Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b56645b8-6c12-4a23-a45e-7671c57d5cec.roa
File:                     b56645b8-6c12-4a23-a45e-7671c57d5cec.roa (raw, json)
Hash identifier:          rXVSVUZiaz/mR4Uhzo6s5f2xWvpA2/UtGt27lu9R0oc=
Subject key identifier:   5D:4A:E8:1B:64:7D:B2:3A:C0:7F:2F:99:FA:3E:9E:61:9D:A0:94:91
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4CD212F24F13FAB7D5E7060782E0CAD3F75D957C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b56645b8-6c12-4a23-a45e-7671c57d5cec.roa
Signing time:             Mon 27 Mar 2023 00:00:00 +0000
ROA not before:           Mon 27 Mar 2023 00:00:00 +0000
ROA not after:            Thu 30 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d2:12:f2:4f:13:fa:b7:d5:e7:06:07:82:e0:ca:d3:f7:5d:95:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 27 00:00:00 2023 GMT
            Not After : Mar 30 23:59:59 2023 GMT
        Subject: serialNumber=bac8be05b295d210c1b770a0f423dcba61a9a2f4eb9a1056c01414dd690e7c18, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0f:c2:65:77:03:dc:55:08:c5:87:fc:42:9f:
                    68:14:35:c4:45:7d:dc:f3:b8:eb:4d:73:dd:65:f9:
                    c3:c1:92:d8:ac:a9:f2:39:ba:4c:a9:20:6b:19:06:
                    ff:d4:89:2a:e6:78:2f:98:68:ca:29:d2:c2:2b:d3:
                    18:ec:5e:49:f3:5b:bd:79:eb:59:83:3d:48:7a:f0:
                    50:d4:18:77:ce:01:a3:02:10:31:28:1a:23:28:8a:
                    d4:fd:70:db:92:34:15:88:11:b4:17:75:da:a0:10:
                    85:6b:9a:fa:61:db:f5:3b:c6:10:8b:8b:f4:c5:ce:
                    25:4b:be:e2:69:f0:54:6d:23:fe:bd:7f:44:f1:a6:
                    5b:16:94:06:f3:a4:84:ff:2a:14:eb:f5:6b:dd:b3:
                    18:ab:6b:d0:44:f7:0e:74:c6:6c:0c:96:dc:2c:c8:
                    f9:ed:ea:d9:00:c1:11:07:64:09:c1:26:7c:ea:df:
                    b5:16:fc:f3:8f:dd:60:ed:22:42:cd:d0:fd:fc:80:
                    e3:a1:4d:8a:c0:b1:8f:e9:08:98:f0:a6:bb:a7:77:
                    f1:a7:8a:fe:93:63:38:e4:c7:b3:7f:d1:ab:14:7a:
                    05:c7:52:75:87:69:b8:0f:6f:05:02:72:f7:01:5f:
                    83:ae:53:fb:0b:11:4d:b8:22:e3:90:80:cc:26:ab:
                    53:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4A:E8:1B:64:7D:B2:3A:C0:7F:2F:99:FA:3E:9E:61:9D:A0:94:91
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b56645b8-6c12-4a23-a45e-7671c57d5cec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:c8:06:ac:21:33:64:c4:db:f5:65:e1:81:17:4e:a6:79:c8:
         1c:f9:c7:01:02:d7:07:85:47:ed:80:9f:bb:98:b4:65:18:6b:
         f6:f6:e5:84:48:1d:e8:ce:52:7d:8f:bd:73:06:74:48:1a:c2:
         ef:94:bd:74:5c:23:d9:2f:47:08:98:14:a3:f0:66:c1:ad:ba:
         62:29:e7:da:4b:4d:48:84:e2:f9:4a:db:fd:c0:17:40:f8:ad:
         03:73:53:b2:21:e1:d9:ae:3b:50:bb:07:d7:a2:77:b2:3b:91:
         4d:18:b0:f1:29:64:03:61:d3:e2:73:e3:1d:03:8c:fe:23:a4:
         cd:85:71:a8:93:b9:43:92:80:38:d1:47:2c:09:83:4f:fd:0a:
         42:1b:65:a2:2a:b6:17:92:89:a4:3c:de:11:db:63:9f:86:53:
         92:bf:cf:41:70:fb:10:8a:fb:d0:ba:17:5f:43:00:d0:b7:1e:
         df:39:c5:50:d9:06:21:8a:0d:10:41:8a:0e:c4:5a:53:d5:06:
         5d:e5:07:39:08:6f:28:12:9b:52:36:df:a9:86:9e:12:c6:45:
         dd:b4:2e:54:7c:84:1c:82:47:8a:bf:30:a7:1b:0e:bc:0c:5e:
         26:e5:be:f0:36:3d:45:e5:87:af:00:2f:33:f2:27:bf:a7:c5:
         86:13:91:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----