Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/55a6c05c-c561-4be5-ade0-8886255660fa.roa
File:                     55a6c05c-c561-4be5-ade0-8886255660fa.roa (raw, json)
Hash identifier:          q3tBAd8Ul7TdMqeuDTqOuCbuQlrHtXT/ddJZd2+37Zc=
Subject key identifier:   9B:BC:EC:EC:F8:DA:2A:96:BA:FD:78:FA:25:29:25:56:61:16:5E:9D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6A2B7B85ADD5C019C0A824776F85B2A4376AB926
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/55a6c05c-c561-4be5-ade0-8886255660fa.roa
Signing time:             Tue 11 Apr 2023 00:00:00 +0000
ROA not before:           Tue 11 Apr 2023 00:00:00 +0000
ROA not after:            Fri 14 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2b:7b:85:ad:d5:c0:19:c0:a8:24:77:6f:85:b2:a4:37:6a:b9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 11 00:00:00 2023 GMT
            Not After : Apr 14 23:59:59 2023 GMT
        Subject: serialNumber=c405471d5e91721bd489d6be2498374163a275392f75cc2e6940733752164be7, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ec:12:4d:da:99:48:56:3c:cb:2d:64:cf:41:
                    11:2c:4d:bd:91:42:dd:09:fb:95:ce:9c:01:c6:89:
                    9a:c9:61:7f:5a:32:e4:d1:0b:65:44:c0:1f:2d:d5:
                    03:41:93:1a:cc:d1:59:f3:78:52:dc:5e:53:cd:13:
                    0f:81:53:4f:f7:b2:5a:87:ae:2f:c8:ae:a8:d3:e8:
                    7f:59:c6:4d:b6:3b:bf:98:8a:a7:82:d4:29:fa:a4:
                    e4:b3:a2:20:e1:1a:42:cb:ea:9a:74:d8:9f:5c:8e:
                    b3:d0:a9:91:58:c1:1b:aa:ae:1b:bb:a5:60:dc:20:
                    cf:06:7f:55:e5:9b:b6:e2:58:04:22:3e:9b:18:1d:
                    7d:e5:73:6e:57:2a:ca:98:49:03:16:9e:55:94:49:
                    b0:87:29:39:6d:9f:40:f3:93:0e:5f:41:74:8a:e1:
                    4c:27:a4:fe:a7:0f:bc:9b:fe:71:c0:09:64:4b:20:
                    e7:47:fc:05:07:d0:f1:31:72:92:d3:37:cf:65:55:
                    49:21:20:0e:8b:21:24:a5:6a:a2:71:fc:0b:02:ef:
                    23:fb:f7:61:e3:75:7b:6a:f3:5d:8e:c1:e9:a3:9d:
                    59:c2:3c:cb:63:fc:4c:fb:96:82:9e:09:bd:9e:6e:
                    58:1b:3a:7a:2e:b9:a9:c7:f2:c4:15:41:8a:d6:93:
                    f1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BC:EC:EC:F8:DA:2A:96:BA:FD:78:FA:25:29:25:56:61:16:5E:9D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/55a6c05c-c561-4be5-ade0-8886255660fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:98:f4:6e:5a:90:b8:e5:10:a6:b8:37:fe:be:d1:f4:24:8a:
         fd:0d:e9:74:67:89:8e:0a:39:93:dc:e1:16:e1:cb:f1:fd:3d:
         10:bf:65:dd:11:b4:78:15:57:ee:2d:72:ee:31:ef:2b:e9:3e:
         d3:44:12:73:af:b1:5f:91:6e:a3:e5:64:37:48:2b:b4:2a:28:
         9a:d8:5e:df:4e:4a:77:32:e6:42:57:29:66:ef:d6:46:a4:c9:
         e4:02:b3:c7:3b:d0:a4:28:df:da:16:67:e1:c7:22:b6:88:b1:
         66:44:df:a5:4b:53:06:74:20:2f:f7:e3:7b:b7:7d:91:e2:ee:
         b6:8c:15:ca:4d:4f:55:c9:78:3d:e0:2c:5c:23:0b:e3:97:01:
         73:a6:fb:10:e3:e1:8a:5c:e7:5e:c0:76:37:ed:36:ab:99:60:
         15:03:ce:09:4a:03:7a:3e:e0:1a:0a:db:d4:34:c1:41:29:e8:
         86:3e:1e:7f:55:fa:44:87:8e:f3:14:75:d3:ce:cf:e2:a7:fb:
         c5:1e:78:c5:73:88:9e:48:e5:6a:91:51:55:36:0e:1c:68:ae:
         3e:31:69:5f:35:fd:9a:af:a2:73:6e:9b:be:04:51:c1:22:b9:
         e1:ad:fa:96:5f:cb:cd:38:76:36:ac:62:e5:69:7f:f3:b6:5a:
         db:ab:63:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----