Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/38356ebc-3ba6-457b-8528-d13dba426666.roa
File:                     38356ebc-3ba6-457b-8528-d13dba426666.roa (raw, json)
Hash identifier:          RbJ03H1b6lEvk75e3Q6rIN0ulvNYZ/wwVMy3tSvRQBk=
Subject key identifier:   5C:7D:C7:69:83:E4:50:EE:F1:62:F8:4D:1C:E1:9B:2D:BA:C2:11:56
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4A8FA410A5599626AF1159CDA16562CDE8287079
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/38356ebc-3ba6-457b-8528-d13dba426666.roa
Signing time:             Tue 21 Feb 2023 00:00:00 +0000
ROA not before:           Tue 21 Feb 2023 00:00:00 +0000
ROA not after:            Fri 24 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:8f:a4:10:a5:59:96:26:af:11:59:cd:a1:65:62:cd:e8:28:70:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 21 00:00:00 2023 GMT
            Not After : Feb 24 23:59:59 2023 GMT
        Subject: serialNumber=d016b854e50c63ec10a74622eb92cd6373dca865c0c692095e9059ac96be7404, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:28:d5:3b:67:e8:38:0b:a6:a9:95:4c:90:0d:
                    27:a7:7a:b4:57:f7:da:91:7a:71:e5:03:f0:b7:e5:
                    b7:fe:7b:73:5a:c5:4d:c6:3d:fa:35:6a:b6:2e:49:
                    e9:90:89:a1:d9:4d:48:57:f0:9c:7b:5b:39:d6:95:
                    37:a4:70:81:58:fa:08:58:a6:d5:e3:43:10:52:a9:
                    fb:05:1c:8a:1f:dd:15:08:d2:ae:61:c8:aa:0e:f4:
                    f1:3e:f7:f7:f1:89:6e:63:19:46:49:15:31:d5:fc:
                    3f:23:e0:a9:f5:4d:64:2a:09:83:9c:2a:73:67:f0:
                    dc:83:a9:00:7c:d0:9f:5d:4b:ce:f3:ba:9a:8e:aa:
                    7e:df:cd:cb:f9:c0:cb:ad:23:e9:0c:c6:eb:17:fe:
                    99:9b:81:23:94:0f:c8:65:fc:09:ca:0d:07:64:5b:
                    17:f9:08:e4:2a:18:fc:a3:d2:45:5b:30:c4:82:4d:
                    3d:77:d6:4d:dc:27:b4:e9:6a:4a:9b:de:16:0e:da:
                    12:4e:38:ed:5b:dc:a7:00:3d:cd:37:6e:e4:07:00:
                    37:e5:73:3c:16:91:59:69:b0:57:7f:64:87:15:66:
                    b6:45:0a:01:9e:db:8d:fd:95:b9:99:34:d0:c0:f6:
                    cd:87:f4:5f:88:43:bf:d3:2d:81:d6:fb:e5:ab:b2:
                    02:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7D:C7:69:83:E4:50:EE:F1:62:F8:4D:1C:E1:9B:2D:BA:C2:11:56
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/38356ebc-3ba6-457b-8528-d13dba426666.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:cd:de:d8:87:8f:46:fc:2a:8f:ec:c7:f4:ea:d8:d0:5f:b2:
         32:f4:6b:54:49:21:4d:91:a9:4b:03:c0:dd:9a:52:0a:f4:43:
         5a:59:36:22:d7:17:00:10:14:16:bf:6d:27:5a:84:c9:fc:91:
         b9:06:b8:59:30:f7:41:e3:0d:95:f6:47:0d:97:90:98:1f:a6:
         00:79:29:53:08:35:35:ac:30:2b:b6:b1:23:99:a2:e3:22:c7:
         ce:c3:c7:38:08:c5:26:c6:91:a8:e0:13:a5:b2:7b:eb:d2:ef:
         50:e7:c4:82:73:bf:2a:e4:7b:50:4b:4b:0e:a6:eb:fb:0e:be:
         4a:af:c0:52:79:cd:fd:d6:93:a1:44:75:db:55:65:d6:12:20:
         97:a8:23:75:b7:4d:41:09:03:db:fe:7e:83:45:03:40:9f:7f:
         0f:08:da:60:ac:fc:f0:6f:11:88:0d:f6:8b:0b:ec:f9:9e:7e:
         65:f4:00:54:a3:8f:1a:04:68:7d:8b:a7:01:aa:fe:92:28:56:
         fc:7f:87:35:63:0c:23:bb:90:6e:80:1c:87:92:af:a5:68:be:
         1c:2d:e0:c1:ff:41:4d:12:de:82:26:71:1e:ae:dc:25:d6:8c:
         e4:79:95:54:87:63:ae:b7:4f:71:13:e3:81:24:77:ab:34:bb:
         1d:bd:3a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----