Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/37d59254-7fc9-4a4e-b16e-a82f84fdc867.roa
File:                     37d59254-7fc9-4a4e-b16e-a82f84fdc867.roa (raw, json)
Hash identifier:          4wsHc8C4SfjkTK4u8ilX+h/jrGy/uMGy9vw1VVMdC3A=
Subject key identifier:   78:FA:A2:69:1B:8D:7B:C9:F8:A6:73:E4:4C:78:B1:22:1F:32:04:D8
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       535B09DC89BD7FDA529BF151BF01A9512D05EAA1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/37d59254-7fc9-4a4e-b16e-a82f84fdc867.roa
Signing time:             Fri 14 Apr 2023 00:00:00 +0000
ROA not before:           Fri 14 Apr 2023 00:00:00 +0000
ROA not after:            Mon 17 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5b:09:dc:89:bd:7f:da:52:9b:f1:51:bf:01:a9:51:2d:05:ea:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 14 00:00:00 2023 GMT
            Not After : Apr 17 23:59:59 2023 GMT
        Subject: serialNumber=180ea0e03f09aeb27282b63c849b67e3bdec2dea19d8b3acae9fd266f5cc2865, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:72:6a:13:16:0b:ce:bf:a2:f1:19:e3:b2:eb:
                    24:82:87:df:23:ca:9c:cf:97:ad:73:86:ee:40:ba:
                    25:4c:1a:72:53:21:69:ed:60:9d:7b:78:40:13:2c:
                    70:21:9a:8a:86:83:dc:d7:f0:1e:35:5c:f0:87:76:
                    98:44:5f:90:df:42:7f:f0:5a:62:2c:19:e3:5e:e9:
                    2b:22:22:9e:9c:9a:0d:f5:cb:ea:29:58:eb:dc:d3:
                    36:a1:87:86:34:06:b0:2b:46:9e:f7:c6:92:ec:db:
                    96:95:86:5f:9b:19:91:a7:14:39:a0:37:77:47:50:
                    7e:c8:e9:2a:d6:1f:c2:79:d0:57:dd:06:cc:d0:9e:
                    22:ad:75:84:1b:d6:cc:6c:97:fc:37:f7:c7:72:d8:
                    0a:61:de:29:ee:b6:34:ac:40:95:df:72:c5:e1:e6:
                    b3:22:8f:18:70:2d:23:60:f4:b2:92:82:50:50:18:
                    a4:59:0c:99:48:c1:8b:cd:e5:ec:14:75:52:c5:e5:
                    c2:73:03:4c:f4:1d:29:7b:79:f0:58:b2:8e:11:fc:
                    e2:e5:d7:95:f2:8a:08:8e:74:5e:71:0c:3a:08:54:
                    b3:af:32:f5:5b:aa:a6:90:6d:61:c5:9d:05:06:71:
                    d9:e3:ca:cb:c9:f0:53:8f:68:8b:14:56:47:9a:44:
                    f7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FA:A2:69:1B:8D:7B:C9:F8:A6:73:E4:4C:78:B1:22:1F:32:04:D8
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/37d59254-7fc9-4a4e-b16e-a82f84fdc867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:51:30:3e:4a:fb:68:65:84:88:aa:32:f5:20:90:87:ff:64:
         4d:e7:9f:7e:2d:47:8c:d2:29:2a:9b:c8:07:68:d9:a4:9d:0d:
         07:c5:41:e2:46:8d:da:b0:41:36:b3:0f:1a:1b:04:c8:9e:9c:
         76:6d:58:c5:15:30:8b:40:ee:53:43:29:51:59:39:15:d2:e6:
         ab:64:5e:14:86:23:bf:85:d7:6c:f5:01:82:6c:42:d0:c9:22:
         db:97:3f:ef:a4:54:25:98:88:04:1b:52:d3:04:51:f1:98:8c:
         f9:96:7c:5c:a0:da:6a:67:37:5a:bc:61:91:97:6b:9e:49:c4:
         03:bf:74:92:88:6e:05:57:66:cb:84:d1:a6:f3:08:96:be:da:
         23:a2:a9:da:45:b1:d9:1d:0b:96:4f:c9:fa:d0:54:f5:ae:9c:
         80:d6:59:cd:60:83:ba:25:4c:fb:04:cd:bb:f9:7a:2b:9f:12:
         72:43:9f:44:3b:e8:e7:34:ec:08:1b:08:04:37:3f:db:b0:c3:
         00:ea:a4:00:e5:79:ff:2a:f1:52:97:96:0f:ea:34:47:9e:6b:
         c2:33:99:ee:0f:da:65:2d:4f:86:02:92:16:17:26:dd:79:22:
         61:6e:3f:6b:78:e7:f8:6f:24:71:db:0b:59:13:10:90:38:97:
         2d:2c:8a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----