Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3e35c0a2-bf9d-4647-a1da-765ed46b1680.roa
File:                     3e35c0a2-bf9d-4647-a1da-765ed46b1680.roa (raw, json)
Hash identifier:          vVjSoAwXeotHx/zpnpAQK6DqtlF3KE5gWJYT0sLWVao=
Subject key identifier:   19:ED:0E:FC:32:12:83:2F:07:D0:45:D8:D2:6B:E8:A8:D8:77:B9:6A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5C8F49C6B0A2B10BE949A590AE374B166D2CDE45
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3e35c0a2-bf9d-4647-a1da-765ed46b1680.roa
Signing time:             Mon 15 May 2023 00:00:00 +0000
ROA not before:           Mon 15 May 2023 00:00:00 +0000
ROA not after:            Thu 18 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8f:49:c6:b0:a2:b1:0b:e9:49:a5:90:ae:37:4b:16:6d:2c:de:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 15 00:00:00 2023 GMT
            Not After : May 18 23:59:59 2023 GMT
        Subject: serialNumber=24a4e519d552b82d52fde1980d6fda12c2cbe8ee9a612063339fa9ac7e5b2ba1, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:88:2d:d0:79:63:75:87:6e:d3:3f:b5:24:79:
                    30:d7:97:9b:fa:90:11:42:a0:5a:8b:94:a5:f4:71:
                    b0:c8:65:79:db:df:75:c3:5d:ca:fc:dd:d3:d3:8a:
                    6e:4c:de:e8:40:34:ef:2f:42:b9:f5:10:6a:9f:fd:
                    92:f9:f7:8f:9d:b7:ef:dd:b1:d5:3e:5c:31:5e:5b:
                    43:47:8d:1d:7a:0c:a7:9d:83:59:c9:2e:a3:b6:72:
                    6a:e9:64:31:51:22:70:2b:f6:38:82:6d:17:21:cc:
                    12:68:c5:49:1a:c4:93:95:d3:00:2f:ac:8c:2c:7d:
                    e9:96:1b:d1:fd:75:9f:f5:6b:da:f1:9c:ee:db:b8:
                    ce:63:c6:9a:1f:55:c8:5a:a5:55:e2:08:af:6f:2a:
                    c0:5b:a1:90:73:05:44:4e:50:a2:00:86:d7:11:8a:
                    11:ca:8e:fc:03:2b:9d:a2:b8:4f:3e:17:6d:59:a6:
                    a5:04:ea:5c:29:38:70:12:1a:2e:9f:5c:4e:fe:1e:
                    29:39:e0:fa:0b:86:cf:53:49:57:ac:5b:ef:c2:f0:
                    4d:6a:8f:53:87:72:ca:49:d8:83:af:ac:49:8b:18:
                    db:12:21:a7:08:28:69:69:4e:bb:2c:25:26:a4:5d:
                    b2:a3:1f:96:2a:e9:ea:07:cc:c9:76:1a:e9:aa:69:
                    6b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:ED:0E:FC:32:12:83:2F:07:D0:45:D8:D2:6B:E8:A8:D8:77:B9:6A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3e35c0a2-bf9d-4647-a1da-765ed46b1680.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:6d:8a:4d:5d:db:b7:3c:dc:7d:da:89:3f:56:16:60:54:29:
         7d:34:ac:91:a1:77:50:91:06:da:40:87:5f:58:2a:ce:06:61:
         fe:df:52:62:a1:41:6b:84:79:f1:9f:8e:52:7a:0f:2c:91:e7:
         b2:1d:93:21:03:4a:a4:7d:6c:b6:1d:83:f8:81:c2:75:9f:cb:
         45:51:3c:32:29:fc:6e:0a:d5:b9:80:fb:ad:0d:75:dc:d8:5e:
         cb:94:54:d2:c4:aa:ac:f9:95:a1:32:e4:8c:6e:ba:aa:e1:af:
         62:6c:5d:2c:f4:dd:59:09:33:53:48:5c:de:47:ab:f9:9f:e1:
         a3:92:49:8c:0f:4d:96:99:0e:16:e5:d8:93:2b:9b:c1:43:26:
         39:22:34:a6:d9:f0:b6:31:71:dc:be:b5:af:1a:e0:6c:9e:64:
         c3:81:1a:bb:b3:fb:31:56:40:ea:e8:99:41:35:40:c5:56:ab:
         e3:f9:07:ee:b1:e1:90:c0:1a:c2:45:fb:c9:25:98:d6:de:14:
         5a:87:91:42:46:19:03:cd:43:7c:fa:ff:bb:31:df:06:fa:75:
         e0:5a:3e:43:0d:fb:39:9a:f5:62:01:1c:50:39:f3:41:69:9b:
         a6:6f:de:00:60:46:47:ec:8b:cc:86:29:fc:71:64:b5:77:1a:
         5e:a9:a7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----