Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5e163e97-6ccb-4d68-bf2a-1413c2d1bb6b.roa
File:                     5e163e97-6ccb-4d68-bf2a-1413c2d1bb6b.roa (raw, json)
Hash identifier:          aNIJcW8a2IXHyfHwPw3hPdUQTkyHwg5bV3OlCO4ZRu0=
Subject key identifier:   D2:C5:9D:B6:EE:B0:FD:53:7C:7D:E5:2C:BF:02:29:1A:7C:39:9D:3B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       78ACF29F28F69A1327E127A70A74B811F5B50373
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5e163e97-6ccb-4d68-bf2a-1413c2d1bb6b.roa
Signing time:             Fri 10 Mar 2023 00:00:00 +0000
ROA not before:           Fri 10 Mar 2023 00:00:00 +0000
ROA not after:            Mon 13 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ac:f2:9f:28:f6:9a:13:27:e1:27:a7:0a:74:b8:11:f5:b5:03:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 10 00:00:00 2023 GMT
            Not After : Mar 13 23:59:59 2023 GMT
        Subject: serialNumber=25e18c32bfb8ebce395dcef78b6202f54ced24bfc40f356741d3207667d98737, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:e9:20:3d:55:49:48:98:1f:d7:01:bd:d9:
                    75:22:09:c3:02:0b:b7:5e:aa:a6:fa:e9:94:6d:a8:
                    be:c3:f4:89:d1:2d:df:48:c9:10:f0:4f:3f:96:e4:
                    21:ed:e3:95:39:18:4d:61:e4:25:03:6d:85:ac:91:
                    fd:b1:7f:fa:9d:d9:f5:dd:38:fc:70:10:d0:d4:18:
                    f2:4d:6d:18:e7:c9:9f:65:5a:de:f8:35:a1:46:1b:
                    de:9d:a0:52:6d:55:f9:88:86:71:63:a4:37:bd:12:
                    d0:09:85:17:66:23:41:e4:a4:4e:16:bf:8b:5c:bd:
                    68:a0:1e:36:ba:ac:de:6a:4d:09:d3:48:02:f8:48:
                    2b:ec:40:34:76:11:33:0d:47:cd:50:8a:3e:f4:2b:
                    ae:fa:76:4c:c8:1e:ec:d0:10:ff:84:15:15:17:c4:
                    70:f2:9e:fb:70:87:43:09:85:7e:c5:8a:39:55:00:
                    e6:01:c6:d2:43:8b:eb:fd:49:cc:23:00:37:aa:3f:
                    a6:ee:74:d8:7c:a3:b8:da:0a:2f:50:64:30:18:db:
                    a6:1c:00:8e:df:e7:2f:63:75:de:03:81:4c:0a:cd:
                    5d:9b:25:2c:b7:b7:ac:25:ac:23:d3:6b:47:a4:0a:
                    d9:95:7d:05:84:f7:6e:7e:1c:6e:9e:80:45:e8:86:
                    f3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C5:9D:B6:EE:B0:FD:53:7C:7D:E5:2C:BF:02:29:1A:7C:39:9D:3B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5e163e97-6ccb-4d68-bf2a-1413c2d1bb6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:56:fc:fb:f1:1f:ec:b6:60:86:95:25:61:1f:58:fc:71:d7:
         56:70:33:05:a5:58:60:01:0e:fd:03:56:de:a5:ae:b4:ac:91:
         02:e0:dd:c2:e5:66:cd:d5:20:c4:95:1b:55:97:29:0c:80:87:
         8c:ee:57:0d:e3:fb:47:73:8c:91:64:1c:76:60:95:80:ae:db:
         62:5a:a0:bd:32:7f:1c:dc:86:a5:59:59:f3:1c:a7:92:50:7c:
         1f:ab:c0:64:f1:ba:02:90:62:4e:43:4d:28:23:30:58:45:9c:
         f2:75:e9:53:64:9d:09:90:aa:6b:69:e0:f7:ee:e3:6d:5c:2f:
         8a:8e:74:fd:f2:4a:d8:55:83:29:03:83:ca:db:e8:93:bc:e6:
         d9:ed:1b:93:f6:a7:99:9e:e9:8e:17:01:24:39:58:34:49:68:
         d6:b0:e6:0b:f1:79:cb:7e:05:23:3b:99:df:9e:dc:85:76:ab:
         65:17:1a:75:d8:6c:10:c2:3c:4a:0c:45:83:65:96:2f:20:f0:
         61:86:be:c1:20:ec:7c:0f:06:04:d0:98:47:14:26:c3:56:26:
         0d:64:47:ec:3e:04:07:13:96:7a:e4:f4:78:5f:f5:24:1d:15:
         4b:d4:9c:cc:d7:2d:96:80:a8:32:52:32:58:c8:92:16:b8:d5:
         bd:4a:d5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----