Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6504a7f0-321e-4abf-962f-60e2bc27760e.roa
File:                     6504a7f0-321e-4abf-962f-60e2bc27760e.roa (raw, json)
Hash identifier:          qFhbwtpc1VmDHjYlpCMT0i82NMxjvefNFcjpd+llzUg=
Subject key identifier:   CB:6A:A9:5F:73:75:50:E5:E8:9D:42:EC:A7:55:E3:D0:DB:60:D4:C6
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1466EC7AABDE85C1FDD573DA082FE8CB3848206E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6504a7f0-321e-4abf-962f-60e2bc27760e.roa
Signing time:             Tue 16 May 2023 00:00:00 +0000
ROA not before:           Tue 16 May 2023 00:00:00 +0000
ROA not after:            Fri 19 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:66:ec:7a:ab:de:85:c1:fd:d5:73:da:08:2f:e8:cb:38:48:20:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 16 00:00:00 2023 GMT
            Not After : May 19 23:59:59 2023 GMT
        Subject: serialNumber=468f0be7e133818bb8823da6044f4e248eb3dffe6cff9ba239e15ebb5ad814a4, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:e5:81:e4:f6:cb:90:c2:f3:a7:b8:7e:71:
                    0e:3c:c9:23:67:9a:ce:18:24:64:5f:e1:35:78:33:
                    86:04:be:1c:f9:b5:b5:91:2a:2c:f4:76:13:e7:d7:
                    57:c0:11:4d:8d:e5:f7:7f:7a:25:38:5a:e5:5a:55:
                    45:d6:3d:4d:4b:0c:6d:16:5f:fb:44:dd:2b:d9:66:
                    8f:44:14:8b:85:25:88:0d:bc:c7:a9:d8:12:d3:1a:
                    2f:4b:78:54:fe:42:b6:c6:62:ca:4f:05:72:75:aa:
                    7a:89:de:0e:cc:5f:5f:7b:69:8f:9d:9b:34:84:b1:
                    e5:6a:96:0c:57:79:6b:9c:4f:24:ad:53:90:ce:9d:
                    b9:06:48:bf:e4:68:02:4f:d2:ba:66:f8:0a:b2:1b:
                    9d:fe:e6:8e:4f:35:71:d0:7a:a2:df:f3:e6:a4:92:
                    b4:37:ad:fa:65:12:05:7c:2c:cb:a5:a3:49:6c:af:
                    20:0a:32:0a:95:f9:90:49:4f:5f:f1:96:3b:3c:e4:
                    0a:ae:8a:2c:ef:81:25:75:e0:db:c3:9f:88:05:b8:
                    64:ef:91:83:f7:08:1d:9a:d4:d5:64:84:ab:b6:c7:
                    5c:43:de:57:8f:c0:23:5b:63:14:fe:17:94:a6:ef:
                    74:e0:b6:a6:1d:5b:c3:dc:a2:fa:50:ed:19:b8:a6:
                    d1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6A:A9:5F:73:75:50:E5:E8:9D:42:EC:A7:55:E3:D0:DB:60:D4:C6
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6504a7f0-321e-4abf-962f-60e2bc27760e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:bc:ae:81:af:39:e2:1a:85:64:22:30:b9:90:1e:11:7e:66:
         53:26:da:f4:d7:a4:4d:b0:7d:2d:c6:54:67:c7:cf:4c:3f:04:
         29:8b:cf:e0:d2:08:59:5e:58:e9:96:bf:5a:eb:fb:19:68:8c:
         00:e2:96:2e:77:9e:ec:90:c4:56:63:e0:91:19:56:90:bd:5a:
         5d:e4:35:b4:a5:cb:e7:de:04:7e:fd:41:b7:1b:64:9b:d8:a6:
         a9:18:2e:8e:03:23:5b:53:bf:35:2c:8a:9f:14:b1:38:ee:46:
         46:f3:07:a1:e2:f8:81:99:a2:28:fd:51:27:c7:f4:ee:72:ce:
         02:8c:f6:d7:89:79:2d:e9:dc:fb:e0:3e:88:df:9c:a9:fd:61:
         ba:8c:b1:55:15:c7:ff:24:b1:02:38:4c:4e:47:fc:f6:0f:ca:
         bc:0b:a8:a8:c9:5f:fb:06:0b:99:35:3d:c8:32:d7:4f:d0:1b:
         8d:cf:50:3e:d6:ed:15:cc:89:ba:3e:52:9b:21:5d:f5:ba:be:
         9a:7a:a7:84:e1:95:31:c8:a6:e1:87:ed:58:3f:c7:c0:80:65:
         c2:58:dd:bb:a6:f2:5c:92:5f:21:26:c1:58:d5:e7:06:42:26:
         cd:90:0b:14:e7:17:50:49:5b:b8:47:34:05:bd:a4:20:16:15:
         64:ea:cd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----