Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c9d55d04-a7e9-4b75-9443-3714c0c002e6.roa
File:                     c9d55d04-a7e9-4b75-9443-3714c0c002e6.roa (raw, json)
Hash identifier:          /0qbR8vjSUxVXMJDKL5mRQGMSBjdEZHor8AAxI2quEM=
Subject key identifier:   02:6A:E4:ED:FC:FA:A3:C4:54:6A:45:02:16:91:7D:F9:3A:C0:8A:05
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       35826347530AD977829452E6EB56EE4EB0C23CFC
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c9d55d04-a7e9-4b75-9443-3714c0c002e6.roa
Signing time:             Sat 18 Feb 2023 00:00:00 +0000
ROA not before:           Sat 18 Feb 2023 00:00:00 +0000
ROA not after:            Tue 21 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:82:63:47:53:0a:d9:77:82:94:52:e6:eb:56:ee:4e:b0:c2:3c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 18 00:00:00 2023 GMT
            Not After : Feb 21 23:59:59 2023 GMT
        Subject: serialNumber=7c33a88a40f7ea9aa4bf67cbbd3e65aa7d21fb57bf4c5aa1d5a1a09d9e7253af, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:fa:bf:fa:13:98:f8:a6:a7:f4:77:41:a3:
                    75:f2:50:f6:56:06:cc:b7:32:98:68:de:72:09:c5:
                    20:8a:c9:89:e5:33:33:40:39:e2:72:aa:e0:63:88:
                    11:de:6a:95:db:45:30:4f:ab:fb:ae:78:96:60:f7:
                    0b:a2:ff:01:16:9c:50:84:28:ed:6d:4e:f4:b5:74:
                    cd:c7:1d:9f:7e:73:b5:04:79:c4:74:92:bb:38:b2:
                    4c:9d:2d:c2:78:08:c0:97:5e:67:e7:90:ab:3c:c5:
                    28:9e:72:79:6c:67:55:66:b9:d4:c7:77:95:11:b0:
                    e6:af:08:3a:a6:00:50:2c:32:fa:4f:bc:6e:63:a8:
                    b7:bd:28:79:39:77:1c:1b:fa:85:f6:28:b9:51:ba:
                    37:e9:08:d1:68:f8:b1:23:66:cc:4c:60:db:8a:f7:
                    f8:98:fb:30:d7:c7:be:b2:1f:a8:6c:9b:5e:24:47:
                    a5:cc:98:a6:12:a5:de:f2:28:36:ec:1b:b3:6e:05:
                    a0:56:a0:7b:ae:ab:79:3d:95:70:c9:ce:92:72:96:
                    7e:0f:5e:d3:5f:1d:99:85:31:b9:a6:c6:e9:e2:fe:
                    d3:f9:71:d4:ff:1c:f0:3f:75:14:63:95:e2:f0:57:
                    a4:1a:5c:9d:2a:e6:04:bb:05:3e:6c:e2:a7:54:4c:
                    b7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6A:E4:ED:FC:FA:A3:C4:54:6A:45:02:16:91:7D:F9:3A:C0:8A:05
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c9d55d04-a7e9-4b75-9443-3714c0c002e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:49:fc:96:3b:61:31:fd:12:ea:37:fd:d3:27:9e:d2:63:14:
         e5:85:96:63:7b:d0:ea:90:f9:64:bc:ec:5d:47:00:24:6b:f8:
         bf:03:03:0d:94:ec:36:0c:c8:1c:8b:51:93:c6:08:f0:c7:14:
         e0:18:60:f2:b8:f9:f5:07:0b:c1:e5:a3:88:36:e6:14:81:e0:
         b7:4a:48:6d:1c:04:14:d1:31:d8:38:c8:11:01:f9:96:a1:2e:
         95:b3:37:78:12:81:52:f9:a7:d9:bd:51:67:93:7c:d7:63:b4:
         b7:6e:53:21:11:9c:7a:5d:b0:58:fc:a3:9a:9b:bc:b7:29:a1:
         21:98:74:4d:e4:58:41:07:00:e1:ec:54:e7:d6:e6:fd:75:af:
         52:b3:08:ee:c3:a3:05:49:03:11:40:5f:3e:aa:42:c9:dd:43:
         78:d5:6c:8a:03:ec:53:07:9f:47:81:17:fb:98:75:77:e0:89:
         4a:e3:93:44:84:3f:d0:aa:ba:3a:03:85:ea:9b:c1:00:d8:4c:
         fe:a0:ec:58:de:53:9d:29:2c:14:20:0c:15:aa:60:97:dd:a0:
         ba:15:8a:5c:ba:88:3a:11:66:db:c2:ac:15:c2:ff:d0:e3:d7:
         69:07:23:12:6c:01:cd:50:db:ee:79:5d:72:fc:64:fb:82:02:
         0d:fa:5d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----