Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a70422fe-6212-48c6-ad5f-649c90eaf81f.roa
File:                     a70422fe-6212-48c6-ad5f-649c90eaf81f.roa (raw, json)
Hash identifier:          y8pn1A19xU8hXfrHC9Znk4UBL4xAUjBXhwZCt0p92m8=
Subject key identifier:   08:A4:2E:40:C2:E4:06:27:B7:13:36:81:76:AE:AF:6B:DC:97:5B:92
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       469721F544E60E7692BCE505E84C91D5DDAA9B7B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a70422fe-6212-48c6-ad5f-649c90eaf81f.roa
Signing time:             Mon 22 May 2023 00:00:00 +0000
ROA not before:           Mon 22 May 2023 00:00:00 +0000
ROA not after:            Thu 25 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:97:21:f5:44:e6:0e:76:92:bc:e5:05:e8:4c:91:d5:dd:aa:9b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 22 00:00:00 2023 GMT
            Not After : May 25 23:59:59 2023 GMT
        Subject: serialNumber=12b1a4679441f7a1a990799cc898aabcbb5c823067e236bacceabe835c0a7e35, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:32:f7:34:ce:b7:88:18:6d:8b:9c:65:5c:
                    04:07:6d:9c:eb:cf:e9:60:12:cf:af:a4:9c:ef:94:
                    36:98:d0:f3:ca:da:2f:4e:67:df:16:e7:15:7f:82:
                    11:22:2e:da:01:5b:f2:23:dd:f7:95:91:f5:54:b6:
                    dd:a0:8f:ee:ee:62:7c:a1:3c:f9:65:e8:cc:46:41:
                    06:2d:db:f7:7e:05:62:d1:29:c5:6d:f9:1f:78:a9:
                    51:9c:14:25:0f:1d:40:12:ed:ce:dc:ca:a0:3e:3b:
                    b8:6f:87:9c:75:20:cd:43:37:bd:55:ec:47:87:be:
                    08:0c:3d:b1:d6:e5:96:a8:38:28:cd:20:bc:1c:2f:
                    08:90:a4:40:43:04:ef:c1:15:a2:0a:c8:d9:be:0b:
                    d0:d2:0e:01:2f:f1:95:cd:26:03:b5:d3:7b:28:60:
                    5d:e0:fb:cc:28:d4:c8:2c:5e:d8:a7:2d:b6:5e:ad:
                    74:49:e2:4b:2c:3e:29:ce:e6:28:3d:e1:a1:a9:3a:
                    9d:9b:80:f1:a8:f1:26:e4:e6:e1:8c:75:b7:26:b6:
                    a9:6e:e2:d5:a5:d0:45:a0:2c:e3:a0:a8:61:d9:5b:
                    10:69:1f:49:a8:62:6e:87:fc:9c:81:e7:3b:fb:22:
                    6e:6c:63:6e:77:c8:94:18:c1:cf:bf:78:3b:5d:77:
                    06:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A4:2E:40:C2:E4:06:27:B7:13:36:81:76:AE:AF:6B:DC:97:5B:92
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a70422fe-6212-48c6-ad5f-649c90eaf81f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:90:bf:18:f2:bc:f8:8a:4d:8c:60:57:86:5d:c8:37:08:37:
         e0:00:b1:c4:be:03:43:8b:da:47:74:1c:66:ef:f9:87:42:9b:
         f0:d7:b8:47:ab:c1:72:d6:a1:cb:22:85:3d:e4:a1:ec:8f:30:
         35:0d:56:e2:bf:90:e2:74:72:07:32:bd:04:77:65:13:2e:8d:
         c2:e8:a6:3e:f2:85:17:ec:38:65:cf:c8:fa:d3:e9:b5:cb:70:
         1d:03:a7:de:b8:e8:a4:6f:bb:af:ce:52:82:39:a2:c7:51:e7:
         03:89:13:7d:6b:da:1a:ee:d4:6f:43:a5:03:37:e9:7d:ac:5c:
         41:a0:53:b2:e3:a0:01:df:fb:a5:1d:33:d4:e3:2d:61:fe:bd:
         c1:85:47:bb:98:31:65:cf:31:66:30:96:02:8a:97:8e:df:f1:
         ac:45:63:82:52:2e:4b:30:32:75:2c:b5:ef:0f:ea:7b:5c:df:
         8e:8a:30:d9:d6:ec:9e:c7:27:c9:5e:c0:8f:cb:33:35:11:9f:
         99:e2:ec:95:2b:44:f7:fe:76:77:43:8a:29:fb:1c:f9:9e:22:
         fd:7c:5a:81:87:b4:8e:ff:1a:fb:36:1c:d8:45:f9:7a:cf:de:
         83:a2:9d:af:9e:33:b7:18:e4:8f:86:41:17:65:83:71:8b:79:
         22:dc:2c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----