Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/91feafe2-69d6-4ad0-89b3-30aad8dca39d.roa
File:                     91feafe2-69d6-4ad0-89b3-30aad8dca39d.roa (raw, json)
Hash identifier:          RYrxypUcw2yH4jjMAMqroqDo3f86o9I4Cj6WQKFLwSs=
Subject key identifier:   FF:70:C4:8A:B9:15:55:12:ED:68:27:50:BA:ED:31:2A:C0:5B:07:B7
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       405AF7C1FAF492C23094D83F649D9D4B02F3BFF6
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/91feafe2-69d6-4ad0-89b3-30aad8dca39d.roa
Signing time:             Sat 18 Feb 2023 00:00:00 +0000
ROA not before:           Sat 18 Feb 2023 00:00:00 +0000
ROA not after:            Tue 21 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5a:f7:c1:fa:f4:92:c2:30:94:d8:3f:64:9d:9d:4b:02:f3:bf:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 18 00:00:00 2023 GMT
            Not After : Feb 21 23:59:59 2023 GMT
        Subject: serialNumber=65dcc8e6467fb06a528cbcaa5bff172e8563273515590ca08c9b218cd2bfdb9b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7a:0a:97:dd:63:35:e1:06:62:b3:d7:a1:aa:
                    74:35:b5:9d:50:5f:51:ee:30:46:39:06:21:4d:0e:
                    8b:32:f4:31:00:f9:85:1a:14:87:ac:fa:1b:86:be:
                    87:f3:99:2b:06:59:d8:40:11:4d:92:54:05:5e:42:
                    14:7f:94:27:27:a6:4d:22:3a:c9:73:21:3c:53:85:
                    0e:7a:9e:7b:1b:09:07:ea:2f:b5:cd:8f:2c:e2:f9:
                    d4:d2:7b:df:d6:cc:dc:78:1e:fa:4a:42:f4:95:63:
                    6d:14:2a:17:e8:0e:6b:b4:c9:5c:89:af:0c:62:c2:
                    2b:5e:61:f5:e5:89:0c:a2:02:49:d9:ff:be:7c:51:
                    7e:1b:26:b3:5c:c7:9b:5b:ee:82:92:81:2c:75:c4:
                    1b:9e:98:54:9a:68:15:90:fd:07:b7:1a:b3:41:10:
                    c8:d9:72:90:2a:0b:50:c9:46:4e:bb:86:61:d5:42:
                    d2:ed:cb:cf:57:f5:08:14:d4:2c:16:9c:06:93:01:
                    2b:15:9c:93:38:8a:bb:a1:2d:df:a3:c5:2b:f3:b0:
                    aa:4f:09:9b:a7:d3:6d:19:dc:97:7e:06:ef:ba:8d:
                    79:52:33:d2:e9:28:f3:0d:91:25:e3:f9:c3:18:7a:
                    bc:4c:9f:1a:0c:51:f0:88:42:8c:88:a6:2d:40:5c:
                    d8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:70:C4:8A:B9:15:55:12:ED:68:27:50:BA:ED:31:2A:C0:5B:07:B7
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/91feafe2-69d6-4ad0-89b3-30aad8dca39d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:19:b6:42:eb:a9:46:a3:1e:89:a5:61:00:73:40:b8:98:a2:
         70:ba:65:77:3f:97:d7:50:ec:fe:41:53:99:6c:2c:56:bf:60:
         0d:13:62:8a:7c:73:99:ec:2c:bd:aa:bb:04:6f:92:06:d0:46:
         38:34:c6:80:47:72:aa:e9:b4:36:3b:a2:29:ed:dd:63:c6:2f:
         4e:64:8d:a8:f8:12:94:e2:86:41:5c:4e:18:02:b5:43:bf:d8:
         c5:c6:05:b7:65:4f:f1:52:83:9a:e2:3a:05:9f:67:df:c2:fb:
         81:10:42:b0:86:e5:06:4f:d5:b0:a4:c4:b3:69:e9:83:e1:bd:
         fb:d8:a1:86:b6:e0:67:f5:25:cf:6d:ef:92:a2:11:a0:2b:5d:
         16:c1:a3:58:f0:44:13:05:ca:ed:71:3e:bd:9d:79:e7:5e:c5:
         b5:3a:67:e4:75:f4:0b:34:6f:87:6d:d8:0b:a5:ca:84:9f:3c:
         7f:cc:f0:8a:54:19:45:e0:1c:2d:f2:18:79:af:a5:36:ba:5b:
         e1:43:11:86:44:4c:f9:6e:61:7b:79:88:ce:f2:e4:f2:86:96:
         87:d4:de:39:97:7b:52:fe:b2:9f:13:21:b6:52:3e:94:00:5f:
         17:cf:95:97:94:80:4c:0a:0b:5e:02:2e:81:7a:e7:9b:ea:18:
         33:ea:7e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----