Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/989ef821-3015-45b6-9221-d7005836773c.roa
File:                     989ef821-3015-45b6-9221-d7005836773c.roa (raw, json)
Hash identifier:          Nv3efUEsVOJkCdJAHUbQLwI/GF264lYQAskmVF3u86A=
Subject key identifier:   A9:50:7D:98:D6:54:78:EB:06:76:56:6F:2C:67:5C:EB:A5:FD:BD:D7
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7F44D65AF625A5EF56654E1BDCB18245ACD856EB
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/989ef821-3015-45b6-9221-d7005836773c.roa
Signing time:             Sat 18 Feb 2023 00:00:00 +0000
ROA not before:           Sat 18 Feb 2023 00:00:00 +0000
ROA not after:            Tue 21 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:44:d6:5a:f6:25:a5:ef:56:65:4e:1b:dc:b1:82:45:ac:d8:56:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 18 00:00:00 2023 GMT
            Not After : Feb 21 23:59:59 2023 GMT
        Subject: serialNumber=c9880430046decfc4b4bf004d88a250f6bf0989c4c50a46013a3f995a695aaae, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:5e:1a:16:bd:af:c6:cf:e8:5f:a9:e0:af:
                    b3:f7:a3:8f:7b:fa:32:a5:c2:2d:f8:5c:8d:8f:16:
                    de:37:09:8a:19:bd:73:8a:ae:5f:3c:bf:db:5b:3d:
                    fb:79:f2:f5:8f:04:94:16:e5:21:f0:98:4c:2b:15:
                    a3:7f:0e:28:84:e0:35:32:26:0f:f5:12:9d:f2:2a:
                    2a:ed:c9:b4:57:e8:80:11:55:3d:b7:25:d7:63:12:
                    08:6c:31:51:a1:c7:16:14:af:c0:4c:d5:2b:29:bd:
                    09:ee:8b:a0:a9:f4:3e:41:b8:1c:2d:b9:9f:c8:28:
                    34:ec:a1:f2:b1:03:a2:b3:ff:0c:24:14:f6:d7:87:
                    de:7f:54:66:f1:1b:57:52:fa:9b:e8:39:da:c6:04:
                    26:1b:fb:41:f0:98:01:af:e1:18:e5:20:1d:60:41:
                    01:35:4b:74:1f:0d:5e:5c:9f:09:be:46:d2:ed:e7:
                    5c:50:12:4e:e4:0c:ac:c8:b8:24:89:89:db:38:a9:
                    9c:cb:23:91:ac:d4:17:2e:d5:1f:38:bf:70:d5:f5:
                    86:42:90:23:6e:83:13:35:59:ad:cf:7a:96:ce:87:
                    29:d3:2c:59:27:db:d9:5a:6a:32:87:9d:88:1d:b7:
                    b3:57:ad:da:3e:f0:cc:12:bd:fd:0a:1b:e9:b3:6d:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:50:7D:98:D6:54:78:EB:06:76:56:6F:2C:67:5C:EB:A5:FD:BD:D7
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/989ef821-3015-45b6-9221-d7005836773c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:79:9c:ce:98:c6:11:ab:bc:42:80:2e:5c:7e:23:cd:94:cf:
         1b:f0:b2:c4:4b:eb:e6:14:73:f5:bf:b9:0e:a9:35:fc:9b:ab:
         e0:76:26:46:d8:97:bd:f1:22:cf:53:cb:f9:89:0d:18:31:89:
         0f:e1:3a:12:69:55:c7:57:13:ff:7c:e5:c7:00:4c:49:5c:9e:
         c9:6b:00:01:ec:aa:fe:d1:d3:be:a8:1b:ee:9a:78:cc:64:6c:
         a9:32:33:ee:47:f6:a6:36:10:bd:cf:f1:e4:cf:a2:54:92:2a:
         77:55:47:08:f9:12:7e:dc:e1:b2:c4:af:06:d6:dc:85:45:d2:
         43:01:c4:36:8f:ee:79:6c:84:eb:41:65:02:a9:b9:a8:65:59:
         ee:5f:fa:73:ec:56:c3:b5:9a:56:50:b9:51:78:81:0a:0a:60:
         c2:cf:ab:f2:d5:1c:bf:4e:c7:a1:5c:29:fe:67:02:7b:54:60:
         e5:1a:fb:3c:04:9e:f6:20:da:ab:b5:91:50:34:4b:db:69:59:
         99:a7:d5:93:a9:b5:73:5e:db:7f:ce:22:06:e4:19:85:e3:5c:
         6a:59:4d:a4:fd:35:4a:58:1d:c3:49:04:f2:40:96:89:9a:97:
         9f:18:ad:d9:00:d5:72:e8:3c:60:b3:82:bd:a5:0e:8f:8c:dd:
         b7:64:d3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----