Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/afa5cb14-589a-4641-bb66-0102c80ce3d6.roa
File:                     afa5cb14-589a-4641-bb66-0102c80ce3d6.roa (raw, json)
Hash identifier:          jyNXvPNuUgECek/N8PuS+eAQO7/gEuTOaaG3+ZBRn/k=
Subject key identifier:   00:81:A6:EA:FD:5D:03:81:E5:ED:6E:9C:D2:A5:52:2E:97:A8:CB:5A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       08656242ED793EDFFC4937BBE9C6BDC2B75DE157
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/afa5cb14-589a-4641-bb66-0102c80ce3d6.roa
Signing time:             Tue 02 May 2023 00:00:00 +0000
ROA not before:           Tue 02 May 2023 00:00:00 +0000
ROA not after:            Fri 05 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:65:62:42:ed:79:3e:df:fc:49:37:bb:e9:c6:bd:c2:b7:5d:e1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May  2 00:00:00 2023 GMT
            Not After : May  5 23:59:59 2023 GMT
        Subject: serialNumber=92287f64396130c4d216831632cab39a16ceec0f76975b6067778da1fcd44c0b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b3:e6:32:5b:c4:1b:3c:b4:bc:73:cb:a5:58:
                    79:68:f2:e3:46:39:be:69:6d:35:b3:ff:79:7e:96:
                    da:92:a5:99:62:ee:38:98:8b:b6:bd:28:a9:11:94:
                    b8:b4:5a:00:02:36:a7:84:b5:c9:36:a7:1f:75:c0:
                    3c:c8:82:6c:12:11:d3:7e:a3:95:88:14:0d:30:6a:
                    38:91:60:d8:2b:f3:72:94:27:c9:12:a6:03:1f:af:
                    25:42:92:a6:b0:d7:96:0f:5c:85:1e:25:78:67:83:
                    49:cc:92:1e:bd:6a:f5:0b:85:a4:01:2f:10:69:48:
                    ff:2c:00:b3:2f:a4:0a:f4:9f:ef:81:7c:2b:0a:0e:
                    a6:a6:5c:47:a3:b5:04:d1:45:18:a6:06:ed:9d:b9:
                    a8:2e:55:e9:36:76:b2:7a:48:00:4e:b5:35:5c:66:
                    ea:5a:2d:0a:de:df:75:fa:3e:2f:be:55:f2:84:21:
                    ea:8a:26:a5:0d:78:e2:0b:c8:ab:57:74:bd:b8:33:
                    cf:2a:de:c4:82:04:fd:ec:d9:a8:06:b8:c4:a0:ce:
                    12:0b:41:05:fa:70:19:6e:70:d1:dc:f8:bb:62:af:
                    d8:59:c7:eb:e9:e0:9f:83:6e:8f:38:c7:e3:e5:8a:
                    82:52:a0:60:9a:90:d2:85:65:d5:33:4a:0f:2f:f6:
                    c3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:81:A6:EA:FD:5D:03:81:E5:ED:6E:9C:D2:A5:52:2E:97:A8:CB:5A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/afa5cb14-589a-4641-bb66-0102c80ce3d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:18:15:c1:98:67:fb:84:00:69:50:3e:d9:18:db:cd:56:2a:
         88:0f:39:c3:d6:cb:fe:aa:e9:72:33:88:2f:5f:03:e8:46:4a:
         9a:6c:0c:16:2d:4a:f9:3b:26:3d:dd:8e:45:63:3d:ca:5d:06:
         38:bd:6c:8e:3d:d4:67:cb:77:4d:ee:42:70:67:d7:44:73:9b:
         3f:8e:f6:44:f9:94:9c:6d:f6:66:34:1f:7a:93:10:b6:62:fd:
         58:b2:bc:6a:4b:3f:18:cd:b8:d2:c5:f3:1d:40:3c:be:29:67:
         22:e4:13:ea:6d:a2:d4:a8:b3:82:5c:e2:26:37:01:d6:bc:76:
         d9:ae:f1:8c:e8:f9:a3:ee:6a:b3:32:60:77:79:07:e9:88:5b:
         cb:f9:bc:ba:6e:2e:cf:b2:33:a0:95:21:61:ea:01:5c:ac:32:
         3c:f0:ef:51:9b:a5:fd:c0:39:e4:3b:05:a5:74:71:f2:c6:4b:
         fd:06:75:ef:3d:37:87:87:ea:ef:55:b8:89:fb:f5:ce:9b:95:
         da:66:e3:ed:25:02:bf:9d:ee:d5:da:e3:b4:26:fb:e7:31:f5:
         29:f8:17:26:3c:93:a7:bf:7a:df:e6:6f:b4:17:3b:ed:74:a1:
         ea:ad:72:29:96:d6:29:37:d9:99:ec:d7:b4:b4:d1:a8:90:2f:
         d7:6d:b3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----