Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a4e42c53-f7c4-4b6b-b3ad-17a3978a71be.roa
File:                     a4e42c53-f7c4-4b6b-b3ad-17a3978a71be.roa (raw, json)
Hash identifier:          w3/Jje3XeLDGkFW1vEZm0/aYZzafaOiiu0cCBxekVF4=
Subject key identifier:   03:6D:1B:C5:26:A7:6D:14:6F:0F:13:D4:FE:16:00:52:F6:2D:90:49
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6BB565427CC69372F1659C45498D3A471F1E37E0
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a4e42c53-f7c4-4b6b-b3ad-17a3978a71be.roa
Signing time:             Fri 17 Feb 2023 00:00:00 +0000
ROA not before:           Fri 17 Feb 2023 00:00:00 +0000
ROA not after:            Mon 20 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b5:65:42:7c:c6:93:72:f1:65:9c:45:49:8d:3a:47:1f:1e:37:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 17 00:00:00 2023 GMT
            Not After : Feb 20 23:59:59 2023 GMT
        Subject: serialNumber=979098d1dac762cf7202521a7fee10b4a330a68802c433b792d31e77940e81af, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:3c:c2:0f:76:a3:79:2d:62:48:c6:95:9c:9f:
                    f8:7c:c1:90:dd:31:ed:ee:42:fd:ae:78:e6:e1:0e:
                    78:46:01:6e:a7:77:85:19:c2:21:c7:60:70:fc:c3:
                    f1:bd:ef:31:df:06:42:30:83:14:7d:b9:f2:2f:c0:
                    6a:33:21:01:49:24:00:d9:cc:c3:69:81:29:39:32:
                    22:0e:c4:85:f7:0c:c0:c7:43:01:50:1c:ad:b8:cb:
                    f5:3c:3f:24:11:e1:19:ab:2f:9c:51:39:ab:de:46:
                    0b:1c:ec:36:55:02:ed:1c:3a:ab:c5:68:e5:b7:83:
                    b3:3a:b2:21:02:fd:39:75:5c:cb:d6:0d:c5:93:2b:
                    22:f6:95:85:52:fd:48:9b:2b:85:b7:78:7b:3d:11:
                    3e:ea:d3:6d:73:d5:29:37:a7:db:dc:27:48:b7:a1:
                    e9:85:10:7e:7b:74:b6:23:c4:1f:1e:5f:ba:28:1a:
                    4a:e0:b5:84:60:fa:db:bf:85:68:46:e7:e4:33:1e:
                    6b:0b:4c:76:56:d8:81:2f:a1:70:c9:a0:39:e1:fc:
                    4f:00:78:c2:b0:02:49:0a:95:bd:3c:fc:35:06:c5:
                    0a:a5:b2:48:e7:2f:c1:bc:3c:46:99:d1:a1:e7:79:
                    4b:ac:11:81:47:2f:4e:3a:7a:d7:5a:67:a8:4f:40:
                    ce:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6D:1B:C5:26:A7:6D:14:6F:0F:13:D4:FE:16:00:52:F6:2D:90:49
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a4e42c53-f7c4-4b6b-b3ad-17a3978a71be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:cf:9d:f1:96:78:ff:e6:04:44:5b:4c:b4:9f:8d:01:0c:2f:
         c5:ce:db:24:58:a4:52:cb:e9:4f:96:77:76:86:5e:50:1d:84:
         0c:78:72:fd:d5:06:dd:89:75:b5:46:36:dd:d0:97:bd:3d:e4:
         3a:de:30:c5:76:6a:aa:7a:40:22:93:fe:23:20:9a:10:26:ad:
         58:8b:a7:5c:a3:e7:28:0b:18:86:50:fb:7a:dd:9e:20:b0:ba:
         2e:01:96:21:7d:90:57:be:15:77:06:20:d1:9a:09:ea:ba:46:
         de:6f:b1:a7:3f:b8:d3:12:99:a8:ed:9d:44:4f:69:60:dd:02:
         e3:28:09:37:30:27:11:a9:11:d4:1a:c0:f1:f4:21:21:c4:79:
         d6:94:f5:46:58:d9:51:4c:f5:80:4a:11:ed:cb:56:26:31:63:
         80:96:73:53:e2:7e:94:f1:bc:45:61:ea:a4:2b:87:43:ae:42:
         81:44:07:36:3b:e1:12:3f:cc:13:6e:29:4d:0e:c5:6e:9d:99:
         2f:8a:75:e8:a6:12:0d:0c:07:1e:85:cb:08:9b:1c:53:20:1e:
         e1:9f:89:a1:ca:e4:a8:8e:36:69:a3:24:ce:54:52:1d:ba:9a:
         6c:03:92:23:87:04:fa:ce:3b:2e:3d:69:8d:f4:91:9c:66:c7:
         03:15:8c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----