Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/90e522ba-0b19-4006-8d22-b6d772b53f82.roa
File:                     90e522ba-0b19-4006-8d22-b6d772b53f82.roa (raw, json)
Hash identifier:          wIiwm2W9BfNu0RVxfwX7mCckR16lHw4K5cMAFQHz4Do=
Subject key identifier:   5C:D9:6F:93:00:B0:C4:58:04:C2:73:E3:EF:55:10:2B:90:ED:0B:A1
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0EE507C1C5732D700E27DB95ED2E28BBFEF3A33F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/90e522ba-0b19-4006-8d22-b6d772b53f82.roa
Signing time:             Sat 25 Feb 2023 00:00:00 +0000
ROA not before:           Sat 25 Feb 2023 00:00:00 +0000
ROA not after:            Tue 28 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e5:07:c1:c5:73:2d:70:0e:27:db:95:ed:2e:28:bb:fe:f3:a3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 25 00:00:00 2023 GMT
            Not After : Feb 28 23:59:59 2023 GMT
        Subject: serialNumber=10444b413e1bc4626a9d82a8900683966b9717e370be241f62d0e26ac7b613eb, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:26:39:31:1d:ea:4b:13:63:d3:55:d9:cb:e5:
                    6a:be:a5:85:24:a2:3a:4e:08:20:4e:7b:f2:30:3d:
                    94:27:18:29:9d:e5:ce:ff:a1:c5:72:89:f1:43:a5:
                    39:07:60:20:41:11:24:20:51:de:4c:e1:71:97:46:
                    0d:ac:6b:d4:42:6e:fc:f0:96:6f:0a:f2:87:84:a9:
                    70:8d:8b:0a:a8:59:6e:a2:df:e4:1d:92:57:12:e7:
                    24:17:2c:fd:d0:44:1a:03:f8:5e:57:f3:4d:29:dd:
                    47:9a:7b:49:b6:df:10:85:f8:1c:e6:84:7e:68:7c:
                    85:bb:d4:dd:b5:b9:40:9d:ea:10:e9:a0:69:69:cd:
                    37:8a:f8:be:ae:ad:2e:0d:10:25:c7:70:f2:c8:e4:
                    88:86:53:0c:6b:d1:57:d0:5b:c0:5e:d7:e5:cd:54:
                    70:83:97:ca:9f:d2:3e:15:db:9e:de:a2:39:26:62:
                    1e:65:82:71:a1:99:6e:1a:da:79:85:e0:5d:d4:c2:
                    fb:99:65:e8:21:eb:80:03:05:a0:6a:4c:44:0c:bb:
                    62:77:7f:f5:06:7f:29:19:4b:35:b6:a2:da:44:dc:
                    26:1f:c9:d1:3f:a9:d0:39:91:2b:d6:ff:25:a8:78:
                    5b:ab:79:1c:55:ef:a2:bd:82:c2:e4:67:64:8f:4a:
                    64:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D9:6F:93:00:B0:C4:58:04:C2:73:E3:EF:55:10:2B:90:ED:0B:A1
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/90e522ba-0b19-4006-8d22-b6d772b53f82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:90:42:db:85:02:3e:9c:18:ee:3c:cb:91:7d:48:42:67:09:
         06:98:d0:7e:13:02:7f:33:83:ad:af:8f:eb:e6:73:f7:f2:74:
         6e:97:28:fc:6d:4b:ec:ed:2e:77:3f:c2:96:58:30:a7:16:05:
         28:db:1d:e0:d9:ba:20:16:01:ec:04:7c:06:c2:f6:f0:8a:af:
         ad:30:77:54:a0:64:47:fb:38:ed:bb:c3:88:9b:7d:cc:c0:65:
         e3:4f:7b:e9:37:8e:07:fa:a3:12:58:d7:e2:cd:ef:c9:cf:e2:
         21:91:7e:bd:41:79:4a:ba:29:a0:20:20:a0:c5:3c:2b:fd:72:
         e3:c7:0c:bc:6f:68:19:2b:6b:21:f1:5c:7b:c6:5b:2d:43:28:
         5d:e2:09:fa:33:bf:ea:e4:39:26:8c:fe:4b:03:6a:eb:63:5c:
         10:09:fb:26:26:fa:71:50:04:57:7d:c5:8e:6b:85:52:4a:07:
         41:c8:93:b1:66:ae:aa:95:a1:6f:3a:57:4d:a2:60:7c:a4:d9:
         cb:40:8b:d4:1c:61:4b:3a:81:90:c2:f7:6f:2f:4a:cd:9d:91:
         a7:b8:a7:7a:8f:c5:e0:38:8c:fe:09:f5:df:33:81:b4:d7:b8:
         30:55:eb:48:d9:84:4f:d5:a2:19:dd:04:37:a3:93:dd:4d:fa:
         8e:38:a5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----