Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9d7ae12c-4acb-428f-a319-980cd2a89893.roa
File:                     9d7ae12c-4acb-428f-a319-980cd2a89893.roa (raw, json)
Hash identifier:          Z3BGRVKMMxjynlFi1wj+/djk+0UukqVgB/xjyhfdQ0Y=
Subject key identifier:   91:7D:82:9B:23:21:15:13:12:8C:17:EE:7D:A9:6D:1D:62:D1:51:1B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0FEF369942F573981247FECC4845D61FA6C400DD
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9d7ae12c-4acb-428f-a319-980cd2a89893.roa
Signing time:             Sat 29 Apr 2023 00:00:00 +0000
ROA not before:           Sat 29 Apr 2023 00:00:00 +0000
ROA not after:            Tue 02 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ef:36:99:42:f5:73:98:12:47:fe:cc:48:45:d6:1f:a6:c4:00:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 29 00:00:00 2023 GMT
            Not After : May  2 23:59:59 2023 GMT
        Subject: serialNumber=57be3776c3a6815420dfc876694dbd5437f7d0edb4a5e2c288240921bcd0e727, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6a:f8:bb:be:37:84:f5:1d:0c:b4:e0:a2:2d:
                    51:b0:43:d4:cb:71:78:2f:4f:ea:bd:5c:3a:22:72:
                    ec:51:da:2c:89:6d:54:8f:a9:b7:91:73:c2:f6:72:
                    15:3c:00:7c:0a:ac:b4:43:cd:b5:2e:d7:2f:88:0a:
                    32:a4:c5:b3:5c:6d:38:b1:ca:ad:fa:ab:98:21:92:
                    ba:33:10:6c:69:3a:b5:43:70:3b:50:21:b7:e1:51:
                    16:b0:c1:f6:52:77:48:18:99:33:b6:df:b9:9c:10:
                    56:98:cc:71:ad:15:42:f5:5f:3f:ff:ac:dd:a8:cc:
                    e2:8a:0e:ad:dc:9b:f6:ec:58:40:51:c6:02:04:73:
                    ee:59:6e:8e:44:ed:81:89:e9:fb:f6:e2:52:ba:95:
                    d5:1f:57:08:42:06:4b:bb:c2:a8:dc:33:d0:53:30:
                    09:35:65:05:ed:ff:eb:57:65:76:2f:eb:96:8b:ae:
                    07:00:fe:dc:cc:cf:57:a5:d7:c7:bb:95:9a:ac:c3:
                    a2:f3:8c:a2:d1:6a:f6:13:65:1b:89:81:61:7f:1a:
                    4c:20:59:33:f9:70:e5:ef:97:51:f9:eb:a7:e2:2e:
                    4b:0a:34:a4:06:14:78:67:73:1f:d3:84:46:62:ae:
                    d6:e7:14:15:2d:78:a3:d5:c1:08:45:fe:2b:d3:22:
                    3e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7D:82:9B:23:21:15:13:12:8C:17:EE:7D:A9:6D:1D:62:D1:51:1B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9d7ae12c-4acb-428f-a319-980cd2a89893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:c0:c8:68:c5:8e:e1:a4:65:eb:63:b7:ef:73:e4:c6:87:b9:
         d5:4c:e8:bf:99:8f:f5:27:2e:2b:09:bc:17:fa:5b:3e:ef:22:
         fd:d7:5b:81:6b:d9:f7:df:43:e0:5d:0f:59:29:f9:e4:ad:92:
         34:36:35:41:65:8c:fc:24:47:28:fb:80:62:42:ae:7b:5d:4d:
         ef:16:28:01:36:61:68:a7:55:31:ad:d3:a5:d6:64:f7:fc:a5:
         03:79:f5:35:d3:0c:33:8c:c9:bd:f8:8e:7d:ff:5b:82:dc:2a:
         e0:05:39:9b:fb:38:7e:84:e8:28:dd:ab:39:cb:d2:fb:bb:68:
         cd:94:a0:de:18:ac:f8:30:3f:28:33:cf:0a:6a:28:ea:02:d5:
         5f:b0:1b:68:89:87:8a:d8:e6:79:5e:6d:1e:4e:a6:cc:0a:53:
         a0:a1:b8:e0:f7:c9:cf:da:ef:0f:6f:49:39:9b:e3:f6:c7:a2:
         68:13:af:20:d0:1f:d8:bc:f8:be:b2:0c:24:85:fa:31:d0:af:
         d7:fb:a2:8a:68:50:95:d1:ae:5e:6b:e0:71:be:a4:db:f4:55:
         1b:60:0e:2d:69:6f:0b:b1:09:a6:50:7a:be:6a:c1:fe:f7:27:
         dc:4c:59:49:27:6a:8e:8c:11:c5:12:c4:1c:7b:64:80:66:9c:
         07:c2:f8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----