Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/899f009e-4b32-4b54-928b-e1a5e36aaf07.roa
File:                     899f009e-4b32-4b54-928b-e1a5e36aaf07.roa (raw, json)
Hash identifier:          ySlCUkRO9CcMzsxjYCC47CxJjqnWAadQfDdjBQH9ARI=
Subject key identifier:   08:F9:C3:20:44:CD:67:13:48:8F:A3:12:7F:A0:9B:7D:54:66:78:A1
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       14AAA05FD72A01D47FA4A28C54AEA18063844D8F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/899f009e-4b32-4b54-928b-e1a5e36aaf07.roa
Signing time:             Sun 04 Jun 2023 00:00:00 +0000
ROA not before:           Sun 04 Jun 2023 00:00:00 +0000
ROA not after:            Wed 07 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:aa:a0:5f:d7:2a:01:d4:7f:a4:a2:8c:54:ae:a1:80:63:84:4d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun  4 00:00:00 2023 GMT
            Not After : Jun  7 23:59:59 2023 GMT
        Subject: serialNumber=a1294ca364840ebcb56fbdd6b1289d58bffdd22fd9f3428fae3eecf11cbae334, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:ad:21:c5:44:1d:3f:e1:c7:9e:99:a0:93:
                    41:b8:ff:81:81:0d:a0:a6:e9:a4:a2:a8:4f:2a:a3:
                    ed:cf:01:e0:c7:98:53:59:2c:5f:ce:2c:25:e1:d8:
                    6f:3a:ac:ca:4c:2c:f4:95:ba:51:52:b8:9d:40:f6:
                    ff:a8:b5:63:b0:d2:3c:e9:2d:d7:b1:ba:ab:6c:0e:
                    92:ac:34:22:e6:46:e8:e3:84:18:01:a6:6e:73:b2:
                    6b:c5:cb:ee:45:f5:63:b7:69:be:70:d9:59:b4:75:
                    75:c3:74:3c:16:bb:78:41:07:d4:c5:b4:0f:c1:b5:
                    9d:e7:3f:e8:01:55:a9:c8:7b:0b:ce:a2:13:89:00:
                    81:a9:b1:59:ee:cf:6b:03:e8:7d:09:f9:26:ff:61:
                    c3:bd:28:56:2d:6c:dc:a0:89:f1:20:80:d5:61:45:
                    c0:70:6a:b8:ea:20:e8:8f:5c:92:4b:72:07:a1:cc:
                    8a:54:d8:7c:17:59:34:7c:9f:da:70:4c:0f:cd:45:
                    6a:30:ad:17:30:ce:93:e9:0f:cb:5b:1f:74:17:1c:
                    d1:92:ef:be:23:e8:45:46:54:b6:c7:11:85:e1:3a:
                    8c:73:1b:69:55:b9:4a:61:c3:24:b4:95:99:a0:70:
                    b2:d3:2f:91:8d:ff:b4:e0:47:ce:ea:9a:90:c3:0f:
                    73:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F9:C3:20:44:CD:67:13:48:8F:A3:12:7F:A0:9B:7D:54:66:78:A1
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/899f009e-4b32-4b54-928b-e1a5e36aaf07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:5e:7f:7d:a7:fe:77:b8:72:a5:89:a3:40:80:e7:95:d8:7c:
         6c:5e:3f:55:c8:ac:80:0d:ef:e7:20:c0:7b:38:a7:93:e4:3e:
         a8:7d:81:c8:ff:83:d5:e1:1f:cc:0d:d6:29:75:68:92:96:b6:
         47:d3:e7:55:ba:9e:28:d9:ca:ed:75:8d:4d:8d:4e:88:16:c2:
         a1:26:7e:93:09:d5:c3:d8:a7:61:a6:28:58:90:5a:e0:4c:78:
         31:5f:f0:84:f4:ff:b1:b3:98:ae:27:74:7d:01:fd:d7:5c:73:
         f1:ff:97:4f:49:c2:de:6d:f5:a0:ec:f1:24:8c:b2:e7:34:59:
         a6:7b:e4:2c:f4:f1:34:f0:4a:a3:34:cd:ee:a7:28:f8:f2:0e:
         cf:47:8b:05:12:4b:1d:02:2a:01:6d:b8:b4:20:a0:2e:0e:ea:
         51:a8:81:4b:58:b8:0f:9e:63:e3:d6:17:50:70:3f:e9:81:70:
         0c:0b:b7:59:d8:1c:16:d4:20:8b:f3:58:06:19:01:a7:02:9a:
         ad:a5:48:a7:ec:15:41:b6:55:4d:c4:32:cc:4d:63:65:57:d5:
         63:ee:44:8c:ba:af:39:dc:cc:44:75:2f:02:18:fe:4a:3b:00:
         ec:b4:5f:7a:7d:74:84:0e:89:8c:fd:82:93:79:98:a7:79:29:
         18:db:5d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----