Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a14dbaa0-a900-431f-afa9-5247c9a8194f.roa
File:                     a14dbaa0-a900-431f-afa9-5247c9a8194f.roa (raw, json)
Hash identifier:          XFHrwjC8pDCk/hPmyp//Z79z9C5Tyt03Pf0SzwIRBFo=
Subject key identifier:   8E:D3:8A:F7:31:D2:78:B8:54:A9:A6:FB:2D:3E:3B:96:0C:49:CA:98
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       09CF77822CE6EB65201430B7064DC0C59D5DEA03
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a14dbaa0-a900-431f-afa9-5247c9a8194f.roa
Signing time:             Sat 25 Feb 2023 00:00:00 +0000
ROA not before:           Sat 25 Feb 2023 00:00:00 +0000
ROA not after:            Tue 28 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:cf:77:82:2c:e6:eb:65:20:14:30:b7:06:4d:c0:c5:9d:5d:ea:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 25 00:00:00 2023 GMT
            Not After : Feb 28 23:59:59 2023 GMT
        Subject: serialNumber=95e769b43f4862c88cc8e09f21c7e539622ce03f90ff9b1f9ff11a05a24a1720, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8c:51:b0:25:cb:e3:c6:ac:2b:37:99:e0:a7:
                    d8:b6:57:a6:c6:fe:72:75:3a:86:b1:44:75:c6:35:
                    03:82:7d:1e:ec:ea:de:a0:0f:8d:47:d0:55:4d:fc:
                    53:56:fc:80:4c:de:20:e3:a5:97:b3:55:21:97:50:
                    c1:f7:b0:69:c3:93:ef:6d:97:d0:27:65:5e:1c:da:
                    bf:14:c3:7e:44:59:f7:36:a2:b3:d1:79:a5:a6:37:
                    8f:ca:bc:85:c6:b7:10:3f:7c:0b:c3:a8:a2:5e:80:
                    b8:ac:19:b0:04:a2:6f:f5:18:51:91:5d:8e:f6:2d:
                    49:11:85:28:a7:e9:71:9d:78:a1:1b:4a:90:a8:db:
                    c1:9d:53:9c:6d:2c:e0:f4:1a:76:c2:d0:ad:4f:c8:
                    b6:fd:44:3b:73:61:20:70:d2:e0:9a:20:f6:da:a9:
                    07:53:cd:e8:4e:3a:12:de:2f:18:30:c1:26:e6:0e:
                    a7:dd:f3:c8:c3:2f:f1:7f:b1:dd:14:25:c6:cb:ab:
                    f7:2d:86:44:62:95:7d:b0:15:79:99:4a:f5:c0:1c:
                    d3:83:61:86:04:60:69:d2:22:4c:a4:3d:9f:2f:df:
                    6c:b6:02:db:30:bc:18:9c:a7:df:85:8e:78:81:f7:
                    b2:4e:6d:ea:01:c0:e0:36:df:30:d3:44:28:cd:63:
                    34:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D3:8A:F7:31:D2:78:B8:54:A9:A6:FB:2D:3E:3B:96:0C:49:CA:98
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a14dbaa0-a900-431f-afa9-5247c9a8194f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:ec:5e:a3:84:ef:82:1a:cd:8b:45:64:7c:b2:cd:e9:ad:02:
         e4:47:b9:a1:2e:8d:c8:bc:4f:74:04:6d:bc:b0:64:59:83:bc:
         96:f5:8b:45:ca:bb:d6:cc:2c:ff:1a:54:b1:b5:75:53:7e:85:
         42:84:ad:f3:76:da:1f:62:df:76:80:d1:d3:30:69:6f:b4:51:
         43:95:0d:b8:39:c3:dd:8d:2e:f8:d1:65:33:4b:3c:cd:87:18:
         f9:9f:55:a5:e1:2e:85:da:20:09:1c:8e:a6:75:86:3a:09:4b:
         db:6f:b5:92:a2:50:c4:3f:ff:33:54:19:28:7f:2e:fb:9c:73:
         2c:22:39:22:cd:53:b8:11:96:2e:76:78:da:dd:14:0a:81:77:
         1a:82:bc:b8:bb:31:86:46:95:73:05:48:80:f3:f9:f5:70:06:
         1d:ce:bb:e0:e4:12:bc:1d:bf:75:41:e5:22:bf:68:79:0f:ce:
         90:56:69:99:37:7b:8d:4d:0d:ae:2e:dd:c1:b9:c4:dd:99:08:
         f4:d1:f4:65:95:93:15:67:ef:fb:c0:d7:c5:90:68:39:5d:63:
         83:33:4d:18:08:52:32:03:37:11:80:76:fb:b9:ad:6c:32:1f:
         f0:f4:43:62:3a:79:34:a3:64:a9:ef:2d:55:96:ef:22:9d:51:
         a0:7d:ae:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----