Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3eca81c7-d892-42a3-9e12-ce328c01ab51.roa
File:                     3eca81c7-d892-42a3-9e12-ce328c01ab51.roa (raw, json)
Hash identifier:          HWCbD/n0SW3uAejYkrbP1Y+3VHRGgfpyHj2EkrF3bZs=
Subject key identifier:   23:92:A1:3A:32:FB:60:59:B1:D1:E7:FC:71:5C:10:87:8A:09:17:F4
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0ADEFDE8751520D3280B0B1E5E318798F895E54B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3eca81c7-d892-42a3-9e12-ce328c01ab51.roa
Signing time:             Sun 12 Mar 2023 00:00:00 +0000
ROA not before:           Sun 12 Mar 2023 00:00:00 +0000
ROA not after:            Wed 15 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:de:fd:e8:75:15:20:d3:28:0b:0b:1e:5e:31:87:98:f8:95:e5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 12 00:00:00 2023 GMT
            Not After : Mar 15 23:59:59 2023 GMT
        Subject: serialNumber=501ceed60b83cd64589aab30e2135b7b2b7d8c59bb124f348967f9e0be862473, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3a:fe:17:ba:b0:22:5d:37:eb:37:25:8f:88:
                    84:d8:0f:42:3b:a1:75:55:22:d3:db:a8:fa:f4:38:
                    6a:2e:55:88:f7:32:8f:08:f0:c6:3f:79:71:a7:c2:
                    a2:af:2d:31:de:d2:60:9d:50:a3:a4:f8:bb:b4:4b:
                    e1:92:13:c8:6a:e2:b1:75:0d:e8:6a:fd:14:04:9d:
                    dd:0b:e0:b4:c2:17:4b:82:c5:1c:93:0b:6c:c5:d8:
                    d3:0f:b2:38:7f:c2:9b:ad:27:8c:6d:e4:11:dc:13:
                    a6:ff:59:c4:8e:cb:53:7e:83:4e:ab:91:03:b5:99:
                    6d:7f:f9:04:90:e2:46:93:01:b8:8f:7e:fe:16:74:
                    a1:e1:66:fc:25:6c:0c:0c:ae:5c:7e:74:f1:e2:e8:
                    72:2a:f5:95:82:d0:50:02:ae:bc:03:19:17:74:ca:
                    88:3f:77:5f:e6:fb:b1:51:e2:e9:95:36:e7:eb:7b:
                    e5:ec:36:4f:0e:d1:4c:c6:86:b5:02:bf:79:b3:4a:
                    6f:da:cd:df:25:46:19:0d:70:db:16:79:a1:f1:0c:
                    dc:46:75:ad:7d:76:48:d9:ac:8b:9c:af:50:1e:f8:
                    ef:e1:3c:6d:6c:13:66:78:2c:34:02:3f:ab:a7:16:
                    07:1c:c8:64:09:92:0d:e7:81:1d:d0:6f:22:c7:00:
                    29:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:92:A1:3A:32:FB:60:59:B1:D1:E7:FC:71:5C:10:87:8A:09:17:F4
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3eca81c7-d892-42a3-9e12-ce328c01ab51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:9f:23:f7:c4:31:27:9f:36:f9:fe:a6:4c:96:72:fb:fa:b5:
         39:9b:4e:b4:c5:f0:5a:b1:ce:ea:37:4e:af:61:65:8a:1e:9f:
         30:44:69:2b:0d:c8:be:d0:0e:29:4e:c8:9c:a4:b2:c2:ba:f6:
         50:8c:a3:77:05:7b:39:68:ce:ce:c7:4d:bb:be:68:a4:a0:3a:
         5e:83:6c:28:d1:85:e5:69:bd:33:1b:f6:c2:83:7b:0e:4e:c2:
         5a:33:77:ef:67:8a:43:e8:80:e9:15:74:a7:c1:49:aa:1c:52:
         e0:81:33:ff:ce:2a:61:57:63:bf:54:5d:bd:b2:df:c0:bc:36:
         2f:f5:b4:ca:1c:1a:aa:9e:79:a2:42:a0:05:04:60:d0:76:8e:
         dc:39:24:7e:ed:5b:76:70:fd:0b:4b:0e:0f:df:de:e9:70:67:
         94:07:77:24:bb:ac:01:ae:d1:94:51:f5:ed:b9:6c:54:d7:5f:
         b9:95:06:cf:19:b4:55:b5:95:03:3e:28:10:8e:09:64:92:76:
         bb:4d:a7:6c:f1:f5:b0:9e:0c:ae:72:04:dd:3c:24:88:53:d7:
         d0:73:22:bc:30:60:e1:b9:fe:a8:38:55:c0:57:05:b0:4f:b3:
         05:3e:d2:af:c0:51:e0:e9:53:31:52:18:31:b2:40:91:96:1a:
         aa:83:fc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----