Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3755a55a-9939-4db3-b30c-2ae06aeb9a7c.roa
File:                     3755a55a-9939-4db3-b30c-2ae06aeb9a7c.roa (raw, json)
Hash identifier:          jSRUJ+vkEZQTGQrravOS+/sbX+RvRcpQuiLRM+DCSH8=
Subject key identifier:   55:57:01:50:EF:2E:22:05:18:5F:C2:AF:2E:6D:5C:35:40:6C:4B:B7
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5DF7DCB739BE37C6575BEF2E25177FD19B825BB7
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3755a55a-9939-4db3-b30c-2ae06aeb9a7c.roa
Signing time:             Mon 10 Apr 2023 00:00:00 +0000
ROA not before:           Mon 10 Apr 2023 00:00:00 +0000
ROA not after:            Thu 13 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f7:dc:b7:39:be:37:c6:57:5b:ef:2e:25:17:7f:d1:9b:82:5b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 10 00:00:00 2023 GMT
            Not After : Apr 13 23:59:59 2023 GMT
        Subject: serialNumber=a54c8caf95e27ed83ae5171a69bafba384317b5e0ce3bd2764c8b6d0796e26ab, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:1e:e9:b2:a9:6f:8f:e5:a7:cd:fb:c5:04:
                    3e:a0:ff:a4:2f:83:68:6e:54:2c:0e:56:a2:78:ae:
                    8b:88:6c:da:4f:24:75:33:f8:af:24:f4:d0:3b:c8:
                    c8:ad:74:c4:69:0f:1b:0b:fa:45:73:5e:31:00:b5:
                    77:80:dd:2b:2a:67:d5:c4:ec:b2:b2:36:3e:83:63:
                    0b:c4:49:23:94:2a:9e:6d:7f:1e:ef:f4:cc:d5:22:
                    5a:3c:55:fe:c8:1f:bd:4f:bc:9e:0b:10:07:67:e3:
                    f6:b9:49:f1:82:ff:fe:fc:38:6c:71:66:b4:9d:f1:
                    1c:73:42:dd:ba:c0:66:8a:47:b4:00:c9:74:10:ac:
                    35:70:7b:73:6a:6b:cf:bb:b3:59:6c:47:35:12:f5:
                    28:49:35:c9:bf:d6:cf:4c:37:cc:99:d6:d0:73:c7:
                    35:cd:2e:30:25:8e:3b:c8:62:8a:e7:d7:73:5a:9e:
                    59:3e:f6:c3:69:3b:31:ad:ae:d4:5b:06:ef:46:91:
                    65:16:98:d8:fb:49:46:7d:90:e9:88:76:1d:eb:3b:
                    ce:3c:9d:5f:f5:33:e1:dd:b7:f5:05:5c:d6:ae:d6:
                    c8:f0:0a:31:3f:81:90:56:c5:3b:00:c4:ca:94:8e:
                    cf:80:c7:09:a9:0f:8d:86:bb:b4:4f:0d:e9:f1:ed:
                    25:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:57:01:50:EF:2E:22:05:18:5F:C2:AF:2E:6D:5C:35:40:6C:4B:B7
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3755a55a-9939-4db3-b30c-2ae06aeb9a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:17:8d:81:11:53:26:23:81:d3:04:7c:cb:46:a4:8c:a4:8a:
         2e:fa:30:be:2d:d5:0c:d9:d4:6c:ee:97:a9:b0:9c:c1:26:73:
         a5:a2:db:12:c5:78:d0:75:a4:6f:72:34:45:47:f0:4b:23:87:
         9a:fb:1d:a8:d4:8a:72:ba:04:db:e7:cc:a0:9f:2c:cd:ce:9f:
         d8:c8:2f:e8:08:4f:63:ff:c2:70:63:d9:c5:1d:cd:13:fc:5a:
         bf:fa:00:04:b4:9c:c9:8b:fe:2d:0d:a8:a6:8d:3d:40:74:c8:
         36:b1:1c:71:df:1c:ef:27:0e:33:fa:d7:e8:56:76:0d:0c:d3:
         04:29:82:42:51:8c:d7:f8:04:04:71:12:bb:08:db:31:78:33:
         b9:11:eb:cf:b0:b1:9b:0d:af:95:97:70:2c:41:82:fc:38:fe:
         da:33:51:b4:a8:18:e2:1a:1c:46:71:e6:8f:a2:90:47:ef:be:
         ee:f4:ad:bd:32:91:ee:20:17:5d:9a:11:60:e0:7f:38:eb:f8:
         c7:00:b7:bd:15:84:18:75:a1:e8:ee:70:4d:97:d0:13:c3:ad:
         63:f6:10:d9:17:66:2d:56:03:d5:58:d7:8a:af:79:ae:74:7c:
         53:12:b8:24:c4:f6:42:c3:11:44:fd:47:59:ad:26:b4:49:d8:
         e5:42:58:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----