Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ca3b263b-c68d-47a4-881e-ab19eedbf7db.roa
File:                     ca3b263b-c68d-47a4-881e-ab19eedbf7db.roa (raw, json)
Hash identifier:          NHtJOJZyNV5zr4y0rDKekikP8v5t4qZQQKxyLHnK45w=
Subject key identifier:   74:F2:E3:3F:1E:48:24:CD:D6:4A:F1:DE:6C:5E:6A:79:CF:D0:9E:3F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4E2A33FB416E9F25BF4C7059A90BBD22F7753A36
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ca3b263b-c68d-47a4-881e-ab19eedbf7db.roa
Signing time:             Sun 19 Feb 2023 00:00:00 +0000
ROA not before:           Sun 19 Feb 2023 00:00:00 +0000
ROA not after:            Wed 22 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2a:33:fb:41:6e:9f:25:bf:4c:70:59:a9:0b:bd:22:f7:75:3a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 19 00:00:00 2023 GMT
            Not After : Feb 22 23:59:59 2023 GMT
        Subject: serialNumber=a5f5eecc01ba48fd6be4d6d4affc82eb1ac459cff9ed62682a68fa2effce130e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c2:a7:78:ee:a8:03:be:74:db:78:36:38:77:
                    c9:ff:98:e4:4b:30:22:80:14:ee:6b:55:f0:38:4f:
                    f8:37:bb:0f:cc:de:32:fe:39:7a:be:52:3e:43:48:
                    27:f0:2b:97:2a:d1:b4:98:09:1c:8a:51:a1:af:7e:
                    3e:17:ad:0f:8c:9b:4a:dd:fc:9f:0f:77:21:d7:76:
                    79:23:cb:93:f7:9e:a1:b8:be:13:47:2f:fd:bc:6b:
                    e3:5d:2b:de:4f:41:14:3c:30:8b:ef:91:2d:63:c2:
                    ad:d3:5f:50:8d:c7:6d:8a:e8:fa:8c:f3:6b:22:6f:
                    bf:ef:7d:ab:e1:00:1e:56:12:dd:79:a8:ac:89:b7:
                    14:b7:ee:d7:e2:2d:c0:33:3b:b6:ff:ca:18:ed:66:
                    d8:bf:fd:4d:f0:a6:4d:48:b5:62:47:dc:27:9c:cb:
                    72:1c:41:7d:6b:20:b4:22:23:0d:60:6d:13:2d:3d:
                    e5:01:45:59:9c:64:99:8b:07:c4:8e:4b:7d:8a:53:
                    3c:40:6d:29:8f:c0:78:26:3e:8c:e2:30:fd:27:3f:
                    d5:2e:c2:9d:3b:5d:5c:5c:cd:93:6a:7d:50:72:c7:
                    76:7a:d4:48:9c:78:c2:2e:5e:01:58:0d:bd:d6:1f:
                    c5:50:dd:4d:b6:82:82:0c:83:f9:ee:9e:0c:5b:2b:
                    89:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F2:E3:3F:1E:48:24:CD:D6:4A:F1:DE:6C:5E:6A:79:CF:D0:9E:3F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ca3b263b-c68d-47a4-881e-ab19eedbf7db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:ce:f0:be:ab:ba:e1:05:20:49:d1:72:a5:21:98:57:56:22:
         0d:90:2f:27:6a:f2:42:98:e9:b6:dc:10:ab:a2:34:3d:d6:c3:
         9f:65:f2:39:c1:90:bc:2f:10:65:77:04:dc:13:e0:39:57:4c:
         9e:bd:07:1d:e6:eb:2e:b0:1f:7b:a8:1d:ad:bb:fb:75:ab:21:
         f4:27:c4:40:2e:0f:0c:60:c5:ac:dc:72:97:64:ac:84:b3:26:
         17:56:0f:c0:60:c5:f8:af:18:2f:c6:47:12:d6:94:50:b8:a0:
         62:ab:73:9e:2e:cd:65:8a:5a:99:c1:b6:5c:d6:bc:f5:fa:96:
         3c:a7:a5:d6:6c:41:e6:e6:02:0d:43:06:1d:58:64:96:b3:ac:
         97:32:46:71:a4:98:98:9d:df:48:00:f7:de:ae:2e:81:f6:41:
         90:c9:db:81:6f:0e:08:34:22:fe:6a:ed:84:c1:2b:d6:19:11:
         26:f8:53:76:c7:2f:b5:f1:41:5b:ff:6e:55:72:57:68:64:9e:
         b6:61:8d:b6:83:39:19:39:f3:70:b4:b7:54:dd:e4:c9:25:e0:
         28:09:78:10:bd:f2:f7:1d:98:68:f3:b1:51:d5:16:1b:c7:84:
         c8:9c:aa:fb:6c:d9:3b:72:cc:26:12:7a:22:f1:91:b3:de:6a:
         b6:6a:20:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----