Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c0ce4365-11fb-4766-86fc-e9cdf2532309.roa
File:                     c0ce4365-11fb-4766-86fc-e9cdf2532309.roa (raw, json)
Hash identifier:          gjxqh8c8475ZaLQBrNV/dVTsnv5ghr60zeNT/8jo+1M=
Subject key identifier:   6E:5D:95:1E:FE:97:7E:65:23:02:3C:4E:54:AC:D6:C9:EA:07:97:A5
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       24A70356EC4F1BED06CE1049DB8A8C329517E48D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c0ce4365-11fb-4766-86fc-e9cdf2532309.roa
Signing time:             Fri 17 Feb 2023 00:00:00 +0000
ROA not before:           Fri 17 Feb 2023 00:00:00 +0000
ROA not after:            Mon 20 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a7:03:56:ec:4f:1b:ed:06:ce:10:49:db:8a:8c:32:95:17:e4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 17 00:00:00 2023 GMT
            Not After : Feb 20 23:59:59 2023 GMT
        Subject: serialNumber=85ae2207f0d72915eeb47109b88b7020af30c3cd6cfcdddb858ca95573d368f6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:90:54:48:61:fa:04:b4:2f:fa:83:26:c3:79:
                    5b:7d:af:13:35:c9:90:9c:10:2a:3c:c8:86:9f:4d:
                    b1:b1:22:6a:70:bc:b6:da:bc:4b:a2:bc:87:06:94:
                    a5:a2:11:40:e2:a3:5e:04:5f:ac:41:b6:91:0e:30:
                    6e:97:fa:24:7d:0e:e9:39:65:76:78:dc:9e:5e:6e:
                    21:35:2e:f0:db:19:46:a7:d4:68:3b:a1:d5:f3:ee:
                    3b:1e:01:70:8f:76:13:06:cb:61:49:c9:d4:5d:fa:
                    e3:06:4b:b9:95:17:d1:d1:5c:dd:3c:84:5e:6c:bb:
                    67:02:80:65:cf:f8:42:c1:ba:35:6c:cb:18:30:b9:
                    c7:d3:33:65:16:5f:7d:23:1b:b3:16:74:e2:f5:6f:
                    b6:37:aa:91:25:cd:e4:d1:e5:5e:b5:d2:21:6f:11:
                    f3:16:f6:ee:20:ab:52:8b:f9:12:c9:4b:bd:19:3e:
                    b5:59:81:42:2c:aa:c1:57:5b:20:bd:97:d6:ea:a0:
                    4b:60:7a:13:36:d0:3a:1a:ee:6c:c4:ce:c2:2f:a7:
                    b2:59:86:c0:3a:f5:8f:35:ef:cb:97:07:df:b5:c1:
                    36:d9:91:26:92:dc:04:11:0f:15:ea:87:0f:4f:07:
                    13:96:84:f2:db:4e:83:6c:c5:92:df:2c:33:8e:5f:
                    43:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5D:95:1E:FE:97:7E:65:23:02:3C:4E:54:AC:D6:C9:EA:07:97:A5
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c0ce4365-11fb-4766-86fc-e9cdf2532309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:d8:61:1c:09:73:f5:6b:7c:f9:d5:1c:e3:4b:69:f1:1c:1a:
         39:d3:59:e8:2e:6d:80:ca:5b:86:64:15:a9:67:0d:c0:3d:6c:
         3e:11:76:97:7a:64:83:d8:ef:ad:93:c9:55:33:8f:58:c6:3c:
         b4:71:2f:d3:01:2e:5c:37:7e:e2:b5:1d:cc:42:36:98:b7:bf:
         05:d9:35:31:6e:80:d8:d9:75:2a:84:05:8f:bc:15:dd:bc:c6:
         3d:73:bd:0f:b3:00:52:d7:d6:c3:8c:9e:db:9c:ac:73:ed:eb:
         d6:cf:aa:a0:9e:a8:65:39:b8:eb:c8:30:5f:71:bf:23:10:1f:
         40:4c:e1:d7:0b:b7:86:e4:36:17:bd:8e:2a:d9:c7:d6:97:fa:
         4a:81:43:7b:fc:f8:a2:a1:22:2e:b8:f6:60:b2:b4:94:de:e3:
         b4:6d:12:3e:d4:c6:ef:88:c2:b9:d2:d7:73:93:ee:9a:ae:e0:
         e5:92:a8:38:e5:2a:1d:90:04:a4:8d:64:06:31:81:99:52:68:
         c1:97:19:67:e3:56:bc:5d:a0:4e:e8:89:10:92:5e:7d:14:d2:
         f2:e5:87:0b:10:f1:16:11:1a:f1:75:3d:33:e0:d9:e3:88:99:
         2f:df:3d:7e:60:ca:6a:fa:0d:5d:b5:ca:c8:5b:a0:59:33:c0:
         f5:49:60:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----