Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9748b794-d940-4837-b443-a47ec477076b.roa
File:                     9748b794-d940-4837-b443-a47ec477076b.roa (raw, json)
Hash identifier:          Xn16D3TNuIkGOkVig4nhCXvgeXsYz0B7wwO+0YZAKUQ=
Subject key identifier:   9B:50:A0:C6:71:22:A4:0A:FC:C9:8B:9E:BE:E1:C9:B8:42:A8:B7:C5
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1C040CFC9DA8AC419DEDC602A9355ADCEFBBB0E9
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9748b794-d940-4837-b443-a47ec477076b.roa
Signing time:             Tue 14 Mar 2023 00:00:00 +0000
ROA not before:           Tue 14 Mar 2023 00:00:00 +0000
ROA not after:            Fri 17 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:04:0c:fc:9d:a8:ac:41:9d:ed:c6:02:a9:35:5a:dc:ef:bb:b0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 14 00:00:00 2023 GMT
            Not After : Mar 17 23:59:59 2023 GMT
        Subject: serialNumber=4a37ab534e59f2f395a1adaa1c7bfa7b5023b351a518cf69da506fe8111e8156, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c5:05:fa:60:37:50:ea:bb:15:51:4d:ba:29:
                    49:7b:00:7a:dd:45:fd:8e:3e:1f:d7:57:15:8e:9f:
                    ce:74:9e:aa:ef:68:3c:1f:a0:83:bd:cc:17:81:4c:
                    89:a8:6d:b9:a1:16:12:9b:79:58:d5:f6:02:7e:ac:
                    d2:5a:12:6c:62:99:45:96:8c:f6:7d:38:cf:40:89:
                    2f:20:3a:08:b5:bf:77:19:a4:ca:d2:da:ab:a1:eb:
                    b7:4e:1c:a2:fd:1f:99:c0:4f:1e:75:06:7c:e3:cc:
                    d0:05:d4:76:65:3c:23:13:a1:d3:34:bc:c6:08:a5:
                    50:c4:e6:e6:05:d6:d3:32:70:4d:ee:b1:52:1f:16:
                    df:89:83:4d:06:1b:b4:1f:f9:fa:7e:25:ca:65:17:
                    bf:ba:83:58:13:7b:90:88:f9:69:d1:e5:32:77:73:
                    95:ad:40:23:26:19:c2:6f:56:60:d7:31:de:f3:e8:
                    c0:31:d9:63:bb:c7:63:32:b4:d3:01:02:77:2b:92:
                    d9:c9:4d:ec:d7:0f:79:cf:93:ae:1b:74:a2:3d:b6:
                    e4:eb:2d:49:b4:01:cb:82:aa:33:d1:46:cc:16:b0:
                    78:f1:f7:c8:b2:56:aa:82:55:6b:5e:b7:9e:33:fe:
                    a3:46:6c:2e:2e:1d:b9:b3:9e:ba:bd:03:28:fa:e2:
                    60:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:50:A0:C6:71:22:A4:0A:FC:C9:8B:9E:BE:E1:C9:B8:42:A8:B7:C5
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9748b794-d940-4837-b443-a47ec477076b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:e8:82:b7:fb:16:05:4c:02:cb:37:3b:bb:b5:72:7e:b9:22:
         7d:bc:64:52:0e:be:44:76:da:1d:21:2c:c5:18:e1:0b:3e:76:
         a3:d6:44:f5:36:30:3d:5b:f7:1b:41:62:d1:69:e6:c3:86:c2:
         7e:c3:93:06:2e:a9:9b:38:b6:c3:f7:f9:2b:42:33:2b:ef:16:
         07:93:9a:b4:83:16:31:12:6c:97:32:36:50:b8:85:77:d9:bc:
         f4:9a:a3:f6:a1:5a:23:c3:af:a3:66:37:d3:b2:4c:de:d0:c7:
         35:46:29:a1:c1:49:e6:d7:b2:42:0e:b2:8c:75:20:1f:95:e3:
         b4:e2:40:4e:ed:00:12:08:71:3f:34:cb:a9:2c:c6:b2:60:47:
         f2:e2:45:70:31:a5:71:59:a7:8b:f1:5b:6f:e8:ed:f4:3d:c4:
         e9:47:88:10:05:72:91:60:d4:86:33:20:25:d0:aa:28:5c:ee:
         26:4d:10:ed:f9:44:95:ca:1d:27:3d:c2:83:37:c1:0c:51:06:
         86:3e:76:ae:01:b5:f9:7a:91:a4:b2:02:d6:6c:3b:75:a3:0c:
         fa:84:94:9d:e8:41:d8:6f:f5:c2:0e:03:b6:e4:89:3e:64:85:
         56:d8:22:67:48:64:6d:60:e7:1c:1a:b1:9e:ce:88:5b:50:02:
         08:00:a9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----