Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5e29c892-119e-4aad-bb9e-a841f8b36859.roa
File:                     5e29c892-119e-4aad-bb9e-a841f8b36859.roa (raw, json)
Hash identifier:          o+x/NHxe5FgTa8oYjJ/XZmhnrqkQErMAucbbf6SEzfg=
Subject key identifier:   20:EE:4A:26:0A:C9:0E:CC:5F:D6:C1:43:1B:8A:5C:60:92:D0:BB:4C
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       714C03E15F61691AFE66522CA53D3EFC92A9D851
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5e29c892-119e-4aad-bb9e-a841f8b36859.roa
Signing time:             Tue 21 Mar 2023 00:00:00 +0000
ROA not before:           Tue 21 Mar 2023 00:00:00 +0000
ROA not after:            Fri 24 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4c:03:e1:5f:61:69:1a:fe:66:52:2c:a5:3d:3e:fc:92:a9:d8:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 21 00:00:00 2023 GMT
            Not After : Mar 24 23:59:59 2023 GMT
        Subject: serialNumber=734a421ebd4807c7d86805cb73712a774153f9a0110bce66afdebc4fdc02a100, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:47:0d:2c:0e:7f:74:a9:c3:e4:ab:ed:1e:
                    2c:bf:b7:43:1f:81:3e:c0:8b:2a:ed:62:34:e8:a7:
                    39:58:f7:ac:21:e7:40:cb:2f:4e:47:7d:1f:03:14:
                    7c:42:cd:1b:33:1e:6f:18:83:fa:79:77:1d:3b:fc:
                    d1:c2:7f:ae:c5:28:99:a5:4c:cb:9f:8b:d0:d2:2c:
                    74:7d:3a:15:e6:96:9e:d0:6d:6e:3b:28:bc:e7:59:
                    52:26:42:79:65:18:43:41:46:97:6b:36:5a:2c:9c:
                    04:da:92:59:61:dc:9b:4b:35:10:4d:7f:88:18:5e:
                    a6:b1:e9:00:a1:e8:eb:7a:49:86:b2:5b:0a:60:3e:
                    74:9e:33:6f:18:bf:32:41:a6:df:dd:36:fc:eb:d1:
                    1e:19:99:d2:cb:ef:90:30:18:c3:c2:6c:0f:89:8b:
                    f5:e9:3b:b3:d9:d8:e6:94:a8:3b:be:7d:26:ba:1c:
                    bd:a3:20:88:26:23:3d:bb:2d:ed:a3:5b:c2:ac:da:
                    61:9b:8a:a5:38:67:2e:d6:e1:cc:77:15:28:1b:da:
                    c7:d7:64:1a:21:0d:d6:60:d7:d0:24:86:73:df:12:
                    f3:ab:70:e4:c8:0c:4e:62:87:75:c6:3b:3e:23:2a:
                    9d:20:84:b3:76:03:2a:fa:23:8b:4b:83:9f:3d:6f:
                    82:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EE:4A:26:0A:C9:0E:CC:5F:D6:C1:43:1B:8A:5C:60:92:D0:BB:4C
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5e29c892-119e-4aad-bb9e-a841f8b36859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:99:cf:45:07:e4:ed:a2:8c:4c:97:ec:5e:81:2d:94:26:6c:
         b6:1f:eb:26:0c:50:9c:5f:7f:c0:2d:9f:14:ba:2f:be:26:2e:
         89:fa:c6:1b:21:25:73:bc:83:86:7c:aa:14:3e:f9:6d:b3:d1:
         30:f5:ab:15:e2:32:4b:96:74:67:f4:d0:35:0f:77:5c:ec:f7:
         31:cf:83:7a:8a:0f:72:9d:75:a2:52:b6:ee:37:e4:b0:d3:49:
         5c:96:52:d6:a0:c9:5e:0a:39:f8:aa:f3:0b:1f:5c:84:3f:8b:
         48:85:15:de:d1:22:77:d6:bd:d2:2c:ec:45:02:73:74:63:06:
         7b:81:85:e3:2e:cc:ed:fa:e9:97:98:51:ea:a2:ac:87:6d:cb:
         d2:f6:86:67:b3:b5:37:f2:bc:91:86:7c:8e:95:c6:45:f4:ca:
         97:26:50:37:d6:71:5c:0d:ec:45:fa:f9:17:4a:dd:d6:48:22:
         d5:e5:cb:9b:e5:39:9f:a3:83:5d:75:69:c0:0a:b5:a4:4c:1d:
         d5:2a:42:7b:f4:e5:62:1f:29:b3:e3:c8:fc:3a:11:0b:7b:9c:
         36:27:d0:f4:40:d9:7f:2f:0e:5b:8c:88:5d:0f:87:13:0f:8c:
         fd:ed:51:d5:db:87:c7:ed:cd:ec:10:e4:97:6e:9a:02:61:5f:
         55:c1:7c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----