Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/80092a3c-e043-48f6-8214-b591095fc57c.roa
File:                     80092a3c-e043-48f6-8214-b591095fc57c.roa (raw, json)
Hash identifier:          S1UZ52Tr4yAu1tAj01kgDZoZVACP/KfZuWtpWOPD808=
Subject key identifier:   A4:3D:89:F6:3A:38:56:A7:93:A1:47:34:6D:01:7D:D5:FC:E2:26:7E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       01E0CC2F20D6F8ABF28EA7D1CB7179A41BB98EEC
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/80092a3c-e043-48f6-8214-b591095fc57c.roa
Signing time:             Thu 09 Mar 2023 00:00:00 +0000
ROA not before:           Thu 09 Mar 2023 00:00:00 +0000
ROA not after:            Sun 12 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e0:cc:2f:20:d6:f8:ab:f2:8e:a7:d1:cb:71:79:a4:1b:b9:8e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  9 00:00:00 2023 GMT
            Not After : Mar 12 23:59:59 2023 GMT
        Subject: serialNumber=87507dd5f81cc5bc15dd60768fe1a811bf9c1b2af9fcb2f9478ce33d48b0230f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:c5:1c:14:c3:10:e0:b5:4d:80:ef:6f:05:
                    7c:b4:29:a8:ed:1a:d0:45:29:4b:02:e7:22:ee:48:
                    3d:df:f1:60:6e:c4:8d:33:1f:1a:93:89:39:f9:0c:
                    5d:c7:76:77:77:ce:da:9c:39:62:57:3d:aa:4a:be:
                    5f:23:19:f9:4d:39:96:d5:2c:5e:d1:c3:fc:68:61:
                    5e:8b:6b:e0:23:d6:09:cc:e7:b8:a8:9b:aa:e0:e2:
                    6f:43:3e:ed:f6:a3:e7:a8:0b:79:fd:f5:a4:30:b5:
                    07:d0:b1:5b:e8:06:4f:31:ec:96:ab:81:73:1a:01:
                    15:b0:b9:a5:86:55:e7:7e:4e:e3:cc:48:9b:13:c5:
                    1f:1f:46:8d:72:94:8b:e3:61:70:37:6f:f1:c0:b0:
                    86:ff:4a:cf:aa:67:f6:9f:eb:19:bd:0f:1a:e6:80:
                    62:a2:1e:a8:6d:96:89:f2:ed:61:23:6e:e8:89:f4:
                    b2:f7:5e:8a:e6:1f:fc:91:bd:85:19:38:8a:71:b1:
                    b5:4c:76:f6:52:e6:a6:41:2e:38:21:b4:b1:5a:1e:
                    5b:e2:0d:7f:7e:53:0f:f7:22:89:e4:8b:16:6f:cd:
                    7b:a4:45:84:ee:c9:43:fa:da:be:58:ab:83:ac:ca:
                    a2:29:f9:c7:86:6a:29:cb:8d:f6:47:fa:de:2a:00:
                    be:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3D:89:F6:3A:38:56:A7:93:A1:47:34:6D:01:7D:D5:FC:E2:26:7E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/80092a3c-e043-48f6-8214-b591095fc57c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:66:bd:8f:86:6e:9f:8e:42:60:94:ed:be:84:73:72:ed:ec:
         c0:81:11:e6:d0:6b:4c:ed:4a:b6:22:a6:ab:ae:d7:5a:20:e4:
         66:af:06:ce:3a:0b:ca:b7:d2:73:7d:b8:86:29:29:9d:bf:f1:
         51:9e:f4:d2:6d:12:c0:92:5a:0c:b9:85:7f:85:11:7c:e7:e3:
         89:48:65:56:59:fc:b3:41:f9:fb:f1:08:56:29:64:a3:06:87:
         db:b1:dd:83:4d:92:9b:e5:1a:45:d7:51:a1:a4:cb:33:c2:81:
         82:f7:d0:46:e4:3d:87:c5:6d:4b:5f:48:0b:f8:5b:5b:fc:30:
         b9:c7:10:0b:83:3e:d7:da:dd:9f:48:fe:c7:ca:11:de:5d:3f:
         33:c3:a7:c8:ed:3f:f0:29:8f:d8:58:e0:10:a3:d6:19:3c:21:
         37:d2:9d:89:f4:e1:6e:69:6b:71:1e:d2:86:01:ef:7f:e1:6c:
         17:aa:43:e0:c8:a6:6d:1a:9d:29:ee:0a:a5:bd:37:b2:09:27:
         38:1b:a4:e3:21:45:a2:b7:79:61:f7:67:77:7a:5a:37:b7:e8:
         6d:a7:c8:37:d8:8f:8e:20:ae:7a:97:c4:79:b2:ab:85:43:91:
         d5:ab:ba:25:9d:10:fc:0c:c5:cd:2f:b6:89:70:13:32:4b:98:
         44:61:5f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----