Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4be4314a-05a5-43fe-9095-50092e15a6de.roa
File:                     4be4314a-05a5-43fe-9095-50092e15a6de.roa (raw, json)
Hash identifier:          XavYWYlbP70vFk1ocBPGUILX4wpNAekJVvLP67Z2mIs=
Subject key identifier:   96:6C:F0:7F:92:53:0B:B5:C7:A1:E7:12:D2:F7:91:50:2E:AA:18:5C
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7D492E973F9277AAECE8536B17C12732224D486F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4be4314a-05a5-43fe-9095-50092e15a6de.roa
Signing time:             Wed 12 Apr 2023 00:00:00 +0000
ROA not before:           Wed 12 Apr 2023 00:00:00 +0000
ROA not after:            Sat 15 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:49:2e:97:3f:92:77:aa:ec:e8:53:6b:17:c1:27:32:22:4d:48:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 12 00:00:00 2023 GMT
            Not After : Apr 15 23:59:59 2023 GMT
        Subject: serialNumber=02e2f23fe12591315fc9614f6a95b45815caa1e332db7880fc442b2729444241, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c8:e6:79:9e:e7:b7:ed:e2:4d:37:cf:89:1f:
                    57:ef:e0:9e:a1:f5:25:03:9f:0d:96:02:fe:c5:3a:
                    34:6b:08:3d:cf:8d:f5:b1:93:1a:d9:d9:45:c1:b8:
                    48:b3:01:94:e0:f0:80:c0:9e:4c:f3:81:08:0f:dc:
                    c0:f7:b0:b6:e7:a0:32:e0:a2:e5:50:8e:e1:08:22:
                    54:7f:a8:c6:04:05:43:c9:4c:9f:b8:a3:cc:bd:b7:
                    6d:ea:38:36:c8:3b:c4:9a:c3:5d:d7:e0:96:f0:25:
                    ba:3f:c3:23:0e:84:19:bf:d8:82:fa:85:02:40:34:
                    e4:5b:ee:fe:16:7d:35:b3:75:99:6c:16:79:45:89:
                    32:ae:d4:44:38:59:0a:97:6e:ff:9f:cb:3f:24:10:
                    07:48:78:87:d1:d1:4c:1a:d0:74:ea:c9:25:be:da:
                    fd:d5:2f:a4:1f:68:78:4d:f7:94:da:52:e6:e8:92:
                    92:4b:51:0b:92:6d:13:81:90:f2:73:44:b8:c9:49:
                    0e:fa:73:4c:ec:fc:11:08:76:11:4d:6d:e9:79:86:
                    4b:68:1e:36:46:cc:b0:d0:6c:bd:e9:1a:73:fb:4e:
                    d9:77:6c:65:3f:3b:bd:e5:a7:a8:a2:cc:ff:45:23:
                    fb:96:4f:25:80:f9:3d:25:1f:ed:66:fa:e2:3f:93:
                    2d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6C:F0:7F:92:53:0B:B5:C7:A1:E7:12:D2:F7:91:50:2E:AA:18:5C
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4be4314a-05a5-43fe-9095-50092e15a6de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:ae:d5:9e:8c:ec:08:d0:47:1b:88:27:2d:89:06:18:21:34:
         6c:98:ed:38:ef:50:21:26:a6:04:6b:9a:2d:86:24:9d:82:b5:
         a0:24:50:96:28:c4:40:74:e9:92:93:5c:6c:24:af:d4:4f:2a:
         0b:87:8b:5b:e6:08:07:1d:ca:d7:b8:85:b1:96:68:2d:88:64:
         72:57:f7:99:2f:29:d6:5c:13:56:f1:1f:8f:a6:96:6b:5a:53:
         f7:7d:06:d0:c1:fa:47:b0:e3:53:1c:19:8a:d8:a9:43:f5:c6:
         d2:a4:ac:26:7c:25:ca:25:bb:95:bf:bf:23:48:34:5f:74:36:
         64:32:fc:32:d4:f3:1c:af:a6:c2:98:0f:2e:23:4b:2b:df:02:
         9c:6c:b9:06:57:cc:84:5b:00:8f:41:02:96:70:7b:02:8e:ec:
         e2:da:22:25:5c:dd:46:fb:43:34:b6:c9:ca:04:26:ee:bd:37:
         10:f8:1a:15:5c:38:6c:5a:5c:36:89:ec:30:82:d6:18:c6:a1:
         73:df:06:97:29:65:ba:1b:54:11:b7:cc:72:4a:94:7b:7d:8b:
         5b:85:62:e7:bb:28:68:a5:05:e1:c1:30:0a:5b:0d:42:18:72:
         3d:b7:f9:f5:70:00:ed:e1:cf:e1:c8:60:6d:53:49:8b:d1:ee:
         11:36:e6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----