Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a9dd9307-35ed-4441-b495-2e5d1bcfb1c9.roa
File:                     a9dd9307-35ed-4441-b495-2e5d1bcfb1c9.roa (raw, json)
Hash identifier:          GRkPZJPfWx6+28QpmjtB/9uoBAZ7t3pfiOr80cbxrao=
Subject key identifier:   78:F0:5D:33:65:70:EE:F3:7D:38:25:1E:61:A8:63:EF:4E:A7:CC:22
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       14DDDDF8EBBB1DB613D7E33480B606A9D95CDAC7
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a9dd9307-35ed-4441-b495-2e5d1bcfb1c9.roa
Signing time:             Tue 24 Jan 2023 00:00:00 +0000
ROA not before:           Tue 24 Jan 2023 00:00:00 +0000
ROA not after:            Fri 27 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:dd:dd:f8:eb:bb:1d:b6:13:d7:e3:34:80:b6:06:a9:d9:5c:da:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 24 00:00:00 2023 GMT
            Not After : Jan 27 23:59:59 2023 GMT
        Subject: serialNumber=7ba019a4f2898f71653131c9ec203eb622c0f573479cfa82c566bbe7f7bc7376, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:18:83:ab:92:81:72:a9:a1:26:c3:f9:4e:e4:
                    45:e4:48:75:d9:e9:af:4e:eb:61:56:d9:3f:e5:70:
                    62:47:41:1c:3f:28:90:7a:30:15:84:7d:c8:80:d2:
                    53:b7:9a:81:e2:68:a7:54:92:70:47:9b:3d:b1:c2:
                    28:c1:66:60:51:0b:21:68:21:4f:a7:cb:ec:e6:96:
                    e4:18:be:47:f3:09:84:94:7a:6a:a7:e8:59:ac:11:
                    4e:d0:8b:a3:38:dc:5b:b9:51:1f:83:5f:99:7d:6d:
                    63:20:d8:f2:7d:19:e3:e9:d5:81:ec:2d:09:9a:71:
                    0b:4e:8f:84:23:55:1c:81:4a:05:e2:e4:41:7e:10:
                    6b:5e:e9:cb:ef:3c:32:a8:17:39:7b:be:79:72:22:
                    b3:62:bb:c5:ca:f4:8f:2a:56:5f:06:49:3c:38:f1:
                    0b:15:5a:75:66:6d:60:07:2e:66:8e:9f:e7:51:df:
                    77:47:b6:e4:74:e0:7e:d9:cb:ef:2b:fc:2f:3a:94:
                    5c:cb:34:34:ed:72:6a:e0:ad:53:46:34:1a:52:c7:
                    72:97:a8:c8:bf:32:d2:8b:cd:4e:bb:24:ca:36:6f:
                    f3:67:2d:cb:85:12:7f:3b:78:4a:7c:0a:c9:c0:72:
                    5f:03:cf:0f:c6:ac:d3:9b:27:b7:c2:84:5a:fd:94:
                    1d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F0:5D:33:65:70:EE:F3:7D:38:25:1E:61:A8:63:EF:4E:A7:CC:22
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a9dd9307-35ed-4441-b495-2e5d1bcfb1c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:9e:4a:ec:bd:6d:91:d6:31:9f:ac:1f:aa:7c:70:1a:24:56:
         88:e7:81:b6:f9:40:a2:bb:47:da:ef:9e:27:64:f9:e2:c0:38:
         50:22:f2:b8:dd:a8:90:78:4e:99:a0:e2:14:1d:ee:14:34:38:
         46:35:a1:3c:57:66:c4:b5:55:3b:0b:cd:ec:01:37:8c:1a:d7:
         05:46:9e:de:18:f1:3b:25:20:09:d7:f8:b6:1d:20:82:d5:a1:
         41:14:26:87:7e:47:4b:93:a2:d8:b8:14:5c:7c:4a:3c:2b:ce:
         60:d0:d9:f5:64:e5:f0:b9:7c:ef:88:20:b4:d0:1c:7c:95:e4:
         b5:b9:15:5d:5f:44:b2:2a:b9:ef:26:78:b3:38:4d:40:90:00:
         73:34:8b:15:b7:b0:66:98:b2:61:30:39:88:e3:1f:09:bb:e1:
         b4:14:ed:e9:0e:96:03:1d:8c:95:da:95:f6:55:26:59:90:a6:
         a9:a4:84:c5:1d:91:ac:45:d0:92:27:1d:f9:b9:80:bc:d3:6b:
         b9:f7:ad:ce:4f:d3:3b:2c:cc:04:40:34:59:f7:c4:53:84:c0:
         17:c6:9b:8d:61:da:7f:c5:3a:53:9f:30:b3:cb:56:8a:42:ad:
         f6:70:da:d5:a7:49:28:e0:09:7c:23:48:7b:a7:9a:e1:a8:39:
         e4:48:fd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----