Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b5065f7d-374f-48e9-9d9a-80d6b73ffe8f.roa
File:                     b5065f7d-374f-48e9-9d9a-80d6b73ffe8f.roa (raw, json)
Hash identifier:          hibcoJ0Joot54nNyCXVmo3Pgkmjnh+8eNuzp7KOJs6o=
Subject key identifier:   40:0F:34:5E:0D:10:C8:01:58:7A:9D:FB:D6:5C:7E:9A:86:34:EB:F9
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       57A948313AE87D085475B2E87F6C73109FE88DB2
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b5065f7d-374f-48e9-9d9a-80d6b73ffe8f.roa
Signing time:             Fri 07 Apr 2023 00:00:00 +0000
ROA not before:           Fri 07 Apr 2023 00:00:00 +0000
ROA not after:            Mon 10 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a9:48:31:3a:e8:7d:08:54:75:b2:e8:7f:6c:73:10:9f:e8:8d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  7 00:00:00 2023 GMT
            Not After : Apr 10 23:59:59 2023 GMT
        Subject: serialNumber=edce1d772b32fc756554590ea4230741e01122090a19554703ea1b490776fc7a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:73:72:98:e8:6d:7a:14:e3:3f:82:42:f7:86:
                    36:9b:65:77:dc:f0:93:ec:76:45:88:36:14:4b:8f:
                    81:12:55:ef:d6:f2:c6:0f:7e:09:87:43:83:f1:02:
                    7d:63:3e:6a:15:19:fd:31:b7:25:61:c9:05:62:88:
                    f8:0a:cf:13:5e:4e:2f:46:52:10:f7:51:f9:37:91:
                    b5:c6:59:ae:2e:9d:e4:ce:e3:19:95:d9:a3:04:39:
                    1e:52:50:7b:aa:a4:f2:50:cc:57:8a:29:a9:13:12:
                    c8:e8:e9:38:d8:bb:07:6a:9d:9e:62:04:9c:41:05:
                    9c:d1:1a:95:ca:4b:62:29:9a:cc:13:2f:95:a5:8f:
                    4d:05:8a:a6:0c:d4:b3:70:bc:01:2c:71:d8:c9:4a:
                    67:2a:8c:ef:53:c9:f1:f6:ca:8b:ce:e4:47:a5:d8:
                    a7:a6:97:e2:50:32:62:2a:b2:7a:f7:ce:6b:94:5b:
                    5d:2c:b5:50:ae:57:82:64:d9:50:9e:5b:d9:dd:e8:
                    8e:ec:e0:34:b5:99:fb:90:45:43:0a:a8:25:d7:36:
                    25:e0:70:1b:bd:71:23:29:7a:ae:cb:de:f6:83:7c:
                    42:b7:99:22:89:04:94:8c:3c:20:ca:a1:71:2d:4e:
                    bd:c4:f6:d2:57:ba:eb:69:00:5e:45:42:49:9f:bc:
                    6c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0F:34:5E:0D:10:C8:01:58:7A:9D:FB:D6:5C:7E:9A:86:34:EB:F9
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b5065f7d-374f-48e9-9d9a-80d6b73ffe8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:b8:0f:d0:cb:b1:2e:43:52:f8:1a:32:a8:1c:3b:1a:3d:5c:
         50:b5:74:ec:f7:07:bd:cb:ea:c6:7f:fa:4e:e2:0d:54:f8:7e:
         93:5f:31:0b:98:c4:bd:d3:a3:12:ed:ba:04:c4:12:28:e7:0a:
         75:cd:9a:5d:8d:7d:89:c9:68:db:84:dc:0a:17:ce:0d:e6:39:
         4f:a1:06:93:73:c9:6d:b1:e2:23:3d:10:f1:8a:cc:c8:cd:48:
         a8:e7:d1:e7:cd:29:94:2c:11:bd:63:27:89:08:75:a4:cc:48:
         b4:4a:63:77:bc:90:68:94:68:b9:9b:d7:21:85:ba:f0:d5:01:
         32:38:cb:f3:37:22:30:cf:88:79:e7:6d:46:ba:c6:e7:4d:38:
         85:68:9c:71:d4:74:92:4f:f0:9a:c5:a9:7c:34:f4:25:2f:79:
         75:d2:61:6e:3e:e8:72:ef:f5:ba:4e:32:cb:e4:94:28:bf:fa:
         ef:2b:08:bb:b5:68:a9:a6:3d:61:e7:5c:a5:31:25:6f:1e:3b:
         90:9c:a3:1b:f9:08:7e:9e:48:20:5f:2d:c3:85:70:06:72:bf:
         22:d2:92:1d:84:84:a4:cc:b8:a2:1e:21:81:47:d0:da:84:6c:
         de:5b:e9:91:e2:70:8f:45:41:a4:80:6c:a7:9a:77:a2:d6:13:
         12:b8:b1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----