Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bdca7e99-1e72-4d45-b03e-c504c071861e.roa
File:                     bdca7e99-1e72-4d45-b03e-c504c071861e.roa (raw, json)
Hash identifier:          vaqv8KVp0KQkEoejsqBiAaJ9I9J2Gp+Ui36cOu8olLs=
Subject key identifier:   72:49:C0:FA:EA:50:F4:CD:54:94:38:C7:6A:04:65:59:7E:DC:CE:3C
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       20710E4A089F59E1ACEC9F18478D97ECFE7D7107
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bdca7e99-1e72-4d45-b03e-c504c071861e.roa
Signing time:             Wed 26 Apr 2023 00:00:00 +0000
ROA not before:           Wed 26 Apr 2023 00:00:00 +0000
ROA not after:            Sat 29 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:71:0e:4a:08:9f:59:e1:ac:ec:9f:18:47:8d:97:ec:fe:7d:71:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 26 00:00:00 2023 GMT
            Not After : Apr 29 23:59:59 2023 GMT
        Subject: serialNumber=da125f3ec62853ddec8afeb479411d04593650dd08cedf7df3a638b4039ae746, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:80:8c:96:e6:e0:b2:11:3c:be:cb:62:ff:0a:
                    f6:91:3b:2f:a4:97:85:f6:c5:d8:b6:d2:ce:fa:9d:
                    38:44:76:21:9d:3d:4f:65:31:f2:d2:03:8b:f6:91:
                    44:67:01:d2:c8:72:74:de:02:5e:bf:25:18:7a:32:
                    77:08:c9:fd:3e:f3:47:e1:40:5a:a2:90:31:87:e1:
                    64:07:c7:7c:a7:27:58:2f:6a:5a:e7:b3:03:02:33:
                    5f:fd:a1:eb:9d:a1:7e:ea:3a:40:07:24:af:44:56:
                    8e:a5:2b:05:42:9e:69:3e:f5:f1:94:36:1d:61:39:
                    e3:46:55:2d:85:25:b0:d0:4d:0d:2d:a0:73:31:5c:
                    e8:cd:d5:d8:d4:00:7e:b2:37:57:88:a8:93:61:88:
                    9c:99:f7:44:11:64:03:48:34:f7:7f:be:80:95:d5:
                    4b:10:0e:4e:a0:2b:2c:cb:de:0e:ac:09:b6:2a:98:
                    51:bc:b3:c3:27:59:69:b4:7d:d5:0b:78:67:44:38:
                    e7:78:57:97:21:2b:be:21:fc:8a:63:3f:3e:69:7a:
                    98:5a:65:ee:6b:93:a6:34:43:ca:54:73:b3:9e:52:
                    73:56:97:8a:aa:d7:a0:7d:ac:74:80:40:ae:1f:3b:
                    09:80:58:32:1c:92:cf:6a:4f:e0:a9:64:55:1b:25:
                    91:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:49:C0:FA:EA:50:F4:CD:54:94:38:C7:6A:04:65:59:7E:DC:CE:3C
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bdca7e99-1e72-4d45-b03e-c504c071861e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:5c:b8:24:bb:cb:e1:a4:b7:81:95:7f:71:4a:f6:d1:36:4f:
         e7:95:23:0a:5f:17:b8:d2:4c:74:2a:e6:0b:aa:7b:76:c5:f2:
         21:ae:07:41:a4:c8:68:6b:c3:f4:0f:32:1a:67:b4:b7:39:50:
         bb:36:72:3c:29:4d:8e:ed:9d:e9:7a:e3:0d:5f:cb:70:0d:4b:
         a8:dc:9f:b1:f4:75:20:97:cc:3e:26:37:c2:46:1b:63:5d:b4:
         f8:74:c1:e8:9b:7e:bf:48:3e:b9:86:57:e3:a6:03:77:48:d2:
         58:69:5d:50:99:b4:fa:3d:6e:34:51:3d:c0:6a:96:ed:92:80:
         a3:90:a3:3e:8a:63:67:6c:ca:66:08:43:44:6c:0a:10:de:df:
         91:51:6e:cb:1b:4b:cf:9a:91:73:ed:57:7f:aa:7c:b3:36:d1:
         99:9d:d5:ce:48:31:bc:c5:83:74:21:8e:4f:e2:c8:48:42:7c:
         2c:9b:50:c0:da:00:7f:24:e5:49:e0:66:71:1b:1b:72:91:8f:
         63:8b:71:eb:c9:f9:eb:50:ad:9c:f6:52:0d:d4:24:9d:98:0b:
         20:d1:0b:ac:e3:3e:32:e6:25:b6:b8:fd:21:6d:13:79:94:db:
         4a:f5:42:05:6d:e8:c6:a2:17:b3:bf:31:d4:d2:6c:96:8e:f1:
         b9:99:a2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----