Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3cc9713e-9603-4539-803c-5240fb602650.roa
File:                     3cc9713e-9603-4539-803c-5240fb602650.roa (raw, json)
Hash identifier:          +jT8iLz6LVMZTSBLKGQrpOjlDLqywSh/kAUA3z0wXPI=
Subject key identifier:   4F:45:56:2A:02:C8:BF:01:E1:20:AD:1E:87:B2:0E:22:69:FC:2D:73
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5912B0D15FD0CECCD75E0BC1A9E4F980B10FFBFD
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3cc9713e-9603-4539-803c-5240fb602650.roa
Signing time:             Wed 01 Mar 2023 00:00:00 +0000
ROA not before:           Wed 01 Mar 2023 00:00:00 +0000
ROA not after:            Sat 04 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:12:b0:d1:5f:d0:ce:cc:d7:5e:0b:c1:a9:e4:f9:80:b1:0f:fb:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  1 00:00:00 2023 GMT
            Not After : Mar  4 23:59:59 2023 GMT
        Subject: serialNumber=74399d1f0367fb23a2e2db3b4a9c66e35d38cdfdfcffaade2438ed7c6648cf0b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ae:70:15:1a:be:1d:e4:40:8a:be:2e:74:a1:
                    07:71:65:4e:1b:e5:a9:1a:19:56:c9:0a:44:54:1b:
                    14:32:45:28:5c:98:9b:91:d7:e5:45:73:70:d8:19:
                    a9:95:a8:1a:40:05:1b:ad:10:6d:6e:3a:57:1f:34:
                    b0:31:ea:4e:07:91:46:16:76:b8:6d:1b:e4:8d:d5:
                    12:87:18:8f:61:4d:08:30:6d:ad:3b:04:58:3e:92:
                    6c:a7:60:13:46:99:68:9d:9b:a7:38:63:c2:cc:7d:
                    3e:55:59:13:71:70:f1:4f:4d:3d:fe:5c:21:14:c6:
                    93:3a:2b:40:8c:78:25:47:5b:f9:48:71:89:65:9e:
                    f3:0f:72:a3:a5:f2:48:10:38:c3:22:61:68:23:22:
                    49:bb:db:4c:d2:11:29:b2:3d:e2:f2:94:fc:3c:1a:
                    6a:ae:7e:0d:89:78:c6:f3:53:21:87:15:ab:55:10:
                    c9:9f:79:42:17:55:6f:3c:db:72:4c:28:cf:e8:1c:
                    49:1b:ba:e1:5d:fc:56:7a:c3:4f:65:67:82:c6:d3:
                    63:ec:ae:49:60:f4:20:9f:b4:e5:bf:01:30:34:3e:
                    32:85:8c:05:d5:1b:89:f1:12:f6:38:a1:44:7d:78:
                    c0:dd:a1:67:05:11:6e:4a:36:5f:17:d2:c2:dc:8d:
                    d8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:45:56:2A:02:C8:BF:01:E1:20:AD:1E:87:B2:0E:22:69:FC:2D:73
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3cc9713e-9603-4539-803c-5240fb602650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:dc:85:8a:b1:76:1f:29:dd:e6:43:18:1f:cb:ea:88:b3:d3:
         c6:54:66:a0:45:75:4a:f8:09:ca:08:39:c8:a5:0a:28:a0:5c:
         19:83:54:08:fd:28:cd:70:84:81:b3:5f:7b:d5:ec:81:a0:55:
         a0:55:3b:fc:8e:dc:82:ed:97:5c:73:69:da:f6:1c:f0:25:ac:
         7e:26:b9:e5:f5:4d:2d:7d:e8:4b:c9:39:27:c2:e8:9f:86:14:
         30:b5:ef:62:39:d5:78:fe:d8:a7:7f:9a:94:c6:9e:ef:08:5f:
         aa:f2:df:65:b5:f9:11:53:8b:7b:2d:14:fe:1b:2b:2e:86:ee:
         fa:e7:c2:f2:a9:92:49:62:e2:e5:f3:ee:11:55:cf:cb:42:5e:
         79:b5:6d:35:dc:1c:95:80:a2:1c:7b:2a:d1:71:d9:35:d0:0d:
         eb:40:dc:c6:9c:cd:10:18:d8:03:60:33:70:57:66:34:85:83:
         28:dc:d6:bd:3e:74:70:4f:1b:b4:45:75:ac:8b:8c:79:4c:60:
         ce:d8:95:bc:a9:be:50:d7:29:b4:df:fe:35:97:32:b7:7b:1c:
         8e:57:00:5d:0f:fb:51:1a:6e:72:29:9b:bb:6e:67:54:37:40:
         0b:0d:c5:a1:b8:92:c2:71:ec:d1:ae:b6:3d:cd:13:c0:aa:54:
         66:44:17:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----