Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/799f5700-a3d3-4126-87bf-5e8c73f8fee8.roa
File:                     799f5700-a3d3-4126-87bf-5e8c73f8fee8.roa (raw, json)
Hash identifier:          F9LHN9Kv8SdGGPcjn1UQbLh8I+7A7gWySkf9EgXb7to=
Subject key identifier:   77:23:24:36:96:63:FF:4B:BE:C5:67:11:50:86:C9:1B:E1:4C:BE:78
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6EB9565E4E0781F2D4D7FB9D016A78C01B2ED114
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/799f5700-a3d3-4126-87bf-5e8c73f8fee8.roa
Signing time:             Wed 26 Apr 2023 00:00:00 +0000
ROA not before:           Wed 26 Apr 2023 00:00:00 +0000
ROA not after:            Sat 29 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b9:56:5e:4e:07:81:f2:d4:d7:fb:9d:01:6a:78:c0:1b:2e:d1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 26 00:00:00 2023 GMT
            Not After : Apr 29 23:59:59 2023 GMT
        Subject: serialNumber=5311ee61891326119bf37261ced0ccd9d9e4d3be134af6713a300e8e4be94529, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:78:4b:dc:95:f2:e7:f4:3a:11:01:68:81:aa:
                    70:86:ec:4b:29:f7:45:90:84:4b:15:38:97:f9:8a:
                    53:07:6f:b8:27:74:b1:06:1b:5a:46:cf:32:01:f9:
                    d1:74:dd:35:49:af:70:5d:57:40:f1:b7:82:95:2b:
                    cb:00:cb:d3:a2:c9:cf:1a:47:45:e0:cc:a8:8a:8b:
                    e1:d5:b9:50:25:dd:ee:a2:45:24:65:6f:29:08:73:
                    43:a1:cd:65:4a:67:63:15:e7:7a:02:99:73:99:2d:
                    12:34:9b:48:11:49:c8:27:4f:ba:02:7c:a8:bf:37:
                    e3:a8:a1:4a:e2:dc:34:1f:66:68:d5:7a:80:9e:7b:
                    49:6f:df:12:89:3d:16:0e:b0:b0:38:a6:c8:8f:fb:
                    94:a8:ce:74:60:3c:4b:05:8d:1a:67:a3:bb:ea:2f:
                    a2:cf:b6:b2:f1:a8:c7:25:9b:f3:bd:87:1e:a2:28:
                    fe:bf:df:20:05:9e:fa:48:07:cc:33:6c:e0:02:af:
                    f2:bb:09:21:43:27:7a:72:76:e8:6a:65:5a:37:f0:
                    9a:2e:f8:45:a1:09:fa:b0:ee:21:bb:6f:64:99:74:
                    3e:74:bb:d2:d9:f0:e9:8b:0e:34:4a:2f:6c:cd:a9:
                    1c:5a:d7:80:3d:4c:07:c1:b6:15:c9:95:a8:fa:40:
                    dd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:23:24:36:96:63:FF:4B:BE:C5:67:11:50:86:C9:1B:E1:4C:BE:78
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/799f5700-a3d3-4126-87bf-5e8c73f8fee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:f9:24:51:6f:5e:d9:4e:25:2a:57:ec:c4:2c:29:e6:6b:b6:
         26:2e:1c:ea:ee:f4:ad:df:70:7f:5e:a6:02:e0:9d:ea:bc:23:
         15:05:4b:7d:7f:94:d3:fd:50:1b:05:ec:0d:aa:f1:f8:6e:6d:
         9a:b3:b1:10:3a:47:37:49:1a:cc:51:bd:f3:25:aa:3f:e4:89:
         73:6b:ec:83:ba:68:59:16:35:0f:85:b5:5c:72:14:0c:66:03:
         df:43:97:13:70:2b:31:e7:7e:b5:c1:3c:9f:ba:2e:a2:80:1e:
         08:5f:c4:0a:7f:42:85:42:a6:6d:a6:d1:bd:07:fa:3b:4b:8d:
         71:91:8c:b7:91:16:a7:99:d1:14:27:63:9e:d7:31:8f:24:8e:
         83:6e:ac:a1:f5:6b:a1:02:9a:f3:82:79:4e:08:7d:99:ee:76:
         b4:fc:85:be:55:44:d6:f1:e8:95:f1:ba:ad:16:1d:ea:c3:02:
         e6:fd:af:da:9e:33:34:e3:3b:01:50:13:6d:65:85:74:9e:7d:
         67:b1:97:f3:d1:dd:0b:5b:2b:b4:21:a0:78:a0:b8:4e:a2:d1:
         01:b8:98:6f:4f:9e:7b:7f:79:a1:95:98:e1:67:61:f6:aa:10:
         90:52:3b:ff:94:42:47:ad:00:0d:7c:ef:1a:f0:26:d0:3d:d9:
         cd:c6:a3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----