Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/54734042-ae31-466d-9237-7717e8078568.roa
File:                     54734042-ae31-466d-9237-7717e8078568.roa (raw, json)
Hash identifier:          B6cEekA0jy0TXJNLMUwi4r6IIBttsSyQndptBofAW40=
Subject key identifier:   C1:CE:CE:BA:79:4C:95:21:5C:04:1D:47:31:FE:51:74:D8:6A:00:EC
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       189C80EE9AC6C7876795235655D95DC0EB6E9750
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/54734042-ae31-466d-9237-7717e8078568.roa
Signing time:             Tue 16 May 2023 00:00:00 +0000
ROA not before:           Tue 16 May 2023 00:00:00 +0000
ROA not after:            Fri 19 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9c:80:ee:9a:c6:c7:87:67:95:23:56:55:d9:5d:c0:eb:6e:97:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 16 00:00:00 2023 GMT
            Not After : May 19 23:59:59 2023 GMT
        Subject: serialNumber=1dcdfd55cc8e8beab0f8ff00548bf169856e3afae3cfa2abff8deddfd38df301, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:15:78:3c:6a:a9:bc:f8:a9:a2:c7:9b:98:cf:
                    96:7f:1f:2e:eb:18:df:3e:e9:40:85:b6:69:95:89:
                    9a:f4:34:e0:50:3e:ba:12:7b:d0:23:da:d1:b6:12:
                    cf:8d:b8:88:2f:6e:8a:cf:f4:4f:6b:15:3d:5d:76:
                    0e:81:8a:78:33:44:c9:63:1a:14:d4:d6:ba:ba:0f:
                    38:f6:b1:71:e5:aa:67:cf:a4:07:c2:04:8f:de:c9:
                    47:33:d8:e4:b6:5c:f6:48:df:25:04:9a:f4:cf:93:
                    e1:a3:e5:8f:e9:7b:72:ff:70:8a:02:36:8f:44:72:
                    2b:2b:31:c3:db:51:79:25:16:e0:7c:e7:d7:3a:4b:
                    34:ed:b4:34:90:f3:e6:3f:cb:ad:a8:13:90:a8:a6:
                    db:48:7a:4a:c1:3f:1e:d8:8f:c2:bc:52:07:54:32:
                    39:b0:b6:60:7a:fe:11:f2:7c:fd:96:ef:8e:ee:2a:
                    c2:7e:e2:5b:72:7a:db:21:a9:0f:36:63:cd:3d:22:
                    fb:9a:df:9e:33:46:c0:e7:39:a0:b2:89:33:7d:aa:
                    5a:41:6a:72:7d:c8:e0:66:6b:0e:7e:4e:36:7b:0c:
                    5d:87:c3:d9:b8:f9:45:7e:01:d8:46:11:13:8f:c8:
                    49:5f:5c:70:96:ba:5b:90:9a:e3:8d:12:f3:75:94:
                    0e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CE:CE:BA:79:4C:95:21:5C:04:1D:47:31:FE:51:74:D8:6A:00:EC
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/54734042-ae31-466d-9237-7717e8078568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:1f:a5:dc:0a:50:6c:b4:20:3a:3e:24:a9:58:a8:2b:5a:f8:
         c4:38:76:87:b7:f2:6c:67:18:f5:2a:c0:16:a6:57:10:95:e4:
         33:38:36:11:69:4d:f9:77:2b:56:44:df:c3:96:dd:cb:4e:e5:
         3a:ed:fb:f6:6d:fd:d8:bc:bd:2c:0d:51:13:88:73:12:0f:d1:
         a9:e5:2d:f3:a4:b0:ea:d6:0f:54:4e:58:ea:43:02:5c:63:f1:
         34:c6:d5:90:8e:0c:ac:a6:cf:43:29:67:5a:ae:f6:be:0d:c9:
         be:79:14:8c:06:19:8b:98:8f:2d:93:c2:40:c8:a3:d6:27:3a:
         8d:0c:72:ba:5a:d9:24:99:4b:2a:6f:59:1a:3d:89:d4:2e:e2:
         47:72:b3:1e:56:ac:78:af:66:f1:9a:1d:7e:b3:9d:95:af:97:
         1c:08:9e:2c:7d:d1:51:5a:f8:0f:ed:ab:b7:76:7a:fd:f6:39:
         41:93:47:2c:4b:41:dd:c9:8a:04:5e:8a:78:42:1b:71:d9:be:
         db:38:f6:15:7f:68:f9:a6:ec:4f:ac:38:40:ba:ea:e7:c0:3a:
         05:c9:51:f1:82:51:d2:e8:13:80:8a:4c:d4:ae:c2:29:dc:29:
         b2:2a:fb:53:f8:ce:03:97:32:16:cf:42:e3:70:ef:2f:24:ba:
         30:b8:e5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----