Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/524b2af6-8b5e-4415-bc2a-55ad43d41fef.roa
File:                     524b2af6-8b5e-4415-bc2a-55ad43d41fef.roa (raw, json)
Hash identifier:          MTnoIERX3mzBs9eZ+h1da6ZGBl8ZvslvPv63zZII2a0=
Subject key identifier:   2D:4F:55:54:DD:63:DE:3E:9E:02:2C:27:81:C5:E0:B2:71:33:E7:C6
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0BF8C8B911A23F11989A1F1CF033D3049D731C51
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/524b2af6-8b5e-4415-bc2a-55ad43d41fef.roa
Signing time:             Fri 30 Dec 2022 00:00:00 +0000
ROA not before:           Fri 30 Dec 2022 00:00:00 +0000
ROA not after:            Mon 02 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f8:c8:b9:11:a2:3f:11:98:9a:1f:1c:f0:33:d3:04:9d:73:1c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 30 00:00:00 2022 GMT
            Not After : Jan  2 23:59:59 2023 GMT
        Subject: serialNumber=969d960cfd0ba7e24774da8110a35fac3b5cfa42875db2b718220ca26c22bdeb, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:06:13:e7:63:41:ed:42:47:2f:0e:d4:10:bc:
                    8d:37:1c:1e:1a:d6:20:4b:cb:8a:7b:e8:16:22:9c:
                    9a:d7:c1:32:4a:11:a6:03:b2:5c:d4:13:51:24:39:
                    69:8d:78:1f:d4:c5:36:2f:24:7e:25:e2:92:af:2e:
                    69:a0:f9:17:f4:b9:76:47:71:75:ce:ec:71:03:ff:
                    58:9e:67:ea:e8:03:06:a4:82:b1:e7:85:6d:60:dd:
                    5c:f9:55:c9:49:b4:39:de:6e:2f:e7:88:12:31:8b:
                    ed:bc:3a:16:3a:16:db:bb:15:a9:da:09:cc:b9:40:
                    a7:6e:d9:f0:7e:92:4e:cb:bd:a5:a2:ae:5c:28:39:
                    81:f0:7d:ef:aa:bf:61:6a:57:bb:b0:55:cf:f5:00:
                    30:f5:93:39:f7:b4:21:ed:87:c3:90:38:1e:ad:bb:
                    6a:7f:27:57:47:8e:e6:5b:c6:e2:8e:fc:54:91:23:
                    34:2a:9a:5e:56:a5:de:e1:86:21:28:04:72:7f:75:
                    b1:c2:9c:82:71:ab:f1:1a:d8:fe:07:37:bd:8c:93:
                    e3:33:77:79:63:f9:06:4d:28:0a:07:bd:be:f0:75:
                    3e:b8:16:ec:fb:94:27:92:b0:4a:25:c9:62:46:2c:
                    a7:18:36:ac:ac:1a:27:6e:bd:77:f0:f1:c0:64:eb:
                    d5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4F:55:54:DD:63:DE:3E:9E:02:2C:27:81:C5:E0:B2:71:33:E7:C6
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/524b2af6-8b5e-4415-bc2a-55ad43d41fef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:4e:da:be:70:08:63:62:49:9d:24:14:21:59:58:14:66:3c:
         62:44:e6:66:2a:c2:4e:4e:60:d9:34:13:6a:77:6d:e7:8c:85:
         ef:3c:77:00:de:f5:67:96:50:64:cf:12:43:69:a2:af:f8:89:
         d6:61:da:7b:fc:80:18:09:ff:9f:f3:8d:d2:a9:17:b5:b8:d2:
         a4:a3:91:ff:de:98:eb:ff:b0:7b:38:3e:cf:c7:17:2f:5b:65:
         b2:5f:49:df:52:43:f9:6f:c3:1f:0e:7d:ca:ac:b5:70:54:b7:
         f7:50:de:8f:53:df:02:f0:77:14:33:b8:94:85:27:c7:41:24:
         a1:10:9b:49:1c:10:ba:fd:79:70:e6:a8:88:69:25:bb:87:0e:
         60:d7:3e:06:35:5b:db:df:d6:aa:92:a0:2e:1f:66:ee:ac:6f:
         a5:18:f9:eb:72:3c:86:85:65:15:d5:46:09:ad:66:ca:bc:17:
         84:99:80:8c:3b:1f:04:fe:ab:e3:7d:86:f7:b9:0f:f2:cb:06:
         d3:b2:35:90:4e:cb:00:87:d5:a6:b4:c7:2e:b0:14:d9:bd:95:
         b6:3f:ef:10:d8:c4:8c:57:43:b3:8c:f7:fb:56:79:c8:52:48:
         c5:02:47:e8:ef:a3:3c:d4:ec:b8:67:53:d9:b2:48:1d:a5:d2:
         19:fa:3a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----