Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8a7c54c1-a5a5-4682-b418-ba1cf3730590.roa
File:                     8a7c54c1-a5a5-4682-b418-ba1cf3730590.roa (raw, json)
Hash identifier:          CWOZzvedIm3iQJ8v9rYmbB9fHilT6kzPx5BNkJi/sNA=
Subject key identifier:   7F:8A:DA:B7:81:66:50:B5:F5:80:D2:83:96:79:B8:12:C1:B6:8E:72
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       699915A4060AAEF911FF7870B6E7B7707B46A93F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8a7c54c1-a5a5-4682-b418-ba1cf3730590.roa
Signing time:             Tue 28 Feb 2023 00:00:00 +0000
ROA not before:           Tue 28 Feb 2023 00:00:00 +0000
ROA not after:            Fri 03 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:99:15:a4:06:0a:ae:f9:11:ff:78:70:b6:e7:b7:70:7b:46:a9:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 28 00:00:00 2023 GMT
            Not After : Mar  3 23:59:59 2023 GMT
        Subject: serialNumber=782f8a95340841d66afffd3ad8899b44bc53e4161ce32ecd17f4caf697c53025, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:29:4c:2c:81:58:db:db:a7:75:fc:ba:88:34:
                    3a:d0:5c:74:63:36:3a:1e:0f:96:14:90:c5:cf:1c:
                    78:f2:ed:f7:65:fd:df:03:12:ae:a0:7a:0d:a8:d2:
                    a7:79:77:eb:96:df:b6:db:b5:d1:39:5c:ae:3a:bc:
                    cb:01:2c:95:2f:00:fd:c9:36:64:62:ba:4d:5f:c4:
                    6d:d0:d2:f4:0c:3b:67:b4:09:dd:fd:e1:1e:00:ca:
                    1c:04:9f:19:85:10:93:c0:b6:e4:eb:e8:f2:bf:6c:
                    b0:75:ec:3f:ce:b4:a4:a7:d9:25:2a:86:33:58:8f:
                    1b:38:be:d1:e4:08:35:1a:47:d4:4b:0a:7f:e7:eb:
                    c7:08:d4:49:0c:2f:9f:2e:aa:ae:a6:91:3b:b6:ed:
                    ca:a8:ed:d9:4f:b5:83:6f:8a:65:f3:c3:3b:5d:a8:
                    31:c2:b2:94:21:29:c0:1a:ff:79:90:33:41:45:55:
                    02:b1:0e:c3:db:77:3c:35:2d:f3:83:7e:b1:0a:42:
                    b0:30:c8:5f:cd:f3:16:57:09:5e:27:e3:e1:bd:13:
                    b2:31:f3:9d:af:e5:17:90:0c:c9:4c:d1:a9:11:23:
                    96:55:32:90:ba:7d:a4:41:58:93:53:bc:ab:0b:5a:
                    12:25:2f:a3:1f:59:d7:a0:20:d3:aa:15:e3:14:40:
                    4f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8A:DA:B7:81:66:50:B5:F5:80:D2:83:96:79:B8:12:C1:B6:8E:72
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8a7c54c1-a5a5-4682-b418-ba1cf3730590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:3d:fa:49:bf:37:e8:5d:c5:8c:26:b1:fb:2f:ea:36:84:e8:
         de:84:34:f5:59:f9:50:f1:a1:65:8d:8e:9b:1a:30:b0:76:94:
         ad:90:2e:23:41:fc:17:1b:98:96:0e:41:c0:65:37:93:68:a6:
         dc:4c:0b:cb:8a:1c:2e:17:1a:40:66:9a:2f:e0:1a:82:44:90:
         8d:41:d7:b9:9c:2a:eb:db:01:3e:bc:22:2f:cc:c1:37:22:2d:
         ec:a7:cc:10:95:41:6b:1d:00:64:ec:93:5b:b0:2f:d1:41:21:
         1e:42:6a:5e:9e:f1:12:05:5b:04:b8:93:0e:95:b6:6c:15:79:
         7d:be:89:9b:9f:9f:da:6f:53:66:3a:b9:60:46:9e:7d:44:0d:
         b7:a1:a4:26:48:92:00:15:ff:da:a7:d7:f9:38:ea:f1:6d:d2:
         ae:2b:dc:31:09:7b:95:43:e8:ac:9f:ac:d8:d6:5b:2b:74:33:
         ab:87:8e:6f:b7:15:7e:c7:f4:e4:db:75:3d:3c:18:d3:bb:4d:
         95:26:fd:44:b4:50:33:6b:32:ac:53:71:f9:40:ff:46:78:40:
         17:9a:02:7b:f5:07:dd:14:82:61:16:ca:d7:2e:ce:52:7e:2a:
         55:a8:b9:89:c6:a5:10:22:cd:bf:3a:4c:eb:d5:2d:22:86:ce:
         bf:8c:f7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----