Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/516e4b97-28b7-4089-972d-35da4778135f.roa
File:                     516e4b97-28b7-4089-972d-35da4778135f.roa (raw, json)
Hash identifier:          1n+7dg3hETtanrB9F2D7ljC7qa1XwxmOfWXR8RY0elE=
Subject key identifier:   40:5F:C4:A0:03:5A:EB:B4:33:A9:F0:6D:A1:43:89:B8:A1:3D:17:FB
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       671299A6C131B8468932022CBC04C1FA64FE6B56
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/516e4b97-28b7-4089-972d-35da4778135f.roa
Signing time:             Thu 02 Mar 2023 00:00:00 +0000
ROA not before:           Thu 02 Mar 2023 00:00:00 +0000
ROA not after:            Sun 05 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:12:99:a6:c1:31:b8:46:89:32:02:2c:bc:04:c1:fa:64:fe:6b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  2 00:00:00 2023 GMT
            Not After : Mar  5 23:59:59 2023 GMT
        Subject: serialNumber=5276e9972386b1d56ad7b7b13d66f7b1298a902f645e1edcdc5c0ac7b4ceeb81, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:cc:dc:df:c3:d9:86:70:0b:6a:4e:05:fd:
                    a3:1b:10:af:45:0f:84:5a:51:a2:2e:a4:09:5b:aa:
                    81:be:64:63:b6:fd:30:b7:e8:71:6c:3f:fc:f7:59:
                    a3:37:71:90:f7:38:d0:7c:3a:52:79:c6:31:8c:06:
                    aa:c1:de:66:00:9f:82:56:06:89:de:a2:8b:8e:ec:
                    10:c2:9f:a1:5d:8b:f0:4c:f1:0e:e0:12:15:0f:48:
                    10:d2:37:68:a9:b8:95:35:62:00:2f:3a:cd:01:30:
                    3b:8d:24:10:0d:dc:10:cb:7c:02:d5:32:00:26:57:
                    33:b1:b9:b3:ae:da:bb:ed:fc:07:6a:23:56:45:dd:
                    0a:56:66:dd:96:a5:99:26:e4:74:86:ed:28:27:30:
                    1a:bb:e9:86:ea:d3:f4:d0:86:88:ff:fb:44:82:33:
                    bf:e5:73:08:e5:fc:f3:57:2c:48:0c:4d:69:c3:22:
                    a6:86:e0:48:2c:74:0a:81:ab:81:58:e4:bd:18:91:
                    9a:06:a9:66:03:ee:bf:66:2b:92:45:98:83:78:bd:
                    1e:51:e0:6b:50:5e:4c:6d:c6:ce:c7:94:e3:20:1e:
                    c4:27:64:36:0a:eb:69:a8:50:cc:56:9f:72:c0:38:
                    38:ae:92:d5:f5:59:64:da:a5:d0:e2:71:0c:0a:76:
                    2b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5F:C4:A0:03:5A:EB:B4:33:A9:F0:6D:A1:43:89:B8:A1:3D:17:FB
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/516e4b97-28b7-4089-972d-35da4778135f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:9c:d8:84:69:2c:45:78:af:e0:60:25:d9:0e:0a:3b:ba:53:
         52:74:93:d4:24:cc:fb:94:03:31:7f:b0:41:e7:e2:4c:98:c7:
         db:57:07:51:3c:90:e0:02:4e:d4:ab:2f:f1:c7:e8:da:14:9d:
         6f:67:79:17:b2:c3:ee:b4:19:8b:41:a2:07:d5:6f:50:62:42:
         d3:f8:7f:0b:c2:c1:3a:7a:82:c9:37:da:b9:95:e6:9c:e7:a5:
         cc:b9:83:32:fd:9f:11:16:9d:68:7b:6d:b3:12:64:78:4c:00:
         72:71:6f:db:12:a0:22:36:d4:69:4e:59:b8:cd:2c:3c:da:0b:
         f9:e5:e4:db:54:64:30:22:f7:2d:39:0e:a7:fa:19:a9:66:39:
         d4:61:a5:31:14:4c:da:07:c5:85:2a:5c:58:95:0e:ff:b9:a8:
         38:a9:82:5a:5c:4f:a6:3e:99:45:ee:f8:ec:d5:c9:cd:4e:19:
         a1:d3:02:f4:95:54:fe:b5:89:95:d0:4c:d9:a1:17:6a:a3:04:
         cd:e0:32:70:14:a5:bc:b5:ec:c9:29:f4:d9:91:ab:7d:53:cb:
         86:22:39:9d:af:65:63:84:e5:eb:1e:7e:e1:cf:2d:6d:10:8e:
         31:74:25:63:08:b6:99:fa:d5:c1:53:9f:ff:6d:3c:6b:15:9b:
         e8:b9:62:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----