Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4646324e-6c07-415b-8f20-2b46ce0218b5.roa
File:                     4646324e-6c07-415b-8f20-2b46ce0218b5.roa (raw, json)
Hash identifier:          AydgAOPUNZzmjYbcOCzQEDEeKgPX3sBZZKUNL+avxok=
Subject key identifier:   06:97:19:18:72:B1:4C:64:BB:80:67:72:95:71:CD:73:1C:DF:1E:24
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       663A875CCE88283AEAE3589231C38BB428481F4E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4646324e-6c07-415b-8f20-2b46ce0218b5.roa
Signing time:             Sat 15 Apr 2023 00:00:00 +0000
ROA not before:           Sat 15 Apr 2023 00:00:00 +0000
ROA not after:            Tue 18 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:3a:87:5c:ce:88:28:3a:ea:e3:58:92:31:c3:8b:b4:28:48:1f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 15 00:00:00 2023 GMT
            Not After : Apr 18 23:59:59 2023 GMT
        Subject: serialNumber=4b2a77c6efdfa5d8d07b20facc749e0ef9e4d808f3a4c545c0402cef0436be57, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bc:a9:d7:7f:18:85:85:93:13:e7:5b:ea:53:
                    9e:29:2d:5a:e6:cd:6f:49:a7:07:79:b0:f5:22:74:
                    c8:7d:1a:96:11:79:a8:bb:b5:20:0a:40:27:85:2a:
                    57:69:c8:16:e5:4b:00:81:4e:66:49:28:79:49:64:
                    8a:37:fd:b9:68:67:79:13:b6:ba:84:70:85:c3:50:
                    7b:91:c1:97:07:07:46:23:34:54:bc:86:78:9b:13:
                    c0:53:d1:2f:16:6e:62:13:3d:40:0a:a3:3a:8a:de:
                    d7:9d:ee:f0:4a:06:b2:93:94:41:5f:c0:07:7e:c9:
                    d0:2b:66:ec:9f:e6:ce:40:7a:48:55:0b:08:e5:0a:
                    1f:70:bf:79:66:38:fa:fb:ac:06:03:f4:a5:07:10:
                    69:ae:7c:41:98:f6:34:cd:fc:6a:37:f9:49:d2:ca:
                    29:76:f7:7d:35:79:6e:07:48:95:5d:fe:f4:24:ae:
                    3a:4b:64:1b:ba:e2:54:46:35:6a:b0:30:9e:2a:2b:
                    fd:23:93:76:4c:b6:95:da:85:b0:d3:fb:8f:b8:c8:
                    d7:c1:56:0f:55:19:8d:3e:29:e1:4c:e6:67:c9:8b:
                    d6:2e:81:d0:f2:cd:8f:e0:31:a0:b3:dd:b9:ae:85:
                    c0:12:fd:4d:a8:56:a4:94:1d:1d:bd:98:77:b5:bf:
                    a6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:97:19:18:72:B1:4C:64:BB:80:67:72:95:71:CD:73:1C:DF:1E:24
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4646324e-6c07-415b-8f20-2b46ce0218b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:5b:06:e0:af:3c:d5:2e:5c:62:f8:a6:96:60:e8:e1:29:9b:
         23:ec:27:05:62:62:a9:79:9e:35:95:45:f8:71:10:e3:29:20:
         12:0a:33:f0:d3:bb:05:aa:1e:18:de:25:3e:f8:f2:a0:a1:21:
         e1:a0:ec:e1:42:aa:e9:8d:3f:96:b1:80:01:9a:de:32:cd:90:
         78:d9:ea:78:5a:63:3b:25:06:86:82:06:14:00:f2:e6:df:d7:
         16:68:9d:d5:59:28:cc:37:88:55:53:92:bd:cc:da:4b:af:58:
         d0:43:98:4a:41:90:4f:6f:49:c8:be:21:cf:94:94:a0:e8:5e:
         01:45:97:ce:9c:56:13:e0:77:bd:85:34:27:f8:83:dd:c9:77:
         83:1c:6d:43:fc:e1:6b:68:fc:75:f0:b9:88:b1:58:17:0c:68:
         e9:84:d4:19:69:92:83:41:9e:33:72:73:ac:05:20:73:85:f6:
         85:50:0b:45:72:9f:15:63:50:74:c7:9f:05:7c:3c:1b:ab:92:
         96:3d:58:06:1a:b2:c4:e9:1c:1d:95:a3:b0:ba:15:09:dd:fc:
         78:9a:78:06:1c:9e:73:c1:51:cc:9f:4e:d0:08:50:b3:c3:b0:
         6a:30:2d:2d:d3:32:3c:2e:a9:53:7a:17:60:f4:12:d2:80:55:
         61:37:03:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----