Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/837dbf51-fd49-4a0b-8cb9-b6c5f1277b77.roa
File:                     837dbf51-fd49-4a0b-8cb9-b6c5f1277b77.roa (raw, json)
Hash identifier:          7SGY6QLQB9UvQYfqF59NvFQRdILPJllh7FrPmSBUGYo=
Subject key identifier:   B7:83:6F:4A:B4:26:70:BE:AA:45:C8:D3:AC:CD:40:D3:7E:A7:61:E7
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3106934BB4E17F16719F9361BF15F23CF3913A97
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/837dbf51-fd49-4a0b-8cb9-b6c5f1277b77.roa
Signing time:             Sun 19 Feb 2023 00:00:00 +0000
ROA not before:           Sun 19 Feb 2023 00:00:00 +0000
ROA not after:            Wed 22 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:06:93:4b:b4:e1:7f:16:71:9f:93:61:bf:15:f2:3c:f3:91:3a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 19 00:00:00 2023 GMT
            Not After : Feb 22 23:59:59 2023 GMT
        Subject: serialNumber=cb1ff6c001c6048531ddf2059083c77f719d3d03190af1c21106729c9d1dcbbc, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:61:f4:07:70:63:69:31:7b:98:2f:e4:d8:
                    5f:d1:45:ae:b5:19:51:f2:6b:3b:e0:78:e2:65:4b:
                    64:cc:88:3d:eb:df:31:99:03:64:03:18:c0:d8:cd:
                    ae:8c:04:38:a0:12:51:bc:41:3a:d0:91:22:18:4e:
                    04:57:ba:64:e4:de:6f:d8:91:d9:f7:41:a8:93:2a:
                    36:fa:0f:9b:b7:37:ad:5b:e4:fa:45:72:a6:7e:20:
                    16:88:7a:c7:e9:93:4a:94:64:92:84:f3:62:65:b3:
                    de:32:d6:a8:3b:fd:4b:ce:5b:4f:7e:4c:97:cf:09:
                    48:66:0f:15:92:4a:f8:38:b6:7d:61:5b:b1:4f:9e:
                    ca:24:8f:39:48:38:24:29:aa:14:67:e3:11:80:7c:
                    92:a8:3d:ac:bc:07:17:cd:73:32:f9:bd:64:11:e5:
                    df:b2:1e:71:5b:38:72:d7:72:a2:e6:97:4f:ac:d8:
                    a4:18:98:ad:d3:53:f6:10:ef:18:37:6f:e1:0f:57:
                    99:a0:26:95:88:3d:62:fc:e2:8b:15:44:ed:f0:76:
                    fd:ed:43:8c:c9:f8:5a:b9:08:bf:0a:e6:4e:d9:1b:
                    42:aa:e6:0b:6c:47:34:65:2a:c5:38:41:22:ed:d8:
                    41:aa:04:a0:32:28:f4:9a:26:0a:fb:20:95:2a:31:
                    e0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:83:6F:4A:B4:26:70:BE:AA:45:C8:D3:AC:CD:40:D3:7E:A7:61:E7
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/837dbf51-fd49-4a0b-8cb9-b6c5f1277b77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:99:30:b5:c4:4b:06:f8:b8:e6:19:73:cf:9c:56:6e:c4:ae:
         7a:10:51:4b:80:09:b1:c7:35:2f:0c:87:46:2d:6e:5b:59:95:
         07:e3:0e:59:df:ad:79:dd:74:86:ef:34:c5:d0:a9:4b:c9:ae:
         50:40:1a:be:ba:ac:d8:b9:f5:c7:e1:99:7c:54:86:b7:29:f9:
         4a:42:e5:9d:ce:b1:6a:ac:70:91:ad:71:2f:1f:88:23:72:c3:
         6f:b0:44:ef:a4:78:1b:eb:c3:34:33:74:75:4c:ed:8c:12:6e:
         32:c0:e4:ab:d8:30:dd:f1:60:17:dc:8c:14:72:0e:b5:58:31:
         de:62:9f:86:cc:ce:f0:92:00:4b:55:e9:21:fb:cf:f3:18:36:
         bb:18:c8:0c:39:89:ce:cf:2e:c7:48:63:08:39:1d:a6:12:c6:
         a6:93:60:fa:3b:b3:84:4a:92:39:05:80:60:5c:17:68:1b:41:
         6c:2a:6b:56:49:88:be:05:d6:9f:39:ae:68:6c:b0:72:b3:58:
         8b:de:c5:d9:cb:f0:15:f0:d1:c4:b9:96:52:de:0a:fc:fa:0d:
         9e:74:18:59:54:98:08:3c:59:06:ac:9d:59:ba:3e:9e:9f:77:
         0c:a4:26:e4:9b:1b:80:ba:b3:42:a3:95:8d:32:e5:3a:87:f2:
         b2:bb:f3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----