Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6e764d95-a34a-4e09-849b-f6c325f99cc8.roa
File:                     6e764d95-a34a-4e09-849b-f6c325f99cc8.roa (raw, json)
Hash identifier:          HaFviIa2iscW/Qpjce8wpcWeAjLAwrroDxZ5XUF5mLQ=
Subject key identifier:   0E:B4:A3:A5:2C:BA:29:8B:B3:DD:1A:B3:CB:0F:6A:05:DD:10:C7:4F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       714F686E7E3D24BFD49DF9E35EFE840D8BBA2F77
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6e764d95-a34a-4e09-849b-f6c325f99cc8.roa
Signing time:             Fri 17 Feb 2023 00:00:00 +0000
ROA not before:           Fri 17 Feb 2023 00:00:00 +0000
ROA not after:            Mon 20 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4f:68:6e:7e:3d:24:bf:d4:9d:f9:e3:5e:fe:84:0d:8b:ba:2f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 17 00:00:00 2023 GMT
            Not After : Feb 20 23:59:59 2023 GMT
        Subject: serialNumber=af7d538e7f949df79b56e89715f6b64c6770a873b042c61ffd403897ee5d3c3d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7c:42:19:f8:62:98:4a:e6:d0:63:60:cc:48:
                    df:d7:82:3e:57:9b:c4:5b:82:f0:c7:19:29:6d:64:
                    5f:fb:ee:07:1c:c6:69:25:dc:d4:c4:75:e6:58:f4:
                    6e:e9:49:83:b7:e1:3c:6f:56:69:f9:f8:46:80:fb:
                    fa:8b:7e:f7:dc:26:dd:04:d0:fb:2e:26:aa:90:2d:
                    1a:cf:02:ac:a1:b9:3b:f3:37:a4:fe:34:8c:d0:39:
                    70:a9:ef:1d:0d:1e:57:7a:f3:44:91:f2:ba:53:78:
                    29:90:11:38:86:94:99:cb:5d:35:70:d7:0c:3b:51:
                    6e:e4:cb:16:02:7d:fd:48:06:70:06:fc:12:09:e8:
                    5b:d2:86:4f:18:89:f6:a5:55:e9:8f:80:5f:8d:0c:
                    46:98:97:a5:35:ad:9e:74:6a:e6:49:bb:f3:e5:7a:
                    28:7e:c1:72:db:30:e2:b0:89:32:4b:78:1f:36:dc:
                    12:9f:cd:b5:fa:58:9f:be:72:15:56:2c:89:ba:03:
                    b2:f1:3d:90:79:e4:1c:fc:73:6e:58:95:54:ca:87:
                    df:fc:7d:47:06:59:a5:92:59:0a:4b:7e:47:e0:69:
                    6b:6e:8e:6b:43:7a:04:40:4f:68:6c:b2:57:1e:ec:
                    4a:1d:4d:a6:a1:c4:2e:f3:39:1f:15:4e:81:4f:36:
                    8b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B4:A3:A5:2C:BA:29:8B:B3:DD:1A:B3:CB:0F:6A:05:DD:10:C7:4F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6e764d95-a34a-4e09-849b-f6c325f99cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:56:5b:02:dd:5e:9c:0a:a8:e3:45:2a:59:67:17:90:c0:25:
         17:a9:f2:e1:83:08:94:3b:a3:86:56:85:fc:b3:82:09:1f:68:
         10:e6:81:45:86:84:6a:5e:53:00:65:69:3b:ad:e8:26:09:92:
         3c:01:5b:be:12:3c:cb:0c:96:35:87:a3:23:bd:70:0d:97:44:
         96:d2:ff:4b:b3:45:7c:49:c1:11:e0:21:07:c6:6d:45:62:d3:
         21:69:54:6c:b2:59:64:9a:ba:57:a2:33:0e:25:7a:f9:a5:c5:
         2f:74:a6:78:2a:ae:bd:1a:df:48:6a:fa:19:ad:31:58:0d:1f:
         f6:6a:5f:5d:32:f9:47:b7:04:49:b2:ef:87:39:43:f6:d9:e1:
         60:09:95:ca:9f:99:38:f6:6e:21:22:c0:5e:2a:d8:27:d4:99:
         9b:90:7c:ee:6c:c5:d4:ae:c3:e3:29:08:98:69:78:a4:10:f7:
         fc:45:9e:d8:1e:41:92:bf:45:61:66:9a:14:d1:f8:e8:6d:11:
         56:0e:8d:8d:58:06:ac:e4:2b:76:e2:42:e1:43:dd:e0:8a:91:
         d3:74:48:57:4d:7b:53:47:f3:1e:bf:0d:58:39:63:60:cb:65:
         40:09:37:7a:dc:4c:1b:da:80:2f:28:ce:9f:ea:95:a1:c5:5b:
         61:f0:a7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----