Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6a7049bd-a84f-473d-92e3-8a865c953cd1.roa
File:                     6a7049bd-a84f-473d-92e3-8a865c953cd1.roa (raw, json)
Hash identifier:          bTPMe+YGV/XzgrW5lyykZjAJFeU0WFk1hhpkgKnjNKc=
Subject key identifier:   BE:56:60:0D:BC:F5:19:08:DC:66:AA:3F:05:19:B7:39:39:20:E2:F6
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       750B8C188A5E2CE7BE2D2442F9CC45F5C4F1984C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6a7049bd-a84f-473d-92e3-8a865c953cd1.roa
Signing time:             Tue 21 Mar 2023 00:00:00 +0000
ROA not before:           Tue 21 Mar 2023 00:00:00 +0000
ROA not after:            Fri 24 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0b:8c:18:8a:5e:2c:e7:be:2d:24:42:f9:cc:45:f5:c4:f1:98:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 21 00:00:00 2023 GMT
            Not After : Mar 24 23:59:59 2023 GMT
        Subject: serialNumber=8355313b43b937f51d2015727e9b03bc65d37a5ba99fd924a983db33d77f7456, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3f:f5:da:20:ae:5a:8e:c3:c1:33:40:9c:b4:
                    ee:f0:16:0d:94:ef:cc:8f:15:cf:a5:e2:36:18:34:
                    13:e1:8e:a2:ac:be:9e:f2:43:f7:f2:5c:7c:b0:f2:
                    ed:55:59:3e:4b:22:ba:ae:84:47:4d:01:2d:a3:bc:
                    e0:d9:69:12:a0:9a:7b:33:fe:7f:1e:04:c2:d8:44:
                    d6:39:31:13:33:0f:f7:5c:e0:14:ae:f6:1d:c9:19:
                    7d:f5:95:6d:44:27:d4:38:f2:7c:80:c1:b5:01:51:
                    c1:38:de:c2:a8:9d:fe:e4:bd:0f:8a:34:49:be:95:
                    8a:1a:d6:7c:37:37:42:33:3c:67:47:bb:9d:31:90:
                    e5:5d:5d:1f:96:85:cb:d2:dd:0e:bb:6b:99:df:8b:
                    c9:04:62:11:e8:af:55:4d:32:98:2b:18:2c:40:b5:
                    49:4f:ca:40:6f:73:fc:d9:bb:2a:3b:05:90:2f:c1:
                    85:6e:62:e7:5a:e6:38:d5:be:ef:eb:23:df:57:79:
                    61:51:54:0b:6f:df:19:aa:bf:92:54:6c:f7:37:43:
                    b2:e4:44:b8:94:33:49:10:81:22:52:be:1b:e7:5b:
                    8c:37:0f:a2:97:a7:c0:9e:1d:36:ec:8d:6d:ee:ad:
                    b6:a0:c0:14:80:e6:f0:76:6e:86:91:96:41:5e:54:
                    36:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:56:60:0D:BC:F5:19:08:DC:66:AA:3F:05:19:B7:39:39:20:E2:F6
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6a7049bd-a84f-473d-92e3-8a865c953cd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:93:6c:cf:8f:d8:18:28:4f:da:e0:20:69:c0:70:93:06:44:
         29:24:10:12:11:e1:f6:4b:09:7f:90:12:ec:55:86:35:bd:7e:
         18:3c:26:71:ca:7e:fa:dc:96:12:e3:85:fc:9a:3a:be:4f:a3:
         59:3d:f4:de:17:b6:8d:0b:a6:81:ca:a7:82:6f:8f:88:34:17:
         77:bf:fd:2b:6d:09:f9:d5:b5:ff:20:70:73:bb:be:b6:64:8e:
         a9:a2:06:e3:77:89:ae:4a:03:a3:13:20:f3:3e:f2:13:f8:48:
         1a:4b:46:c6:17:c5:58:e8:5d:e1:40:01:08:6e:97:ca:df:b0:
         b0:99:9e:1f:67:39:8d:9a:22:2c:ea:e2:ad:ed:dc:6f:ac:ec:
         87:84:10:9d:15:4a:87:8b:2b:65:59:53:70:37:8b:c6:31:18:
         1c:45:ba:39:90:03:18:f1:36:47:2d:85:9f:51:9f:94:3e:bc:
         8a:29:fb:03:33:4b:b9:f7:4e:8a:56:c3:b5:66:98:c0:ec:e0:
         1e:8d:c3:02:fa:eb:b2:5f:c2:2e:a9:65:02:8d:f1:b1:f5:c4:
         d5:60:bb:02:95:60:7e:09:04:ae:d0:96:c5:dd:92:27:c3:b1:
         d2:ac:27:b3:83:77:a8:1c:e1:c4:07:bb:3a:8e:5b:14:22:a6:
         f0:ed:78:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----