Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bfc46374-3a15-419a-8456-71c3e42f5e7f.roa
File:                     bfc46374-3a15-419a-8456-71c3e42f5e7f.roa (raw, json)
Hash identifier:          u61cUMg9785UYEPFt1yJnfg1uFbzoTuC6hRJKlTfME0=
Subject key identifier:   C7:B5:6D:87:AD:5F:89:01:8B:56:F5:AB:95:96:A8:2C:72:0D:8B:01
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5EB66BC16F33FB0AC0DA59BF9DC11705EAD185FA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bfc46374-3a15-419a-8456-71c3e42f5e7f.roa
Signing time:             Fri 17 Feb 2023 00:00:00 +0000
ROA not before:           Fri 17 Feb 2023 00:00:00 +0000
ROA not after:            Mon 20 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b6:6b:c1:6f:33:fb:0a:c0:da:59:bf:9d:c1:17:05:ea:d1:85:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 17 00:00:00 2023 GMT
            Not After : Feb 20 23:59:59 2023 GMT
        Subject: serialNumber=b49c09b9afaa5b76979f01c6007cd312dbf929db435fe318f51525ef0de2ee5f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:69:8f:03:49:fc:3d:05:16:aa:0a:b9:27:c8:
                    af:07:94:bb:5f:c9:13:3f:6d:88:87:97:37:1d:7b:
                    7f:e3:6a:c0:4d:3d:e4:6e:74:e7:b4:ee:c6:2e:1b:
                    8e:c4:83:d3:ba:bb:d9:a9:44:ef:6f:7c:07:e4:23:
                    94:da:1a:9c:ad:13:b9:4f:db:09:de:c4:85:c6:c3:
                    7a:8f:ef:c9:6d:51:d9:a4:64:f1:41:84:d0:a7:61:
                    51:2d:8a:8e:3e:db:e7:1e:64:cc:6e:3d:22:52:74:
                    26:0f:80:28:10:ef:8d:ce:d4:0b:18:d5:e6:e2:4b:
                    55:ac:f4:c8:46:bf:40:f1:d4:f6:39:44:77:2d:78:
                    b4:f3:d3:a8:e8:61:cd:c2:1c:4a:d3:e9:d4:f4:f7:
                    80:71:e1:c7:5f:e7:80:a6:6d:6d:64:97:aa:3f:c0:
                    5b:67:ab:37:68:d2:36:05:7c:9c:e4:bd:78:52:a1:
                    b8:a8:3e:04:5b:7e:51:d8:ff:c7:8a:86:7c:13:48:
                    4e:d1:74:41:b6:06:47:b6:70:39:9e:e9:e6:18:22:
                    68:04:bd:18:66:a1:34:62:ee:69:e5:59:bf:28:e3:
                    10:07:61:55:5a:42:98:3f:b2:b4:b3:3c:4e:b7:80:
                    86:e2:16:55:74:61:53:5f:25:c3:ca:4d:f4:32:4b:
                    9c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B5:6D:87:AD:5F:89:01:8B:56:F5:AB:95:96:A8:2C:72:0D:8B:01
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bfc46374-3a15-419a-8456-71c3e42f5e7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:18:6f:c8:0f:44:f3:d8:64:69:4d:fb:77:a5:c8:bf:f4:d7:
         1c:df:34:88:00:dd:0d:23:ee:ef:3b:a1:5f:0b:44:9b:7c:0a:
         43:5b:7f:c0:49:d2:81:6a:58:12:ca:b0:bd:a5:05:2f:fe:b1:
         28:da:0a:3d:e2:f4:b2:28:52:14:03:b3:a3:17:82:3a:78:d1:
         6c:2c:de:9c:ee:32:56:7c:ef:71:4e:b3:6a:8a:65:a3:e5:e7:
         ec:c0:b2:3e:eb:b5:f8:0e:71:57:11:5b:b5:ac:6e:a7:54:df:
         84:fa:59:38:07:06:5a:7c:db:17:9c:c8:9c:74:f8:fa:49:c9:
         d7:f7:fe:19:34:76:e5:da:c5:a9:e6:15:da:39:69:ec:55:d8:
         94:40:3e:b1:27:3a:e9:18:a6:68:4f:d2:df:45:54:56:ae:d0:
         c5:8b:0a:06:03:1e:22:d8:31:93:8d:1c:17:10:4a:a8:b0:dd:
         c7:46:d9:66:72:be:fc:50:35:e8:f2:58:2a:b4:d9:97:2f:d5:
         9d:74:0f:4e:8e:a0:fc:b9:62:70:62:0b:60:55:e3:6a:bd:bb:
         a2:f5:55:28:52:63:d6:24:6e:a2:cc:1b:ac:1f:b2:05:9b:26:
         bd:46:a8:8d:0f:ca:34:cd:02:a7:df:7a:4c:3e:f9:27:f9:bd:
         5a:3f:49:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----