Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4f0c33f6-1bb3-48da-9d2b-33bafafbf928.roa
File:                     4f0c33f6-1bb3-48da-9d2b-33bafafbf928.roa (raw, json)
Hash identifier:          f0Tug1EF7rKf8nzNCkQOQF6+eJOdg70SZimGt+34ZaY=
Subject key identifier:   4C:53:5D:2B:4F:5A:95:C1:2A:1B:77:77:CE:F9:DA:B2:47:BD:3B:ED
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6267D8DD754EC0C6F11CD4FEC5AB2F981A92CE91
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4f0c33f6-1bb3-48da-9d2b-33bafafbf928.roa
Signing time:             Tue 07 Mar 2023 00:00:00 +0000
ROA not before:           Tue 07 Mar 2023 00:00:00 +0000
ROA not after:            Fri 10 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:67:d8:dd:75:4e:c0:c6:f1:1c:d4:fe:c5:ab:2f:98:1a:92:ce:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  7 00:00:00 2023 GMT
            Not After : Mar 10 23:59:59 2023 GMT
        Subject: serialNumber=9ed53fccca3bb64e3d84de81e8256762249140682f20f2043a304947e9b76b9e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3a:e9:4d:50:42:00:11:ee:e3:5f:00:91:b1:
                    7f:85:e4:3a:10:ac:c6:ed:6b:19:ee:86:31:67:39:
                    1f:50:64:73:67:ab:27:67:37:30:8b:56:24:b6:3e:
                    7b:86:66:21:6b:f0:9d:61:d5:76:86:14:99:c4:60:
                    fc:e2:a9:a9:49:7d:ee:03:04:97:19:31:78:d4:f1:
                    f6:2a:67:e4:80:c4:5a:94:6a:27:9e:38:a9:c0:85:
                    aa:2e:3d:51:e7:ee:43:c9:4d:19:90:96:7f:d6:bc:
                    87:0d:e4:e7:6c:2f:c3:7e:b9:37:3f:9c:c8:17:e5:
                    6e:78:25:a1:49:a7:38:2f:5a:d9:03:4c:87:64:57:
                    80:f9:df:f3:49:43:3b:fc:b0:6f:f0:78:e6:2d:85:
                    62:e2:b1:40:87:39:d7:f2:ab:35:d6:aa:ed:b6:aa:
                    8b:df:7e:5d:95:95:31:d7:36:be:bd:f1:c7:c4:dc:
                    31:09:e8:1a:3a:85:0e:db:61:cb:ae:1c:6f:29:04:
                    ea:da:08:56:83:ae:8b:9e:57:19:f1:b6:b5:ea:6b:
                    ef:38:a2:4a:79:45:8d:bd:da:d2:7e:fa:1c:5c:e5:
                    a4:50:15:c3:ea:74:86:28:1d:52:e4:8b:b2:42:9f:
                    4a:c7:a5:4d:20:b1:84:fa:85:ca:ba:f1:94:f5:c7:
                    c8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:53:5D:2B:4F:5A:95:C1:2A:1B:77:77:CE:F9:DA:B2:47:BD:3B:ED
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4f0c33f6-1bb3-48da-9d2b-33bafafbf928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:e1:75:d7:81:21:9f:90:99:65:53:af:17:2b:51:3e:9f:20:
         33:98:1b:43:49:5c:fd:c2:c9:cc:57:e0:46:d7:9b:a5:e9:9b:
         6b:78:01:40:47:90:5c:09:a8:8e:05:52:18:5a:fa:8f:26:bf:
         67:54:c0:d8:ca:d4:b2:32:e5:3c:c7:6f:70:8e:27:21:b8:a9:
         0b:a1:ca:3e:29:5a:57:ea:6f:14:3d:00:ef:9f:a0:c0:66:85:
         9d:9a:80:a6:b1:b1:2d:84:99:50:f0:5e:d5:b4:77:78:fc:28:
         f7:8e:07:25:3f:92:56:19:ad:c2:43:0f:80:ec:d4:c0:f3:59:
         73:84:b0:ef:3d:25:b4:b4:af:1d:2e:b0:9c:0b:69:42:49:2f:
         0e:52:7f:f5:d2:09:09:5d:1c:38:cc:65:f4:20:6b:2a:0d:3d:
         aa:e6:46:8a:c0:96:5b:20:fb:16:4d:a1:69:af:8a:b0:2c:58:
         1f:cf:7c:4b:b1:f6:92:3c:a8:df:6b:e9:41:b0:ef:5d:fa:9c:
         c0:f0:e3:30:ee:c0:c2:14:70:a4:87:d5:8f:94:64:54:4c:7e:
         48:28:7c:30:80:ed:ae:6c:8a:ad:c9:c0:2e:09:45:c4:5b:26:
         a8:c8:44:f4:0c:b3:80:4f:d7:5a:2a:5f:5b:91:2f:15:ad:65:
         e4:c7:7b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----