Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/70e1ce48-b7cd-486e-ae9d-a1dea2b7810b.roa
File:                     70e1ce48-b7cd-486e-ae9d-a1dea2b7810b.roa (raw, json)
Hash identifier:          LP8RqnGn4LgPTlm66mlxvhjopIXbJsueTxsgZZs/wZs=
Subject key identifier:   C9:6B:17:04:FB:58:C9:08:73:A7:05:FF:C5:96:E9:D9:7C:76:94:61
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       70477C485174CAE40164DE246AC88C71DF90A7CC
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/70e1ce48-b7cd-486e-ae9d-a1dea2b7810b.roa
Signing time:             Sat 11 Feb 2023 00:00:00 +0000
ROA not before:           Sat 11 Feb 2023 00:00:00 +0000
ROA not after:            Tue 14 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:47:7c:48:51:74:ca:e4:01:64:de:24:6a:c8:8c:71:df:90:a7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 11 00:00:00 2023 GMT
            Not After : Feb 14 23:59:59 2023 GMT
        Subject: serialNumber=afd2cf4a4b38bfc1f0d7b9ba9541503e58494a8d1d0aa8c09e8bba9e2bafd5f2, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:92:4a:c6:9b:26:68:8c:b5:2d:fe:5b:50:
                    06:64:f8:ea:fb:06:44:f3:a0:e5:2f:30:02:f5:d3:
                    43:62:01:db:bb:47:e2:44:8e:6c:99:65:f6:74:ce:
                    ae:b6:84:10:e1:cf:9b:6b:c4:66:66:cb:4b:fe:f1:
                    eb:a5:ee:53:2a:39:2d:d3:d1:4c:52:14:04:29:f7:
                    30:f1:da:b7:1b:ac:95:ad:46:fe:c7:89:99:57:14:
                    b9:bf:98:9c:4e:2e:2a:b7:b2:56:9f:38:9c:91:0e:
                    07:73:19:a4:20:9a:5c:9f:48:6a:78:86:53:90:4b:
                    b4:b8:f2:a1:59:be:ba:72:82:2c:6a:da:97:5e:e7:
                    a5:33:5e:21:60:ff:21:9e:11:c5:17:01:af:b8:af:
                    7b:c5:35:81:6f:1d:d7:35:ef:e3:29:58:08:37:d7:
                    65:a3:66:c7:f9:56:d6:7a:c2:c8:10:1e:fe:10:a1:
                    4c:71:49:56:f0:5a:83:52:96:cc:1c:9e:03:8a:1d:
                    b9:40:62:59:c5:2c:ae:a2:04:19:2e:44:0c:6c:97:
                    e3:fa:bd:57:43:f2:80:93:54:97:1c:96:57:8e:cb:
                    45:f3:b0:ee:dd:01:e4:aa:fd:1b:4c:4c:f8:e6:c2:
                    05:62:8c:4c:df:f7:83:1e:15:d9:e0:f2:17:90:ce:
                    93:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6B:17:04:FB:58:C9:08:73:A7:05:FF:C5:96:E9:D9:7C:76:94:61
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/70e1ce48-b7cd-486e-ae9d-a1dea2b7810b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:3a:16:c9:b2:bc:d2:45:0c:ec:99:92:24:0a:7f:7b:6e:a6:
         15:b9:2f:51:9d:ba:e2:cb:71:66:fb:8f:f7:50:32:a3:d2:55:
         51:ab:dd:95:45:e0:ec:dc:4a:54:79:a2:f8:21:12:aa:88:e4:
         88:1f:0b:75:fd:ac:ca:c1:66:71:4d:74:ab:6e:e6:9f:30:34:
         03:65:90:f9:62:8e:bc:fe:0c:11:09:aa:af:43:af:52:07:ee:
         16:34:b5:46:5e:39:ae:b6:75:d0:54:74:2d:48:4d:23:de:bb:
         b9:d1:c2:aa:63:00:ae:6a:29:f9:2b:fc:3a:e0:ca:f6:c4:57:
         8c:09:ee:4d:f4:10:68:20:77:17:69:b5:16:65:d5:e3:6a:67:
         a0:8b:7e:7e:6c:57:41:d2:5e:a3:c3:a4:70:b4:24:a3:78:7a:
         25:c8:06:bd:1e:42:50:e4:a6:43:06:4f:3f:2b:96:0c:f6:e6:
         38:ce:d5:ee:98:bc:c6:fc:a6:14:63:6a:a8:42:63:da:fd:c6:
         90:61:a2:27:e8:b7:90:c6:80:50:3b:f4:31:37:3c:8e:16:4e:
         d2:58:be:97:df:76:d0:3c:cd:94:30:58:28:f4:8d:ab:2c:09:
         53:f2:f3:0b:fd:d1:7b:91:23:82:29:cf:2c:f0:bf:91:41:b8:
         9e:3d:36:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----