Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3e9373b6-e0dd-4472-9fd7-4bda9cc29180.roa
File:                     3e9373b6-e0dd-4472-9fd7-4bda9cc29180.roa (raw, json)
Hash identifier:          OoKyfPMnp0vMWz/A7yaJR747QnO0aWqdiZ/5MWQn934=
Subject key identifier:   95:35:EB:CB:5E:97:FF:B5:9E:9F:F4:16:BB:DE:3A:57:0B:7B:51:13
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       155F3908806BE4F0C425D89D49A2A24CABAB75E5
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3e9373b6-e0dd-4472-9fd7-4bda9cc29180.roa
Signing time:             Fri 14 Apr 2023 00:00:00 +0000
ROA not before:           Fri 14 Apr 2023 00:00:00 +0000
ROA not after:            Mon 17 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5f:39:08:80:6b:e4:f0:c4:25:d8:9d:49:a2:a2:4c:ab:ab:75:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 14 00:00:00 2023 GMT
            Not After : Apr 17 23:59:59 2023 GMT
        Subject: serialNumber=c1fbcf3b88cdebfc160c119bcfbadee5beec4681372703be2f745b30f90421a6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:07:93:8f:d1:d2:42:18:c9:70:cb:d4:32:69:
                    28:91:e4:08:34:2e:6d:35:cf:dd:ff:bc:8e:f5:5b:
                    35:ed:e5:01:ee:28:07:ba:b4:33:68:43:36:6e:51:
                    5c:fb:0c:4a:a9:37:37:ed:e7:7f:5b:b0:9b:b4:72:
                    a6:21:86:54:a4:fd:f3:28:a8:2f:ab:78:ea:cd:b1:
                    31:1e:b2:b1:0e:4a:90:4c:09:04:14:d8:b3:f9:a6:
                    1f:67:70:fb:31:c5:e5:0c:0c:5c:38:c7:49:36:b6:
                    9d:92:35:db:78:c2:3b:a4:ef:78:e4:dd:7a:4a:05:
                    14:79:38:50:a7:fe:6e:bf:6a:cd:91:00:4b:1f:89:
                    97:93:78:a4:9e:28:c9:7a:fd:8c:aa:fe:05:3a:a2:
                    0a:00:23:7b:91:ff:8d:4d:34:c2:c6:ef:1e:f4:72:
                    38:82:a1:30:de:3f:7c:23:9d:23:c6:58:a2:91:47:
                    57:45:bc:ad:0a:4d:b9:36:e5:d1:e6:9f:6e:50:1f:
                    56:47:0b:bb:53:98:1b:c5:6b:e6:ea:79:81:dd:1c:
                    cf:f3:05:57:e1:3a:82:f4:d8:e5:b9:24:9b:88:7d:
                    85:5d:19:22:cc:d6:4c:64:b2:6a:23:90:fa:d7:48:
                    e0:ec:f4:12:c7:14:84:ce:c5:14:2b:dd:bc:03:f7:
                    1e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:35:EB:CB:5E:97:FF:B5:9E:9F:F4:16:BB:DE:3A:57:0B:7B:51:13
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3e9373b6-e0dd-4472-9fd7-4bda9cc29180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:63:a8:2e:81:49:ff:af:ef:28:69:df:f5:f2:c0:8f:6d:88:
         da:62:b0:f7:7e:61:42:16:1f:e4:6a:16:ea:8b:9e:46:ce:c8:
         37:3f:9d:d6:61:d2:3b:68:f1:8d:ae:77:ed:b8:25:55:7e:99:
         e6:50:e9:b6:9b:c0:89:f5:5d:e1:00:12:0b:c8:a8:b4:af:7a:
         2c:5e:ae:65:da:7a:15:ce:54:6c:a7:cc:f3:ba:0c:ec:fa:ac:
         99:52:ea:ef:d9:05:d2:61:b6:ae:97:1e:7d:18:c1:d7:75:5b:
         b9:12:8e:66:a1:86:cc:70:b3:96:79:ae:86:d3:a5:8c:d0:84:
         16:4a:ee:85:28:07:e8:44:5d:3e:22:2a:39:a5:43:8d:64:13:
         7b:80:a4:97:2f:e6:f0:cb:45:0e:2a:96:ac:01:b3:80:08:b9:
         4d:cd:5c:97:f0:74:e3:e5:44:e6:1f:11:c1:b9:b1:d7:af:e2:
         ed:25:0c:f7:c1:62:42:31:59:22:39:99:00:0b:e2:bb:33:6b:
         79:fd:0d:28:0c:99:f8:71:44:28:d4:29:91:e2:8d:74:4c:01:
         a3:61:91:7d:7e:41:4e:29:d2:15:1f:e8:ed:71:59:ac:f0:ed:
         25:74:c2:ee:37:e1:d9:bd:b3:7f:17:8a:74:14:ad:cd:38:24:
         72:4e:0b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----