Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/58d23fdc-c808-46d7-ae66-e528fb1b7cba.roa
File:                     58d23fdc-c808-46d7-ae66-e528fb1b7cba.roa (raw, json)
Hash identifier:          zaPSZol929XVR04BEcdoVl7hnsSHA1ROhh/6qNrQkEM=
Subject key identifier:   94:C1:B7:55:CA:67:6E:7C:BB:53:50:AB:CC:14:9F:17:00:BF:2E:74
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       387A7819376D24AB641E0686D4E656B30E5CB087
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/58d23fdc-c808-46d7-ae66-e528fb1b7cba.roa
Signing time:             Thu 24 Nov 2022 00:00:00 +0000
ROA not before:           Thu 24 Nov 2022 00:00:00 +0000
ROA not after:            Sun 27 Nov 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7a:78:19:37:6d:24:ab:64:1e:06:86:d4:e6:56:b3:0e:5c:b0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Nov 24 00:00:00 2022 GMT
            Not After : Nov 27 23:59:59 2022 GMT
        Subject: serialNumber=382c143fc10973530298955becd00098ce95efe47f4cdb4c191686b94b930e2f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:62:df:2b:45:f4:5b:66:78:99:5a:3a:bc:cd:
                    dd:92:ef:76:78:6f:51:a5:f6:70:1f:29:d5:0f:7f:
                    ce:0b:cb:ae:29:45:da:87:4d:bf:97:b1:91:c8:1b:
                    7a:ae:75:51:e4:3c:60:7b:cb:d6:7a:12:da:75:a5:
                    e7:4e:6c:7e:75:7e:bd:2c:99:62:9a:b3:5a:87:ef:
                    e2:bc:5f:31:70:37:ac:35:ff:da:50:db:7e:fc:d5:
                    47:be:fa:90:bb:6f:ff:9c:07:3b:73:ad:0b:a1:42:
                    06:33:f1:79:88:d5:e1:eb:b5:c7:b0:bc:de:55:eb:
                    91:be:33:fb:47:32:3f:b0:ca:3b:f8:10:09:5f:9a:
                    ae:58:6d:8c:22:3b:54:6f:a5:c8:50:d4:7f:58:f4:
                    fa:80:7f:56:fa:d2:5c:6b:fd:f9:d7:05:d4:97:7a:
                    b3:e2:d5:93:a6:d7:65:99:98:c9:33:5a:58:5d:1a:
                    6d:ad:59:2b:f5:cc:6a:53:7f:6a:d0:93:f8:b4:6b:
                    36:20:21:37:0c:2e:fb:56:1f:8c:92:90:09:73:83:
                    d6:7d:0d:e8:1d:ea:5c:a5:a1:5f:5f:bd:8f:7d:aa:
                    63:d7:f5:1a:fe:b1:27:2e:5f:bf:a1:20:26:5f:0b:
                    26:aa:94:3f:1c:8b:1b:10:c6:c8:e3:51:5a:7e:d3:
                    e7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C1:B7:55:CA:67:6E:7C:BB:53:50:AB:CC:14:9F:17:00:BF:2E:74
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/58d23fdc-c808-46d7-ae66-e528fb1b7cba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:15:8a:d1:56:7a:79:d2:93:ab:0f:42:b8:b2:90:8c:e0:a3:
         50:86:b5:db:a7:df:90:b1:74:61:45:88:60:1a:21:9b:bb:10:
         68:b4:2c:94:a2:3d:44:f9:8e:ef:aa:2a:c4:10:2d:81:72:9a:
         a1:19:1e:89:dd:05:90:ad:89:e6:06:7d:d6:03:d8:ef:f2:cd:
         2e:21:42:e2:29:34:18:b3:45:2e:ac:94:8b:fd:fa:e0:72:25:
         07:46:fc:77:64:ec:2b:40:57:23:71:5f:92:8b:fd:62:e3:e9:
         8e:f2:5d:2a:27:d6:96:9d:74:75:cd:86:af:a9:12:17:8f:66:
         ce:f4:75:50:34:27:49:58:6a:7f:fe:a3:e0:90:27:c0:49:14:
         7e:9a:ea:f5:b3:1d:ce:ee:93:03:c0:2a:74:89:eb:25:30:be:
         52:b2:bd:d7:76:61:02:0c:50:f9:20:77:1f:9b:95:43:95:fe:
         b7:69:87:9f:30:b1:34:97:57:2e:31:c2:98:84:3b:4e:ed:f6:
         cc:4f:c9:3e:8e:0a:a3:16:7c:58:1a:95:53:86:b9:43:ca:d9:
         cd:15:9c:27:b7:ad:c7:3d:49:10:4e:87:9d:3c:29:15:fe:d1:
         00:d8:b5:ee:36:72:22:6d:96:01:18:fc:d0:64:f1:d2:34:82:
         71:21:fa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----