Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5d618673-0d5a-44d1-b3f8-79f6f83350b0.roa
File:                     5d618673-0d5a-44d1-b3f8-79f6f83350b0.roa (raw, json)
Hash identifier:          cUDflHer/kRRKdgLyYNf8LoO+3bqsrrZcTSGA3oJX9w=
Subject key identifier:   12:9B:D2:6B:C2:23:ED:7B:21:01:F2:9F:5B:B0:2E:3A:BF:56:DA:E2
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       304B4F5AD65FF887CAA684A6A9F38B287712CFDB
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5d618673-0d5a-44d1-b3f8-79f6f83350b0.roa
Signing time:             Wed 05 Apr 2023 00:00:00 +0000
ROA not before:           Wed 05 Apr 2023 00:00:00 +0000
ROA not after:            Sat 08 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4b:4f:5a:d6:5f:f8:87:ca:a6:84:a6:a9:f3:8b:28:77:12:cf:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  5 00:00:00 2023 GMT
            Not After : Apr  8 23:59:59 2023 GMT
        Subject: serialNumber=0831c4579c1e49939d3016d4387c4cf4f0601cc0af03b07d5b59742936653d14, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:91:8c:57:43:e9:e8:ac:1d:44:b1:19:d2:5b:
                    4e:05:4a:9a:9e:3d:7c:de:ca:ed:c6:02:8b:23:3b:
                    2b:3a:35:16:ed:62:28:a1:97:34:ef:9d:d1:4c:3f:
                    25:7a:aa:41:b6:33:2f:42:72:07:51:e0:7e:25:41:
                    c0:f7:ab:33:b6:9f:ad:aa:eb:db:03:dc:d9:3e:94:
                    77:8b:43:40:73:c6:1e:bc:84:ef:1d:7e:92:67:10:
                    c5:c4:52:5f:70:c1:80:5c:63:d5:17:c1:be:30:f8:
                    41:4f:87:85:1e:51:6d:2c:96:fb:e9:58:78:74:25:
                    95:96:da:e6:52:16:7c:fa:96:d7:98:39:d9:e5:8c:
                    2a:79:13:05:df:ce:ff:37:88:02:48:38:b7:fc:ac:
                    9b:26:91:25:bd:6a:49:47:6d:05:e1:5b:d3:a8:d5:
                    5b:3f:04:05:1d:62:4e:44:fc:0f:12:f9:bf:17:0b:
                    61:38:83:97:24:1f:99:72:97:df:bb:63:3d:05:0e:
                    63:27:00:4e:51:be:5f:ea:89:f5:83:e0:24:03:d0:
                    fe:3a:fd:9f:ab:d3:06:ad:92:26:02:d2:58:a0:f4:
                    89:b6:c1:54:68:f5:6c:b1:cb:11:87:5d:66:b9:5e:
                    85:7e:01:0e:a5:85:b7:d6:42:3a:57:d1:9e:9e:56:
                    11:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9B:D2:6B:C2:23:ED:7B:21:01:F2:9F:5B:B0:2E:3A:BF:56:DA:E2
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5d618673-0d5a-44d1-b3f8-79f6f83350b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:24:48:ac:4c:12:8a:e4:e4:3f:32:98:de:57:f4:2f:7d:ff:
         c8:a5:93:ef:15:53:2f:33:8c:f3:80:b8:c3:66:01:b9:36:56:
         87:7e:68:e2:d8:a0:cc:7b:f7:ae:73:46:96:ca:21:51:bc:6e:
         e3:ca:26:4d:37:36:d8:7d:7d:46:93:8f:22:d7:a2:49:b8:ba:
         44:e1:da:7e:e5:ca:b3:9e:3c:bd:49:fc:25:91:7f:9b:4f:bb:
         7b:67:21:54:38:82:46:db:69:08:4b:e7:51:40:ee:3d:22:a4:
         02:e0:4a:84:bd:66:3f:db:e5:86:a3:bd:a1:c2:18:6c:86:3b:
         65:4d:90:9e:a6:c4:53:b5:12:16:29:35:e9:53:7e:ee:97:6d:
         69:74:7d:20:06:81:50:7a:c8:24:0f:d7:28:ff:98:af:1f:26:
         22:8c:20:b0:0c:09:d8:ab:d9:ce:26:24:44:63:88:b6:a7:e6:
         8c:92:d9:f7:50:b0:31:a2:d3:83:e1:00:7d:85:26:77:c4:85:
         17:f0:0f:f7:20:e1:9b:96:8a:26:54:1b:ed:b7:51:03:2e:e2:
         03:23:5f:68:d5:ac:60:b3:44:5d:6d:39:5a:6a:f4:9c:25:83:
         57:64:d3:8e:3f:42:64:0e:7e:44:dc:cb:2e:5a:cc:f8:15:9c:
         d9:19:a7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----