:d5:f5:77:8f:77:29:47:bc:44:3e:7b:c1:76:38:
                    e6:31:9a:ef:6d:d9:06:71:da:36:b3:12:a5:3f:e3:
                    5d:d2:1a:ae:39:f3:3f:05:39:05:56:6e:45:82:97:
                    e8:60:f5:56:fc:cd:a6:c8:e2:4f:6a:71:6e:a8:17:
                    7d:da:a3:84:29:ee:5d:fc:f3:00:fd:94:33:9f:e2:
                    fc:59:62:a4:72:af:c7:1b:3c:d8:67:08:6e:91:d4:
                    a4:bd:c4:55:01:ad:84:ec:e6:95:72:ee:97:0a:5d:
                    08:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DA:8D:0C:75:86:3A:00:1B:D0:30:17:CF:F3:C5:4A:A0:02:F2:F9
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/34cbe45f-a50c-4736-b45e-bf029ba320e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:77:a5:cd:3c:32:18:ac:90:7e:a1:3c:23:a5:25:d8:fc:3f:
         16:94:fe:c5:13:3d:63:3a:a7:85:7d:16:69:9e:82:99:06:48:
         d5:c9:71:fd:6f:62:e9:38:35:58:43:fd:19:dc:14:d6:96:43:
         b9:f1:d5:7f:6b:5d:f1:ce:72:9a:b8:8a:ed:e7:eb:d6:45:d2:
         a4:3e:8c:87:53:33:44:bd:23:8c:12:42:30:e9:4e:c7:71:de:
         7f:54:eb:4a:1e:84:47:44:0f:e9:1a:03:27:0a:78:b2:83:bc:
         5a:57:94:0c:72:46:57:ee:ac:05:7c:f9:1d:e6:18:b3:e3:1e:
         32:7a:88:81:61:11:ef:99:34:b1:23:05:1c:44:7f:4b:86:56:
         43:ee:be:97:44:83:80:64:3c:20:c5:b2:5d:2c:89:a5:f8:01:
         c4:22:48:25:ef:ef:4b:a7:7e:9f:f4:22:9f:5d:73:db:24:c5:
         22:54:b3:c1:74:97:2a:8c:23:6f:66:f7:51:96:3d:50:96:d2:
         27:4e:43:01:2d:58:de:f4:ba:b6:8e:1d:71:c4:a1:f6:d5:17:
         3b:cf:9e:1c:0a:73:11:27:25:7d:cb:fe:30:f5:12:4d:07:da:
         f9:83:99:d5:f1:5f:db:01:54:11:41:04:1d:64:18:07:5a:c8:
         f8:33:e4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----