Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3dd77bc7-5af8-42b8-993b-55ab649c089a.roa
File:                     3dd77bc7-5af8-42b8-993b-55ab649c089a.roa (raw, json)
Hash identifier:          96sitko4s1Gze41Ix/CdbcUobCQ8IfLpKtkDFJD1LqA=
Subject key identifier:   3C:C8:31:BD:2C:C8:5D:E4:54:B0:52:62:43:8A:74:41:9F:B5:C6:0C
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2C22CA8E400B2E3480F5DDCA7E36F0D6D5B1CE66
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3dd77bc7-5af8-42b8-993b-55ab649c089a.roa
Signing time:             Sat 15 Apr 2023 00:00:00 +0000
ROA not before:           Sat 15 Apr 2023 00:00:00 +0000
ROA not after:            Tue 18 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:22:ca:8e:40:0b:2e:34:80:f5:dd:ca:7e:36:f0:d6:d5:b1:ce:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 15 00:00:00 2023 GMT
            Not After : Apr 18 23:59:59 2023 GMT
        Subject: serialNumber=4eb08b86fbf28039ab8bc9582cc5b4c261e96eecc79a6dcb5cd3dd4f32643053, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:88:bb:74:02:a8:47:8e:0d:2f:f7:53:1e:
                    a5:5a:60:12:18:f1:70:8a:ae:e0:64:a8:23:83:dc:
                    97:d6:a5:af:36:fe:43:fb:b5:4b:1a:3a:a8:7f:c9:
                    59:f7:8a:83:e6:6a:7f:a2:32:f4:91:92:f8:c7:c2:
                    89:85:3c:75:26:fe:a4:4d:b2:ea:04:a7:eb:2a:80:
                    d1:e0:d6:6d:2a:5f:09:68:d6:94:03:15:e0:a6:b1:
                    91:bc:fc:42:59:a6:b9:90:66:19:cb:b4:23:89:aa:
                    8e:f5:85:93:2d:b0:c5:4a:d1:7d:af:fe:52:51:67:
                    28:fd:05:8a:04:87:d2:4b:75:b9:cc:da:6f:ca:38:
                    d4:64:2e:e6:3a:00:d0:66:bd:97:e6:5f:ad:d4:51:
                    54:65:93:55:3b:c5:67:67:40:53:d6:33:e9:78:52:
                    04:db:a3:50:2c:9a:5f:b7:12:4c:28:94:04:fa:15:
                    62:87:7d:4a:a2:70:e3:9e:b7:f7:27:f1:31:2a:6a:
                    c9:92:b1:b0:9e:1a:5e:8e:23:58:79:52:b7:7c:d2:
                    05:ce:f2:34:1d:29:63:aa:97:ce:8d:c9:7c:65:ae:
                    9b:37:5f:a5:3d:2f:82:5e:61:cc:4c:54:39:e7:7f:
                    54:39:0f:74:11:2a:0b:f2:53:35:19:2a:9e:b0:73:
                    bf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C8:31:BD:2C:C8:5D:E4:54:B0:52:62:43:8A:74:41:9F:B5:C6:0C
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3dd77bc7-5af8-42b8-993b-55ab649c089a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:d1:9b:48:78:e8:6f:fd:d1:88:2d:56:da:62:44:2b:60:bb:
         be:e4:90:e2:ad:f4:1f:6c:46:e9:e6:c0:32:c5:63:aa:c9:d6:
         ac:83:0f:a3:22:29:3f:07:fd:19:c6:1c:60:61:fc:96:a6:97:
         1b:b2:2d:5d:7c:9b:12:73:f0:3b:a9:a6:4f:62:f1:e2:3d:c0:
         a4:bf:ff:83:9c:20:08:b3:f7:35:ce:d3:42:73:1f:91:28:54:
         7e:e0:e2:2e:26:bd:30:b3:d3:b6:9f:98:01:4c:de:be:35:27:
         ac:a6:5d:93:4e:1f:c0:10:30:63:31:c2:18:32:c5:f1:5b:c9:
         07:f2:2f:4d:f5:c5:23:6c:38:c3:43:17:56:65:84:fc:4e:67:
         36:4a:c1:4e:71:63:2a:cb:e6:5f:9c:b2:24:82:b9:10:69:4c:
         d3:bd:5a:8a:26:39:56:ff:c7:9e:2f:04:47:94:5f:82:d7:2f:
         e8:5a:57:dd:98:20:32:b5:cc:66:be:4f:3b:d1:a6:ba:b3:a0:
         35:60:ec:2f:ea:c7:16:7c:a1:4e:15:0b:7b:b8:13:0b:39:07:
         35:ab:2f:8e:75:8b:62:48:76:fa:c2:a9:cd:c0:18:3a:ee:fb:
         40:fd:06:31:2e:bc:52:8a:22:69:08:a9:1b:e2:91:c1:e8:6e:
         4c:fd:9e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----