Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b9e93f20-41fc-4850-b3ba-cd2434c56354.roa
File:                     b9e93f20-41fc-4850-b3ba-cd2434c56354.roa (raw, json)
Hash identifier:          p42Olpbhfvfj53Pn7XMW0/Izm1JgKewEjKRNIbpyfWY=
Subject key identifier:   A6:C8:85:CD:FF:34:9A:23:0E:7B:1D:B6:5B:0D:B8:27:C8:58:09:69
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6172BEAB36B1FF5726FDFEE3A49BDE2B78B056DC
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b9e93f20-41fc-4850-b3ba-cd2434c56354.roa
Signing time:             Sun 05 Mar 2023 00:00:00 +0000
ROA not before:           Sun 05 Mar 2023 00:00:00 +0000
ROA not after:            Wed 08 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:72:be:ab:36:b1:ff:57:26:fd:fe:e3:a4:9b:de:2b:78:b0:56:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  5 00:00:00 2023 GMT
            Not After : Mar  8 23:59:59 2023 GMT
        Subject: serialNumber=3edf4ff53a8fb30e2c944ca933ceddc52e13554ccdb2d289feadcb3e3b4b6a38, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:33:35:27:29:09:c9:be:c8:c8:6a:9f:01:0b:
                    c5:ff:26:bc:97:23:4e:5c:96:5f:ae:c9:a8:d0:88:
                    44:39:fb:02:02:1f:4c:41:36:95:e4:2c:b3:6e:ff:
                    6f:25:8e:6d:31:e0:4c:bd:dc:fd:c5:91:d2:93:e0:
                    ce:64:af:47:36:9a:30:e8:1b:96:c7:00:8f:21:83:
                    39:ee:18:92:b1:47:c7:f4:10:a8:b7:60:bd:74:e7:
                    09:31:86:7e:12:a4:90:cf:46:2c:16:86:a9:3a:ca:
                    e3:47:7c:df:95:c6:70:6f:4c:47:2b:b3:92:1e:ef:
                    fd:e1:fd:d3:c2:aa:d9:95:2c:56:1d:db:7e:08:29:
                    76:b2:8f:b7:d2:7a:12:2a:15:8c:df:ef:64:50:f3:
                    38:68:8b:6f:84:89:e3:5e:47:d8:5d:a7:7d:57:7f:
                    31:2a:e6:1f:96:49:ef:a3:52:b6:06:aa:01:5c:90:
                    ec:75:ac:1b:bf:ea:1f:63:fa:c6:c8:f7:c0:40:7b:
                    53:9b:21:6a:bf:60:24:f8:29:fa:44:9e:2f:df:52:
                    86:2a:48:00:06:fe:75:8a:9a:98:10:f2:88:a0:63:
                    68:04:79:61:cb:9b:75:ec:12:6f:ea:8d:16:e1:12:
                    5c:f9:96:36:4e:be:94:d8:3f:02:7b:7e:63:46:b8:
                    62:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C8:85:CD:FF:34:9A:23:0E:7B:1D:B6:5B:0D:B8:27:C8:58:09:69
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b9e93f20-41fc-4850-b3ba-cd2434c56354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:0d:6a:69:de:fd:83:b5:11:34:de:f3:b2:19:95:c2:d0:c6:
         c2:a0:f4:b3:45:34:19:21:e9:33:fa:71:ec:2f:00:ab:98:41:
         05:69:69:9e:7b:12:88:ea:42:01:b2:b4:84:ca:b1:ae:3a:a9:
         1d:10:14:c0:85:21:41:60:61:63:e9:47:7b:65:e3:24:e8:05:
         51:a9:f7:79:16:79:4e:ba:e0:21:59:d3:e8:a6:e1:6a:5c:da:
         da:18:93:93:f8:11:3e:56:3d:24:28:be:31:9d:9b:2c:0a:91:
         d9:94:65:58:3d:76:52:32:d1:29:4b:ea:f1:9a:e0:ac:bd:cd:
         32:9e:59:37:07:41:8b:0f:f1:10:94:99:40:fa:5c:fd:a2:cc:
         d7:c7:7c:83:cd:b4:78:d2:dc:63:e4:2a:93:c6:99:e1:92:8b:
         75:2a:07:fa:0e:28:b9:6c:e9:6f:e1:74:b0:b7:11:46:01:67:
         c8:dc:77:bd:4a:30:d0:9f:88:8c:02:35:87:09:24:4e:17:fd:
         4a:3f:4f:57:3b:53:44:3d:e7:c5:d1:4e:fe:de:71:63:b7:57:
         6f:95:a0:55:71:e6:2f:9b:21:f3:a2:19:aa:41:72:57:ad:bc:
         8d:c2:ba:cf:b0:c0:7c:e3:ec:e4:61:70:67:2e:ea:98:ad:8c:
         20:b0:21:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----