Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6a8e146c-e6ca-4081-a040-4bf57da40b38.roa
File:                     6a8e146c-e6ca-4081-a040-4bf57da40b38.roa (raw, json)
Hash identifier:          PTzZfv3rdy3fwUIv9Zxwb9TFVBNFSjpOEu/I6AzjHOg=
Subject key identifier:   A2:F1:B1:CF:66:4D:D8:00:51:C5:16:F2:39:2B:72:4C:DF:3D:1B:7B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4B4B69EA0FE9D514765EB91C347EBE09F8B32646
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6a8e146c-e6ca-4081-a040-4bf57da40b38.roa
Signing time:             Sat 20 May 2023 00:00:00 +0000
ROA not before:           Sat 20 May 2023 00:00:00 +0000
ROA not after:            Tue 23 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4b:69:ea:0f:e9:d5:14:76:5e:b9:1c:34:7e:be:09:f8:b3:26:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 20 00:00:00 2023 GMT
            Not After : May 23 23:59:59 2023 GMT
        Subject: serialNumber=6b74fa2b97977103b8e6cb1cf58ac68912b87eb132145c5d0edfe10e07cb251b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:74:ba:98:3f:4b:3e:54:3a:f7:8a:02:fe:de:
                    f5:0b:11:3a:0b:4e:d4:d7:2d:95:4d:e2:84:0a:0f:
                    1d:68:b0:94:45:75:92:6f:a3:0f:93:87:94:92:2c:
                    b3:14:6f:39:b8:fb:5d:31:5b:6e:dc:11:60:0e:9b:
                    66:95:49:cf:31:ba:ed:77:74:16:a3:7b:a2:7c:cd:
                    68:06:f6:29:f3:c2:28:dd:29:c6:ac:de:27:0b:d3:
                    23:44:93:13:03:3e:b1:f4:be:c6:56:72:58:83:da:
                    97:ff:d9:d5:50:31:dd:f1:ea:04:cf:97:47:5f:fc:
                    8f:f1:9a:92:8b:28:1a:36:94:0c:e7:df:89:38:30:
                    a7:9b:51:1d:c9:45:ac:20:ad:18:c0:e6:08:00:0d:
                    55:ee:e1:af:01:89:5c:e3:ce:75:d6:4c:ab:cc:cd:
                    d5:f1:bc:85:22:02:64:62:41:6c:54:e3:f0:29:1a:
                    ff:83:2c:23:9e:0c:db:7a:ec:f8:0b:a5:4e:39:fa:
                    df:32:ae:c6:ea:f5:06:2f:d4:4c:48:84:30:0b:b3:
                    29:2b:2e:d0:32:6d:6d:6d:92:75:b0:2b:c2:37:a8:
                    58:63:d4:4a:39:a0:b6:2f:7c:e3:df:c4:95:3e:ee:
                    59:f4:d5:16:06:99:f7:07:76:1e:ef:b4:1a:bf:b9:
                    aa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F1:B1:CF:66:4D:D8:00:51:C5:16:F2:39:2B:72:4C:DF:3D:1B:7B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6a8e146c-e6ca-4081-a040-4bf57da40b38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:eb:8d:44:77:a7:e9:8e:5b:96:d3:3a:c4:35:56:45:99:c3:
         3f:43:e7:e1:7d:35:42:90:39:f4:1c:d2:e4:60:d4:29:69:e4:
         84:98:fb:7a:6d:f4:9c:3b:54:ba:55:36:12:12:88:ed:38:55:
         f5:2d:1f:3d:1a:23:df:2f:4d:58:e3:37:43:29:c8:32:40:4a:
         da:93:c8:0f:cd:6b:46:5a:5a:ec:1b:bc:25:33:c2:ce:78:67:
         58:58:94:b0:89:e5:47:cc:12:ee:4b:ed:54:1e:b0:98:ab:82:
         83:de:b2:28:c8:0c:47:f9:e8:71:76:ba:00:6f:7c:9a:f9:7a:
         ce:db:ad:9a:a9:d7:80:63:a9:10:fe:61:3b:7c:f3:2c:05:35:
         7f:d1:67:74:e3:6b:1e:ac:6c:5c:94:94:c1:64:5a:aa:a0:22:
         c0:3d:a2:ad:1e:f5:48:bc:08:a4:0d:2f:1f:62:90:18:af:3c:
         41:0a:54:b6:a1:ca:8b:46:3c:5a:58:fa:28:dc:0a:f5:7e:5f:
         65:eb:7e:ce:96:e5:f7:ec:88:a6:66:37:eb:e3:c2:bd:75:bd:
         4a:4a:76:08:39:37:59:97:dc:d6:69:5c:2b:76:c0:2c:b0:d2:
         ed:0e:8d:e6:98:93:af:7d:4f:fc:f0:dd:a3:6d:63:01:9f:ff:
         fd:be:11:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----