Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9c0b76be-dd30-43b7-a605-a1311f4caaea.roa
File:                     9c0b76be-dd30-43b7-a605-a1311f4caaea.roa (raw, json)
Hash identifier:          LQA/8EYWSK6qJ/t/4dAOJFbHDCQ1SPoQI9cy2aywhsQ=
Subject key identifier:   EE:B7:55:E1:BC:B1:17:57:22:5A:11:71:C2:C1:5B:8E:AD:E4:9C:0E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       20EE8D37F8B6543C36A6A9640BC45F0F692F1A69
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9c0b76be-dd30-43b7-a605-a1311f4caaea.roa
Signing time:             Sat 22 Apr 2023 00:00:00 +0000
ROA not before:           Sat 22 Apr 2023 00:00:00 +0000
ROA not after:            Tue 25 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ee:8d:37:f8:b6:54:3c:36:a6:a9:64:0b:c4:5f:0f:69:2f:1a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 22 00:00:00 2023 GMT
            Not After : Apr 25 23:59:59 2023 GMT
        Subject: serialNumber=5022b6e631eaed0f19709b1edbc1c2d788887c8884769f3f1331a4ce01180827, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:02:05:0c:27:cd:9f:b0:5b:a6:a9:6e:43:
                    fd:74:86:fe:30:46:68:2e:5c:bc:2a:ee:9b:de:a2:
                    6b:91:32:29:4c:da:9b:ed:4a:15:ac:9d:9e:22:0d:
                    ff:8b:23:8d:41:fd:a0:4d:04:99:14:03:13:19:93:
                    a8:bf:72:ce:21:ec:84:f5:4a:bf:6c:55:e5:ec:b8:
                    44:9b:12:b0:5f:f5:ba:8a:af:cc:2f:03:65:e6:fd:
                    f1:0d:9f:18:c7:e3:17:f5:11:b8:fc:08:43:6d:0e:
                    75:9c:40:2f:9e:1e:a7:75:1d:dc:81:23:14:74:d4:
                    ed:78:43:3f:87:4c:d9:2a:1c:55:a3:87:95:ac:38:
                    4d:22:a4:64:80:a0:e4:af:df:93:68:f0:a7:67:e1:
                    b3:cd:dc:ff:3a:70:6d:41:0c:8b:6c:5e:46:44:54:
                    c2:31:44:28:ae:73:26:a3:99:e5:d0:90:1b:7a:b4:
                    68:54:bc:e4:01:3a:42:88:27:a9:5e:54:33:79:1d:
                    b2:0d:56:7b:39:f6:a2:77:54:22:23:75:6a:16:76:
                    a7:46:9c:93:05:bf:a5:ee:e3:2f:cf:4d:1d:ef:7b:
                    a0:93:4f:19:04:8b:26:22:45:33:97:c5:fe:43:a8:
                    1d:d9:ab:f4:11:4d:17:57:af:37:76:82:65:20:c2:
                    b2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B7:55:E1:BC:B1:17:57:22:5A:11:71:C2:C1:5B:8E:AD:E4:9C:0E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9c0b76be-dd30-43b7-a605-a1311f4caaea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:c5:d3:30:14:14:fa:86:db:da:5a:e7:cc:aa:7e:75:ed:6d:
         a4:6b:1d:0b:36:b8:a1:98:ec:83:d2:f9:d5:23:02:4c:fd:cf:
         1d:f1:49:7a:88:2d:7b:db:20:e9:cf:af:86:b1:c6:1b:18:63:
         c5:0b:b4:0a:5f:fe:c5:63:41:8c:8a:e3:60:f5:ea:c4:c9:c1:
         6c:5e:f6:3d:a7:e3:26:37:13:ff:c0:3e:30:90:95:03:1e:44:
         fc:20:0e:a7:3a:37:e7:9c:ab:9a:07:03:29:3a:e5:71:a8:92:
         fa:b4:75:2e:d8:f2:ea:81:c7:96:21:b3:44:d2:de:0f:ad:d8:
         49:e1:01:8e:af:f2:2e:11:38:98:1c:35:8a:4f:54:ec:af:34:
         16:27:b0:75:1d:43:1f:3a:70:04:d4:1b:58:06:a4:8f:37:80:
         d2:97:7f:4c:eb:0e:f7:c6:be:8a:52:5d:59:dd:35:e9:fc:6e:
         e6:a0:61:4b:b8:2a:06:a5:96:ea:61:02:6c:47:89:52:24:12:
         62:95:69:14:2a:2b:3d:61:b2:52:e1:33:fd:7a:34:60:be:25:
         1f:a1:21:85:b1:54:8f:18:d6:6c:aa:19:94:42:33:ac:b9:6a:
         68:89:ab:b3:86:24:86:01:7c:b5:2d:6d:3c:6e:c2:1c:4c:ab:
         f5:6b:49:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----