Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c5e90dec-1a0f-42db-9052-b6ba5b2545a8.roa
File:                     c5e90dec-1a0f-42db-9052-b6ba5b2545a8.roa (raw, json)
Hash identifier:          DP9C2jg35PXgP9UFTe+1KBKha2IpRICgtNmZ/K7+Ees=
Subject key identifier:   75:03:9D:0F:A7:1C:93:0A:93:18:95:08:36:F6:FE:D8:15:B1:FB:EF
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0EC08A1303802C2C52F8968FF1C7488E620B736E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c5e90dec-1a0f-42db-9052-b6ba5b2545a8.roa
Signing time:             Thu 16 Feb 2023 00:00:00 +0000
ROA not before:           Thu 16 Feb 2023 00:00:00 +0000
ROA not after:            Sun 19 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c0:8a:13:03:80:2c:2c:52:f8:96:8f:f1:c7:48:8e:62:0b:73:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 16 00:00:00 2023 GMT
            Not After : Feb 19 23:59:59 2023 GMT
        Subject: serialNumber=4ac68880f31b95d529df54bf6a850fcb213fee2db03e1041494d124f990105a1, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:df:76:10:85:dd:82:2c:84:60:d9:af:34:3d:
                    91:d4:3f:a9:07:54:6b:1d:3c:1e:49:a3:ed:37:f1:
                    b8:43:c4:7d:a5:b6:82:dd:87:d8:56:5b:7d:08:7e:
                    65:79:e2:1d:ea:a6:25:34:ed:11:df:db:67:34:ef:
                    1c:5f:b3:c9:24:db:e2:9b:aa:04:a9:d0:15:75:8d:
                    f2:32:30:2b:a5:1c:86:1d:07:c9:a0:aa:0e:f5:95:
                    c1:e8:ec:35:93:37:aa:9d:aa:de:c6:fb:b4:1e:04:
                    35:a2:a2:16:2a:4e:94:b6:f0:c5:d2:a4:86:77:40:
                    ad:02:84:86:ed:05:8c:4a:7c:8f:5e:48:ef:b0:cb:
                    42:d0:6c:f7:22:44:41:0d:a9:83:8c:08:0d:e5:92:
                    f5:32:9c:f7:5a:26:3d:0d:7c:fd:2e:d8:39:c5:6a:
                    39:e4:a2:e0:58:fc:58:00:49:d5:ee:c0:ab:07:3d:
                    da:a8:f0:7c:f5:75:f0:59:02:33:48:5a:2e:13:db:
                    e1:4a:f9:3b:b0:89:cb:6a:6a:0e:38:24:44:2f:31:
                    66:ed:39:f5:dc:65:c2:a8:2f:db:62:91:7b:23:1b:
                    93:13:7f:e2:32:91:eb:ce:9e:f6:10:d3:c7:16:d8:
                    a8:4c:4f:ee:55:e5:7f:05:1c:1f:48:3d:95:30:09:
                    82:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:03:9D:0F:A7:1C:93:0A:93:18:95:08:36:F6:FE:D8:15:B1:FB:EF
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c5e90dec-1a0f-42db-9052-b6ba5b2545a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:28:a1:4c:b2:9f:70:6e:c2:31:9c:97:37:bb:2a:f9:00:15:
         9a:88:35:2a:81:69:75:d2:8f:51:1c:d4:a4:92:69:60:4e:65:
         e2:38:b4:64:2e:98:16:ec:6f:89:28:ff:dd:96:df:ee:cb:9a:
         6d:11:6d:c5:25:6a:34:2b:e9:f3:22:d0:68:13:1e:aa:92:c0:
         38:ce:af:00:52:09:28:da:e3:af:c9:c2:a9:03:84:0e:b3:ec:
         77:63:de:c6:1a:ed:02:0d:d9:27:7f:1c:61:9b:8f:e1:20:91:
         00:94:e4:38:ad:bf:69:ff:93:47:ad:b1:e1:be:bb:d8:81:fa:
         e1:35:37:65:7d:64:17:43:70:be:4d:52:7c:71:15:a3:c0:37:
         d2:57:08:0c:e7:76:8a:fe:3d:59:5e:14:2a:9d:1a:00:d7:0a:
         69:35:ac:f5:a7:df:47:20:db:78:65:74:b7:9a:46:24:8c:2e:
         83:13:1b:6b:96:1f:00:90:a4:c0:5f:7f:13:48:52:bc:6e:da:
         a8:c2:a9:2f:82:ba:52:6f:38:12:01:44:13:8a:f6:f5:d8:1e:
         4b:49:af:c4:15:14:b0:5a:6b:cc:b5:63:bc:37:bb:f4:e6:b5:
         67:51:c2:c5:1e:27:10:56:1d:65:6e:15:fd:75:eb:5a:f8:aa:
         30:f6:7e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----