Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bebbd06d-0533-4cf5-bf3b-877f23e650fc.roa
File:                     bebbd06d-0533-4cf5-bf3b-877f23e650fc.roa (raw, json)
Hash identifier:          0pQ1UrdUWxu4GtPJFBZANVcFxR3qSW861gp/4mBkUmg=
Subject key identifier:   DF:AA:13:4C:86:81:6D:8C:23:E4:B4:D1:47:0D:6F:07:0D:9F:3E:D5
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7EDB4911CDADEF3961168BE1BE91D73FBB67C848
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bebbd06d-0533-4cf5-bf3b-877f23e650fc.roa
Signing time:             Mon 29 May 2023 00:00:00 +0000
ROA not before:           Mon 29 May 2023 00:00:00 +0000
ROA not after:            Thu 01 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:db:49:11:cd:ad:ef:39:61:16:8b:e1:be:91:d7:3f:bb:67:c8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 29 00:00:00 2023 GMT
            Not After : Jun  1 23:59:59 2023 GMT
        Subject: serialNumber=653a52125e0b6d76db3157e9c31b28b696cac3a25b28726dda138ad861e80574, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:ed:ab:8a:3e:42:aa:1a:36:7c:61:4e:92:
                    9f:5a:15:63:8e:d7:54:8a:45:f8:e0:b1:29:25:ed:
                    cd:58:40:df:5b:ff:b9:87:2b:9e:fb:56:ac:b7:b4:
                    1c:70:f4:ec:2c:7b:c7:fc:f1:a8:38:ca:a8:35:e0:
                    9c:b4:5b:79:84:f4:2f:38:d8:e4:91:ea:63:02:83:
                    9e:7e:ec:7b:29:5e:18:c6:fe:0d:48:02:39:2b:7e:
                    dd:5d:a2:99:eb:ef:7c:4e:06:34:1d:dc:37:6d:10:
                    d7:18:32:8b:a0:72:7c:e4:da:dd:91:c5:1b:87:f4:
                    83:2f:90:57:6d:f2:cf:5d:8f:b1:89:24:f4:02:5a:
                    14:4b:8a:cd:ed:2a:28:6d:e6:ac:22:33:d0:30:a8:
                    5f:9c:b1:38:0a:de:20:39:3d:40:79:b2:77:6c:4d:
                    39:95:58:ba:d8:07:15:f7:f1:b2:93:60:95:5b:74:
                    d6:ee:7c:11:7d:76:02:23:d9:64:b5:44:0c:78:3c:
                    88:84:07:05:d5:53:f5:74:9c:f6:94:04:ae:f8:19:
                    bf:22:e8:90:69:ae:21:9c:cb:bc:18:e6:f6:35:12:
                    7c:b5:de:76:16:fb:a0:02:e4:65:17:e2:46:2a:72:
                    be:89:72:95:4c:96:a8:ad:ab:ac:08:6e:a4:3b:f4:
                    ee:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AA:13:4C:86:81:6D:8C:23:E4:B4:D1:47:0D:6F:07:0D:9F:3E:D5
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bebbd06d-0533-4cf5-bf3b-877f23e650fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:49:83:74:b1:6f:58:35:0c:e6:ed:de:23:2b:be:08:ad:2f:
         b1:87:b3:51:5c:b2:84:27:e9:39:2b:aa:b5:87:09:1a:54:c5:
         9a:d3:ac:71:14:b5:cd:c1:b0:38:ba:99:58:ff:c3:e8:86:47:
         25:c1:70:7f:86:7e:31:c5:7a:41:13:66:28:69:30:33:b9:60:
         b8:83:8d:bf:b9:86:28:f0:09:87:a0:2e:10:72:8b:da:85:96:
         80:f8:24:0a:ed:e8:d8:fc:2e:76:1b:29:e5:95:d5:7e:d3:ce:
         35:2d:49:8d:08:d4:ae:b9:24:68:23:a2:a0:90:54:9e:5f:43:
         f4:67:cd:7f:e8:ff:0d:02:9c:97:a9:2c:4d:92:a2:ac:97:ba:
         ba:71:02:6b:7e:a0:64:2b:ff:dd:37:89:f6:ae:3f:a7:87:6f:
         58:57:7b:7c:ca:40:a3:51:ec:2b:78:bc:fb:ea:06:47:91:c3:
         25:8a:bb:bd:41:f6:54:46:c1:f9:58:65:15:dc:a7:95:f8:27:
         fb:0a:c7:a0:0e:22:3a:43:5f:2c:5e:12:bd:e4:d4:a2:db:c8:
         76:21:10:b4:2f:f1:a7:de:94:41:b3:e0:43:79:a2:6a:05:ec:
         4b:63:92:52:25:24:d8:42:71:9d:a2:02:78:c2:2e:72:f5:c2:
         1c:63:27:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----