Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b5926544-58d1-41dc-9c9c-c75d9f172a50.roa
File:                     b5926544-58d1-41dc-9c9c-c75d9f172a50.roa (raw, json)
Hash identifier:          U3zmkrTDoq3iv9EZnIBPTZq5Jw8iEUefPlQjo6jKAPY=
Subject key identifier:   B0:FB:A0:EE:B0:48:C4:76:99:CF:00:1C:02:DF:E4:97:B8:3D:18:35
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       02A52F2B154E85D12DFEF22864FA7154B55E68CC
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b5926544-58d1-41dc-9c9c-c75d9f172a50.roa
Signing time:             Fri 18 Nov 2022 00:00:00 +0000
ROA not before:           Fri 18 Nov 2022 00:00:00 +0000
ROA not after:            Mon 21 Nov 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a5:2f:2b:15:4e:85:d1:2d:fe:f2:28:64:fa:71:54:b5:5e:68:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Nov 18 00:00:00 2022 GMT
            Not After : Nov 21 23:59:59 2022 GMT
        Subject: serialNumber=5b3e9a017d176f5bd41260f80984d01c32ed83a22fdb9b8762aeb2f37784832d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ac:ff:88:61:3d:c1:8d:ff:03:fa:c8:e9:16:
                    31:43:5d:98:f2:d0:10:c7:3a:c9:da:40:a2:fa:8a:
                    02:e9:64:84:f2:4b:3e:22:d0:b9:3b:af:49:a4:8d:
                    9e:25:1f:0f:47:76:fb:3e:ca:f0:92:69:9f:dd:fe:
                    34:9d:30:21:f3:20:87:7e:72:2d:fb:ea:27:ee:d1:
                    2a:fa:96:0d:1f:c2:22:43:05:bb:d8:c4:d4:1d:38:
                    c3:4b:63:b2:5f:77:0d:80:0e:ca:ca:67:c6:49:e0:
                    27:4c:dd:43:af:89:f1:a1:1b:ba:9b:4a:d4:87:5a:
                    ad:bf:e7:28:ff:ee:e3:ce:74:60:1f:18:9e:85:84:
                    e2:d1:09:9e:f4:af:fa:6f:7f:a1:ed:78:09:42:0f:
                    53:ca:89:50:39:1b:6a:23:44:66:d9:1c:af:e8:a0:
                    0f:21:68:c5:10:66:5c:c4:6a:27:ee:c1:ce:a6:4a:
                    f5:12:44:a2:67:25:5e:58:63:3b:c4:51:69:18:61:
                    b4:4d:32:18:29:41:7b:0a:2b:4b:de:cb:dd:90:b6:
                    b0:00:02:01:e3:f6:2c:79:85:a4:93:33:a7:75:08:
                    bb:d7:bb:5c:6a:5c:b8:22:57:b9:96:6a:00:b4:cb:
                    a3:72:a3:d3:5e:c3:88:09:bc:fe:f6:05:79:5c:43:
                    f3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FB:A0:EE:B0:48:C4:76:99:CF:00:1C:02:DF:E4:97:B8:3D:18:35
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b5926544-58d1-41dc-9c9c-c75d9f172a50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:7b:46:53:5a:90:3c:a5:38:5f:23:75:ae:37:82:e8:87:ab:
         19:1c:98:fb:ce:56:64:8c:50:28:68:dc:dd:b0:5f:3e:38:d9:
         87:c5:bf:4d:57:24:ac:a5:d9:2e:4e:d1:3f:de:27:a1:25:78:
         68:a5:9a:a7:49:f6:5d:b8:ee:60:f2:10:bd:90:80:a9:58:fa:
         2d:ba:70:95:06:3c:3c:ce:45:8e:11:20:a0:d6:10:62:b0:5a:
         86:7b:19:da:b8:b5:79:5a:06:f4:94:35:6a:75:fe:9d:0d:ee:
         6a:d9:db:c2:d9:0b:5f:90:60:43:bc:97:24:b7:15:3e:b5:d0:
         68:07:af:28:8e:5b:00:9b:f5:60:d1:9a:e5:22:11:38:7a:e5:
         70:d3:c0:74:1c:93:bc:1e:83:f3:fd:67:fd:55:83:dc:17:ab:
         ba:c6:d0:8f:e5:a0:2e:a0:fb:1d:9e:84:47:23:37:8b:df:16:
         ec:7e:97:b7:87:66:b4:04:b2:0d:14:7f:ce:5f:ad:1b:5b:54:
         63:af:b4:c5:99:3f:21:08:c1:2a:89:12:90:24:80:3e:1b:6b:
         2e:6f:9b:de:f8:10:00:ca:68:6f:71:15:7e:3e:e8:e1:c4:c0:
         4f:63:0c:79:87:9b:ff:2d:3e:68:90:c7:22:8d:69:4d:96:52:
         51:65:68:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----