Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7c20a74d-575a-4d32-95a3-6d15aee5eea4.roa
File:                     7c20a74d-575a-4d32-95a3-6d15aee5eea4.roa (raw, json)
Hash identifier:          ZbMM0dQn4YFxrBDGZvdrqI0tRxx+x32k6zZyIrqmYS4=
Subject key identifier:   9B:D1:76:E0:3C:91:B1:08:73:14:46:18:9D:FE:AA:46:0A:C0:6C:83
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6F532D2BF53172309192662ED3909B45DC0607DF
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7c20a74d-575a-4d32-95a3-6d15aee5eea4.roa
Signing time:             Fri 24 Feb 2023 00:00:00 +0000
ROA not before:           Fri 24 Feb 2023 00:00:00 +0000
ROA not after:            Mon 27 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:53:2d:2b:f5:31:72:30:91:92:66:2e:d3:90:9b:45:dc:06:07:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 24 00:00:00 2023 GMT
            Not After : Feb 27 23:59:59 2023 GMT
        Subject: serialNumber=a8868f4b39ec210fa85f4cbf70c0125ff688172bf06bd6df168e2c58fd8e7830, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8e:53:94:75:c7:3b:03:1f:fe:7f:1c:ec:76:
                    50:b6:c4:4e:98:37:ad:7f:7b:e1:3a:d3:3e:eb:54:
                    ea:13:65:be:41:59:21:4e:36:20:8b:67:47:31:37:
                    de:17:33:08:75:4e:e7:c5:fe:8c:ec:3e:ce:21:1f:
                    33:33:6b:f5:32:5f:fc:37:ef:ee:83:de:92:5d:e6:
                    73:db:1e:66:be:3d:78:a5:61:ec:3d:1d:54:95:9b:
                    48:44:a5:9c:8e:9a:9e:2f:31:94:b9:f4:c4:56:69:
                    cc:c5:4a:b0:0c:bd:09:10:d5:76:62:ce:b0:bb:fa:
                    40:ca:7c:02:eb:a6:ad:16:86:61:ae:5d:09:ac:9d:
                    95:8b:a1:62:d3:0f:46:71:3e:0d:01:22:b8:a9:73:
                    d3:29:25:4f:b8:11:31:f9:e0:63:24:cd:df:c0:cd:
                    43:49:da:c0:17:2c:a1:d2:50:61:66:f9:08:f9:98:
                    f4:72:7e:6b:02:4e:ad:95:89:ef:2c:70:8c:09:e8:
                    0f:c3:fc:3d:95:f3:f5:cc:3a:0a:aa:c2:90:7a:ea:
                    27:ee:f3:78:4e:84:ec:04:28:77:aa:45:bc:4b:37:
                    b8:c1:8f:70:6d:b1:de:c1:35:bd:ff:d5:d7:82:c0:
                    96:f2:d3:e0:72:6d:31:3c:f9:99:ba:5e:7f:7e:b7:
                    fd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D1:76:E0:3C:91:B1:08:73:14:46:18:9D:FE:AA:46:0A:C0:6C:83
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7c20a74d-575a-4d32-95a3-6d15aee5eea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:02:75:d0:58:d0:ef:87:fa:66:1e:03:d9:13:4e:a0:61:71:
         07:50:c9:1f:6c:c5:e3:92:3c:7a:94:dc:f5:4d:ed:fe:95:30:
         ed:26:d4:20:4d:63:62:c7:12:27:d2:8d:ab:5b:70:23:e4:57:
         f3:1b:9c:bb:dc:3e:f9:ef:b1:4d:7d:74:b2:ec:f7:dc:e0:f5:
         98:ae:27:27:9c:41:44:47:d4:85:ea:39:eb:3e:fa:6a:35:b7:
         6a:96:a2:34:c6:dc:48:8b:79:78:e7:e3:57:80:70:2c:da:ff:
         1b:de:bb:52:04:ae:f2:27:bc:2e:31:c1:c9:12:93:9c:c6:50:
         c4:f2:ca:b1:6a:63:3a:46:bf:47:fc:81:26:a3:44:56:d1:fd:
         9f:76:81:73:4b:4a:0a:f4:20:be:00:ee:b6:9c:06:c3:5d:79:
         3c:14:03:de:84:15:28:a0:8a:e8:ad:5b:7c:e7:3a:6e:87:06:
         cc:f8:3f:4e:fd:67:2f:0d:34:3e:78:73:aa:4e:1f:81:62:8e:
         cd:46:d5:a8:54:af:29:50:c3:66:39:5d:21:8e:9c:d5:6e:c9:
         dc:1e:16:57:72:97:50:5f:c8:f4:ae:98:01:62:4b:45:bc:8e:
         06:35:f0:dd:5f:39:b5:fd:c8:c3:72:5a:0e:c9:3d:f4:87:34:
         42:74:d3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----