Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4a2302b7-4437-4f27-b8bf-9aecd9746d05.roa
File:                     4a2302b7-4437-4f27-b8bf-9aecd9746d05.roa (raw, json)
Hash identifier:          z0dk5NTKcV3LT3k60yjzlwj/WUvQC++aDZV7odw8HR4=
Subject key identifier:   6D:A9:8F:7F:8F:06:DA:EF:E4:20:6D:68:BD:F0:F2:F5:B9:A1:72:AE
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6C082FCD1F1FED58D78C7F58D655B6EDD0FA404A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4a2302b7-4437-4f27-b8bf-9aecd9746d05.roa
Signing time:             Thu 11 May 2023 00:00:00 +0000
ROA not before:           Thu 11 May 2023 00:00:00 +0000
ROA not after:            Sun 14 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:08:2f:cd:1f:1f:ed:58:d7:8c:7f:58:d6:55:b6:ed:d0:fa:40:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 11 00:00:00 2023 GMT
            Not After : May 14 23:59:59 2023 GMT
        Subject: serialNumber=a0246c2d1a29322c2fbd6a27ec2b56082d775dd0ef51ffcd250061fe98cfb64c, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:24:79:2d:1a:62:57:7a:44:e8:77:c3:fe:8f:
                    d2:2f:2d:28:ed:42:a3:cd:72:32:f4:68:ea:fd:90:
                    76:6a:e8:22:93:8d:8d:f9:db:bd:97:2f:6c:44:ff:
                    be:9f:23:e5:86:a5:08:d1:eb:3d:ce:b4:85:af:c8:
                    94:bb:c5:5f:7e:80:0a:83:78:e7:b1:bd:03:e8:96:
                    bc:bb:21:30:7b:03:be:5c:d5:09:b1:dc:44:b8:f5:
                    cd:ba:4e:91:cd:88:d4:3b:a5:a3:d6:c2:d1:f2:7e:
                    ca:bf:79:a6:21:e6:dc:64:80:5e:a9:93:c7:29:2d:
                    f8:c6:da:50:66:35:fd:84:59:a1:92:ae:2e:6c:8d:
                    4a:bb:ab:e7:fa:33:58:0e:0c:55:fc:1a:7a:5d:2f:
                    a5:9a:f6:a3:18:ca:63:19:04:19:cf:db:09:77:8f:
                    f1:c1:5f:67:1f:81:ea:b4:c5:79:a2:5e:80:28:0b:
                    98:24:72:03:ad:09:c4:48:f1:71:97:ef:0c:49:57:
                    22:9a:29:e9:34:c8:e9:6a:bb:aa:41:c6:aa:46:bc:
                    e9:a4:be:c4:48:f1:40:35:f1:ed:9d:a3:e3:ff:ad:
                    96:36:87:1d:b5:29:51:2a:e2:e5:7c:76:29:c8:4f:
                    5e:5e:52:ce:f6:cd:4d:89:84:8d:ac:dc:25:07:db:
                    1e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A9:8F:7F:8F:06:DA:EF:E4:20:6D:68:BD:F0:F2:F5:B9:A1:72:AE
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4a2302b7-4437-4f27-b8bf-9aecd9746d05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:26:91:65:a4:db:10:aa:76:70:9e:b4:c6:54:49:8c:e6:8d:
         5c:63:7d:98:71:9a:00:23:93:4a:40:be:ed:76:c4:f5:96:00:
         37:7f:04:c1:d0:5e:eb:13:89:d1:30:38:6b:1a:c2:4e:4c:f4:
         a8:cc:ec:74:34:fe:68:ee:2a:53:21:5b:71:7d:49:8f:32:56:
         ad:35:c7:55:fe:97:f7:f9:cd:0c:e2:43:03:62:d2:6a:b1:f1:
         05:f7:f4:67:58:54:72:8b:55:1a:d5:6d:17:8b:43:03:55:c0:
         33:3e:10:fc:72:bd:37:cb:07:33:a7:ce:3c:b6:b2:61:84:6d:
         87:ee:59:e2:74:34:11:b4:a4:99:b7:34:10:33:a9:96:e9:86:
         89:27:5c:8a:19:b2:71:e3:45:88:70:74:ca:20:55:53:87:8c:
         5f:0b:7f:8c:c9:f2:be:44:fa:16:94:b6:e6:e5:95:2a:90:77:
         e6:50:c3:bb:97:41:2f:63:64:99:d5:fa:a6:85:90:32:32:88:
         ee:23:79:21:38:8e:22:c1:a5:d8:4e:f5:49:81:63:41:37:99:
         2e:41:59:3c:d8:7f:a8:e4:e5:9f:d0:9f:39:e6:9a:eb:f3:13:
         e2:f2:1c:e9:ee:95:67:08:d9:3a:ce:64:80:d4:69:07:05:d3:
         cb:01:31:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----