Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c0910d4f-aa65-4e0a-adf3-33be68a7c412.roa
File:                     c0910d4f-aa65-4e0a-adf3-33be68a7c412.roa (raw, json)
Hash identifier:          hOO33w0vl8O72/3HLJvyODv4UXe47CU5ptAv3D2m5Rg=
Subject key identifier:   85:89:6A:F4:F0:50:A8:40:66:53:3F:C0:28:D9:75:63:3E:B0:D6:A0
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5AA883EA0973A4FA5779A9AC184DE358D2C6B90C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c0910d4f-aa65-4e0a-adf3-33be68a7c412.roa
Signing time:             Fri 12 May 2023 00:00:00 +0000
ROA not before:           Fri 12 May 2023 00:00:00 +0000
ROA not after:            Mon 15 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a8:83:ea:09:73:a4:fa:57:79:a9:ac:18:4d:e3:58:d2:c6:b9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 12 00:00:00 2023 GMT
            Not After : May 15 23:59:59 2023 GMT
        Subject: serialNumber=b049e3889e481633948f7225405b04233a8c7fb705b8c20f81970e7d5568ced3, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:06:ab:65:08:08:a5:ca:d9:0c:8e:78:a4:
                    07:80:e4:f4:21:5b:be:31:d3:78:03:5a:a7:2e:ed:
                    df:58:b4:15:08:32:50:77:69:5a:a5:cd:51:27:38:
                    2e:63:1a:3f:5c:c5:3b:b5:8a:2a:d8:ff:c3:0f:5f:
                    c3:e0:43:ae:52:36:7f:a7:1f:af:17:36:6e:e2:67:
                    c8:e7:7f:25:b0:1c:a0:b0:4d:9e:99:b4:f9:c9:ef:
                    56:2c:8c:e5:08:00:67:fc:e9:29:1d:76:8b:3f:73:
                    ac:81:92:41:ab:3a:51:99:a3:bd:2f:7a:e2:a4:f3:
                    e8:da:49:9f:be:c3:0a:a8:b5:de:ed:b2:f2:5a:89:
                    8d:b5:64:94:52:df:87:69:8d:fd:b9:72:7b:84:89:
                    a5:a4:17:77:11:91:d8:13:3a:28:4f:c6:94:df:f2:
                    06:5b:60:15:5d:53:db:be:ab:c0:98:6a:00:32:8c:
                    3b:2b:a7:f1:07:d6:82:a3:e4:78:ba:3e:3f:b0:62:
                    6c:c5:81:d4:f1:b0:2d:5e:5d:98:38:3d:1c:fb:ce:
                    98:35:dd:a3:66:9a:ad:76:76:68:5e:c0:aa:5f:d4:
                    5f:a8:2d:79:35:3c:99:1c:d4:96:fb:89:49:3b:e5:
                    96:31:dc:bb:9f:27:cf:41:d3:8e:3c:eb:cf:3c:67:
                    55:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:89:6A:F4:F0:50:A8:40:66:53:3F:C0:28:D9:75:63:3E:B0:D6:A0
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c0910d4f-aa65-4e0a-adf3-33be68a7c412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:22:39:35:6c:2d:d8:6c:a2:5c:e5:b7:4e:3b:3e:4c:4b:9b:
         49:f6:57:90:d2:dc:a1:54:5b:e7:f0:36:37:ad:e8:44:42:38:
         55:ba:2d:1b:7a:78:43:02:f8:13:a2:23:a9:8d:a8:43:86:4f:
         97:ef:5e:8a:82:a2:a8:2a:a2:17:58:ec:3e:27:29:eb:b0:2f:
         19:91:43:d7:c3:fb:41:90:7d:45:cd:b6:c1:78:93:49:78:56:
         9a:57:bc:f8:f7:bd:01:c9:ce:2b:bc:f0:16:0f:04:e7:d6:4a:
         15:bf:7a:f3:35:e2:5c:4c:0c:98:26:f5:5a:78:7c:f9:10:96:
         7a:81:34:af:f3:a7:8f:91:7d:e6:18:a9:a9:60:bc:b3:3f:9a:
         3f:9e:d4:ce:76:89:ad:d9:21:eb:4f:c6:c1:c4:50:3e:51:2b:
         42:1f:c7:31:6a:6c:b2:2b:eb:5c:c1:62:66:3a:28:56:76:7d:
         73:24:80:d4:d2:ba:8b:ad:dc:38:0b:1f:ba:0d:da:a5:81:89:
         05:c4:c4:fc:21:9a:4a:7c:b2:91:02:35:75:ec:a1:99:c5:a5:
         58:c0:f2:47:ed:bb:d2:bc:24:3d:bc:18:f1:93:81:3d:66:86:
         e6:9f:87:1a:b9:7d:ca:81:74:95:56:85:70:e1:f3:85:b8:08:
         b4:b3:51:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----