Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/88fc861b-19ca-4860-88de-2d45381dd5b9.roa
File:                     88fc861b-19ca-4860-88de-2d45381dd5b9.roa (raw, json)
Hash identifier:          2uk4vLqeZxrpiJaTT0d6g+Qw4EUW1YNJ1xUBVbklERo=
Subject key identifier:   FA:33:56:55:DD:EB:2F:48:2B:8E:D4:70:28:E8:17:4E:39:E3:48:77
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       146AFCAEBA2D4B2A028309A329A70B8084C1EF83
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/88fc861b-19ca-4860-88de-2d45381dd5b9.roa
Signing time:             Fri 21 Apr 2023 00:00:00 +0000
ROA not before:           Fri 21 Apr 2023 00:00:00 +0000
ROA not after:            Mon 24 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6a:fc:ae:ba:2d:4b:2a:02:83:09:a3:29:a7:0b:80:84:c1:ef:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 21 00:00:00 2023 GMT
            Not After : Apr 24 23:59:59 2023 GMT
        Subject: serialNumber=bfbcdfc9058df70f723ffaa523886167b295cca01ed1e909eb7ef627888b2e2d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:47:37:44:af:7d:73:91:85:55:8e:96:a4:07:
                    ad:bb:da:a8:35:e9:58:09:e7:c5:9e:3d:db:9c:5a:
                    ed:2b:8c:4e:1b:0c:2e:f2:5a:a0:e9:ab:a6:e0:a7:
                    0f:8d:69:3b:98:82:3a:46:53:d9:d7:ba:60:b8:11:
                    08:0e:5b:0d:4d:d1:25:42:3e:13:2e:0f:b8:e5:90:
                    46:80:0a:c6:ce:53:7e:c5:a3:b1:97:86:ee:20:84:
                    84:14:4b:9c:cb:ae:21:f2:73:83:11:1b:c9:83:49:
                    d1:74:b0:51:19:8d:f6:98:db:ff:d6:67:1b:01:e2:
                    fd:15:e5:88:93:26:75:0a:82:8f:db:26:aa:00:f1:
                    06:61:22:00:45:f1:c0:8b:76:6c:8f:b3:d3:bc:16:
                    38:9b:58:ba:4b:d3:d8:2c:8e:64:af:0f:41:41:db:
                    17:a2:31:b5:aa:3e:b1:8f:66:e3:e2:c4:43:c6:e2:
                    d9:81:cb:2b:ae:c6:b2:7c:f4:16:1b:cd:05:f1:75:
                    a3:46:7a:0c:2f:cc:ad:78:b8:9b:b5:77:be:28:69:
                    25:0e:34:21:96:bb:35:ba:df:df:50:e9:3b:33:1f:
                    5f:fe:8b:4e:17:95:fd:57:96:d4:f2:00:ca:2d:2b:
                    7d:aa:cf:be:7e:50:70:18:43:60:26:f0:9e:13:f3:
                    e2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:33:56:55:DD:EB:2F:48:2B:8E:D4:70:28:E8:17:4E:39:E3:48:77
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/88fc861b-19ca-4860-88de-2d45381dd5b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:f8:a4:53:39:be:48:41:a8:d4:f7:18:15:da:c6:ab:86:4b:
         18:a8:84:05:4a:5b:27:bb:cd:80:f0:16:7a:09:ee:63:5f:72:
         e6:02:41:f7:8c:7f:fa:5c:ab:c5:f3:e8:ee:dd:d9:c4:84:57:
         77:2c:4a:03:11:61:ec:9f:bf:d4:b2:c6:c6:fe:35:3f:f3:74:
         f3:c1:8d:89:d0:f3:44:ed:ba:ce:41:09:61:58:39:9f:d0:28:
         20:28:c2:18:f9:e0:2a:60:dc:12:cc:6d:30:c9:a7:68:eb:92:
         22:10:88:2a:0f:d4:91:0c:92:50:61:52:a4:90:e5:0c:a6:a6:
         28:e9:39:f9:45:03:27:5b:4d:63:df:d4:01:76:49:85:c0:ae:
         fd:ff:06:fa:55:d2:a8:ca:06:63:f2:37:65:26:f2:af:83:54:
         80:3c:dd:6e:8f:08:21:42:b0:0c:2f:0b:d8:72:1f:9c:29:d3:
         95:a9:2d:3f:c4:d0:d2:75:55:9e:cb:ae:09:2a:f0:a4:c4:16:
         75:86:fb:79:46:0d:61:03:a6:f1:dd:cb:3b:aa:ef:ad:92:2a:
         86:f4:70:90:bd:15:3b:1b:0d:f3:b0:2b:7a:48:85:92:ca:ac:
         3c:1c:4d:2d:21:fd:1a:f1:af:70:67:bd:0c:58:d9:f3:a1:87:
         a8:42:69:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----