Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6523b41d-d8e4-4619-940e-78de455cc3d0.roa
File:                     6523b41d-d8e4-4619-940e-78de455cc3d0.roa (raw, json)
Hash identifier:          I4dwdm1iGyE2NXuNANZMp0RNjN3KbZ9Z4B0bMPAAs3c=
Subject key identifier:   39:01:D8:B1:28:F1:3C:29:41:2B:F1:8F:26:CC:E4:F8:BC:8A:0E:55
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       033E78E22747838F87C164C16EBDB3A18FBC14C6
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6523b41d-d8e4-4619-940e-78de455cc3d0.roa
Signing time:             Sat 25 Feb 2023 00:00:00 +0000
ROA not before:           Sat 25 Feb 2023 00:00:00 +0000
ROA not after:            Tue 28 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3e:78:e2:27:47:83:8f:87:c1:64:c1:6e:bd:b3:a1:8f:bc:14:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 25 00:00:00 2023 GMT
            Not After : Feb 28 23:59:59 2023 GMT
        Subject: serialNumber=99147cca453ad07bc16c180064e848c37370b22f767a51aaa337db68d7aef738, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e4:77:ea:ab:25:49:a0:90:f5:05:32:ff:85:
                    47:37:50:75:f3:47:2b:55:74:4f:10:87:d5:f4:f7:
                    79:99:1a:5d:4b:7d:80:d6:8d:af:2e:76:df:a6:5e:
                    9d:c8:5e:63:d3:4e:db:8a:c1:8c:f4:48:c1:45:c3:
                    01:50:8d:3f:75:89:de:a9:e7:7d:b0:90:8e:72:3c:
                    80:7b:3e:8c:ab:02:bc:30:66:ba:96:7e:45:15:b1:
                    a7:ed:b0:6a:f5:59:53:f3:e5:e6:1b:34:5f:ca:8b:
                    19:c8:5c:f2:43:3e:4d:2f:22:24:b5:58:52:bc:b3:
                    60:42:33:97:5c:65:1a:d4:d5:52:b0:38:7b:d1:5e:
                    7f:13:ec:bd:7d:8a:44:7e:56:b8:a0:a2:c6:bd:ee:
                    8b:d9:35:80:76:e0:20:0f:ab:ea:42:83:65:e1:a5:
                    62:b7:b9:66:14:c0:23:11:cf:50:5b:f8:cb:f6:1f:
                    78:d7:f1:26:53:b1:98:b7:43:5a:74:a9:02:a6:0f:
                    d9:cd:f7:e6:7a:2a:81:e6:31:4c:6c:3f:a2:dc:2a:
                    94:88:0b:44:11:6c:94:71:8a:57:1e:38:fa:b2:e7:
                    7b:e7:10:bc:1b:67:2a:0e:1e:36:20:83:56:08:07:
                    09:39:c5:de:c5:e2:2f:ee:23:f7:3c:09:ff:e6:84:
                    7d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:01:D8:B1:28:F1:3C:29:41:2B:F1:8F:26:CC:E4:F8:BC:8A:0E:55
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6523b41d-d8e4-4619-940e-78de455cc3d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:73:71:05:3f:d2:ad:8d:43:ca:5c:15:fc:c3:22:57:46:04:
         d5:9d:72:13:7f:f5:50:36:72:da:1e:fa:85:1f:3f:03:31:63:
         5a:1b:ca:ec:27:99:80:b7:b1:cb:20:ca:9e:08:05:c7:4f:d0:
         62:18:f5:b1:17:39:09:7a:ea:89:6c:21:bb:f3:69:2e:fc:47:
         c9:0b:34:58:f7:cd:9e:f4:d4:f7:0a:62:9d:1f:a8:fe:41:f1:
         1e:be:4c:3e:bb:70:d5:f4:3b:8c:20:10:83:d8:db:0b:2c:f3:
         75:8d:0d:7f:da:2f:90:d0:40:30:6b:ff:41:79:ed:ba:fb:53:
         fe:6f:5e:6c:15:dc:a5:a5:5e:18:8d:97:1a:b4:b0:42:48:ef:
         10:bd:7c:48:3c:02:43:c3:31:de:a7:90:d6:c3:50:de:a8:8f:
         ec:3e:96:10:91:a6:83:0d:ba:f9:a9:67:a5:27:aa:59:13:81:
         7e:da:25:e8:21:63:63:e4:29:ef:21:f6:64:89:5c:53:36:3f:
         f9:f7:04:a5:e0:3c:e4:63:57:b9:58:ea:46:5d:71:62:3c:63:
         fb:3e:36:38:14:3c:d1:78:8b:f9:4e:f1:54:ec:97:f2:99:19:
         14:6b:55:9c:f3:ab:ee:01:39:26:c4:60:4c:32:40:fc:01:35:
         88:de:34:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----