Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7775be13-aacb-4bbf-8d7b-67688ef2a425.roa
File:                     7775be13-aacb-4bbf-8d7b-67688ef2a425.roa (raw, json)
Hash identifier:          /VN7RyLx8lyNY4u51M0WXQmTq+zqZxCpG8mNZcHlWBQ=
Subject key identifier:   B6:AB:76:19:77:A1:49:75:4B:36:2C:6C:BC:87:03:CA:66:A0:46:9F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       41D13A786ED48C6CCBDDB9BB86A3A687ACFD79C1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7775be13-aacb-4bbf-8d7b-67688ef2a425.roa
Signing time:             Mon 13 Feb 2023 00:00:00 +0000
ROA not before:           Mon 13 Feb 2023 00:00:00 +0000
ROA not after:            Thu 16 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d1:3a:78:6e:d4:8c:6c:cb:dd:b9:bb:86:a3:a6:87:ac:fd:79:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 13 00:00:00 2023 GMT
            Not After : Feb 16 23:59:59 2023 GMT
        Subject: serialNumber=07f79a3e851ac7cc7a91c831ca44e124958e85c1c64aa232aa204d211d25dca9, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:12:ec:39:cd:7c:a7:cc:d2:e1:f9:3c:59:0e:
                    9e:57:3e:0a:25:ff:15:ac:73:af:1d:2d:d4:46:5c:
                    46:25:03:78:33:59:53:f4:76:93:3e:26:aa:69:8a:
                    9a:73:d7:7b:28:a7:57:d6:f9:20:5a:42:cb:d1:50:
                    e0:19:e6:eb:02:e3:40:cb:92:cc:fe:59:bc:1c:c7:
                    83:60:28:ab:b8:73:92:1b:9b:b8:c8:67:ff:0d:1a:
                    36:ce:e0:e9:9c:6c:50:9c:63:f0:03:8e:de:35:60:
                    29:5d:cf:2c:ca:ed:14:b6:c7:13:94:5b:46:7b:97:
                    91:b2:d6:47:06:6c:e7:d5:67:58:7d:72:50:56:b8:
                    81:24:22:af:b9:dd:43:2b:49:dd:18:42:cf:4d:f9:
                    c2:50:b0:a2:47:74:ae:51:8a:0f:31:72:f7:a7:fb:
                    89:22:a3:e2:13:2a:17:38:41:4d:10:80:f8:61:83:
                    5b:3d:e8:e2:1f:f1:5a:16:2b:f6:6c:77:68:cd:c5:
                    5d:a6:89:3b:40:99:da:de:7c:36:8b:09:19:01:9d:
                    d7:97:5f:34:e2:cc:20:6c:aa:c2:bc:8c:5f:10:ab:
                    f6:f3:84:9e:74:65:10:c9:ec:3d:ee:74:17:f0:5e:
                    55:18:14:1c:cc:27:d9:48:65:9c:4d:e8:2f:ae:d6:
                    18:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AB:76:19:77:A1:49:75:4B:36:2C:6C:BC:87:03:CA:66:A0:46:9F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7775be13-aacb-4bbf-8d7b-67688ef2a425.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:55:d5:45:38:dc:e5:8a:4a:0c:42:b3:c9:53:17:73:84:66:
         22:8d:ff:2e:65:16:1d:13:39:4d:76:45:cf:98:8c:8f:26:a5:
         b0:18:a7:c8:3e:19:d1:81:64:ad:3e:a7:11:ab:28:35:74:e7:
         36:62:79:2f:6a:19:0b:fc:b4:d8:af:ab:35:47:db:81:23:ec:
         9c:69:05:ca:06:95:b6:fb:48:fb:b2:30:4f:fa:81:83:97:93:
         5c:d5:22:f3:70:e3:29:ec:98:db:96:ba:fb:91:72:55:c1:28:
         bf:a2:07:38:83:7c:98:e4:f0:c1:53:e6:73:54:ac:7c:72:27:
         65:9d:e8:76:b2:23:dc:2c:3b:ca:5f:d6:8e:bb:73:96:34:16:
         96:9e:6e:de:2e:97:df:0f:7c:5f:21:29:7b:ef:60:8e:53:69:
         65:7f:63:b1:2f:6e:5f:cc:3e:3b:df:bb:14:34:89:3d:90:6e:
         a7:f0:14:41:13:9c:90:67:1b:a6:7c:35:3a:dd:4e:58:cf:3d:
         a1:16:6f:df:11:9b:98:1f:3d:af:eb:2c:69:5c:8f:4c:b6:89:
         5c:dd:c7:b6:d7:bf:cc:53:9c:99:43:d5:4d:fb:58:e0:48:e6:
         f9:6b:ed:4a:6b:40:b9:e3:66:74:ee:74:55:8e:f2:90:6d:6e:
         a0:b7:df:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----