Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5d0cf6eb-162d-4cfe-96f8-3a4a1f4521ef.roa
File:                     5d0cf6eb-162d-4cfe-96f8-3a4a1f4521ef.roa (raw, json)
Hash identifier:          EPl4QpDic73SfCSX4ZhDoa8Vcy8+XnGTRm/8iPcjKuM=
Subject key identifier:   56:A5:56:89:22:F4:7A:80:1B:B1:4C:49:76:2E:36:1D:3B:73:EA:39
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       71D70E0EA27A215D21B95F5F4C3F364A7100CD1E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5d0cf6eb-162d-4cfe-96f8-3a4a1f4521ef.roa
Signing time:             Tue 21 Mar 2023 00:00:00 +0000
ROA not before:           Tue 21 Mar 2023 00:00:00 +0000
ROA not after:            Fri 24 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d7:0e:0e:a2:7a:21:5d:21:b9:5f:5f:4c:3f:36:4a:71:00:cd:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 21 00:00:00 2023 GMT
            Not After : Mar 24 23:59:59 2023 GMT
        Subject: serialNumber=006bd652e469d6f9258a68b62dc9ab30aaa8c7607a396d3e716081d52919ac2d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:31:a4:0f:58:41:0c:71:b9:0d:13:b9:ca:0b:
                    60:d9:07:32:f9:f1:8b:f5:b1:c6:a2:86:8b:28:a1:
                    90:90:b2:1b:2c:ec:13:a6:3d:0f:3e:01:34:46:e8:
                    e9:41:3c:fc:74:80:72:9a:a3:0d:bc:6b:35:c1:a8:
                    dd:15:ea:3b:a3:d4:1b:14:b0:ce:51:2f:5e:6b:58:
                    64:48:14:51:dc:37:2d:e5:21:c4:03:3d:92:91:d3:
                    94:cc:b2:9e:2a:7b:ac:2f:29:f6:00:56:9e:70:ae:
                    1e:9d:d2:e3:f1:26:d8:d9:2e:7c:42:6a:1c:9a:da:
                    36:1e:97:da:6f:b3:d8:bb:5b:61:b6:e1:82:da:93:
                    dd:e6:5d:2a:b5:cd:4d:5d:4b:82:04:3f:39:9d:b0:
                    cd:0d:28:81:64:6d:12:f2:65:43:3d:d0:f1:36:b1:
                    71:c2:6f:06:12:ed:c1:66:ed:54:c7:72:ec:cf:1e:
                    0c:cd:0f:df:13:01:45:fb:c6:df:a4:e7:0b:78:92:
                    b3:68:7b:82:05:60:2f:d8:4a:e8:ee:b6:2e:b7:4c:
                    86:04:7c:c5:7e:c6:cf:96:fa:93:2f:d3:98:f0:ba:
                    7f:e0:9b:67:7d:2f:29:29:ab:a7:4d:61:41:59:c0:
                    71:9c:11:86:5d:da:f3:51:6b:3c:f2:c4:de:ae:04:
                    f6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A5:56:89:22:F4:7A:80:1B:B1:4C:49:76:2E:36:1D:3B:73:EA:39
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5d0cf6eb-162d-4cfe-96f8-3a4a1f4521ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:94:29:84:44:96:95:df:53:ec:ce:05:57:1b:c5:01:fb:45:
         0c:11:c0:07:54:11:3c:bb:8b:fe:78:87:6a:b4:84:04:6b:88:
         8f:04:e7:35:72:bc:66:29:51:c2:ac:bc:ba:a7:00:b7:9d:bc:
         41:4e:4d:d5:80:5f:64:e0:61:28:33:83:ed:fc:50:ad:f2:bb:
         fb:11:8f:e5:3b:29:e0:ab:5b:6a:1a:12:10:45:66:6e:47:b4:
         7b:af:9f:fb:44:b9:31:3b:75:9a:82:09:eb:fb:90:69:f8:38:
         a2:82:c4:77:73:3f:74:f7:1d:29:e3:14:57:68:2d:fc:6e:cd:
         8b:65:98:ba:d9:6a:ee:47:25:92:f5:e9:2e:99:4d:f0:04:81:
         18:aa:3e:ae:10:86:33:5c:c2:f9:10:d2:3a:10:ef:c2:44:f9:
         2f:40:a6:7c:3f:00:8e:d8:45:d5:8a:45:94:70:cb:8e:c6:ed:
         a0:39:26:78:5a:39:c0:5e:2a:d6:52:12:8f:25:8f:c2:aa:88:
         bd:30:65:34:d6:35:d9:fa:b9:ad:4b:1b:22:09:26:9e:cf:a3:
         a4:d2:6b:20:b3:8d:14:62:65:a2:46:51:61:01:c6:04:a1:94:
         b9:35:80:a2:70:d1:6b:0c:3d:f2:2f:60:3c:b4:fa:5c:65:2d:
         9d:05:53:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----