Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cc21d44d-aba4-43ae-a7a1-f8a922b67c27.roa
File:                     cc21d44d-aba4-43ae-a7a1-f8a922b67c27.roa (raw, json)
Hash identifier:          VdpeMiL3F2lSr7mlW8iERRotzznlOGmIk0b5Nl6UdCA=
Subject key identifier:   CC:A6:DB:B8:87:BD:73:3F:9A:01:66:C0:8A:1E:4D:3F:B7:58:CC:56
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       50ACF58773304F077457FFCFEEFB74114A2392D0
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cc21d44d-aba4-43ae-a7a1-f8a922b67c27.roa
Signing time:             Wed 22 Mar 2023 00:00:00 +0000
ROA not before:           Wed 22 Mar 2023 00:00:00 +0000
ROA not after:            Sat 25 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ac:f5:87:73:30:4f:07:74:57:ff:cf:ee:fb:74:11:4a:23:92:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 22 00:00:00 2023 GMT
            Not After : Mar 25 23:59:59 2023 GMT
        Subject: serialNumber=03369de295673b3768da335cedf18daecef579fcf7a51666aef85f8dfa703a35, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:02:da:32:a2:a4:69:7b:0a:1e:5a:51:9c:
                    88:39:18:11:59:fc:a8:09:ad:09:5a:84:ef:3f:b5:
                    54:ed:23:90:88:65:48:18:e8:28:42:41:29:b4:2c:
                    74:ac:e6:54:09:62:23:aa:fd:64:4e:7e:dd:5c:76:
                    5a:41:20:4d:34:90:8f:c0:8c:68:40:3a:b2:46:98:
                    0d:a8:46:77:cf:64:d8:03:be:5e:82:66:2a:de:e6:
                    c1:e9:28:db:bc:3c:72:7a:12:e3:79:52:3f:60:b9:
                    07:2a:c1:5a:da:b7:56:20:e8:87:10:a5:22:20:f2:
                    95:de:6f:aa:4e:77:ca:0f:dd:7d:01:95:e9:ee:78:
                    f1:31:96:6a:e9:bd:ed:5f:07:62:94:b1:a5:ef:6d:
                    74:10:52:0d:b0:4e:ef:33:28:7b:d7:87:18:57:45:
                    9e:dd:ee:51:b6:c9:ed:cc:5f:d8:9f:8c:16:7c:62:
                    ce:5e:ce:2c:6c:e7:f9:98:48:4a:f7:c9:51:56:a9:
                    bc:3d:78:a5:6a:52:a2:55:3b:a9:62:54:b8:ca:6e:
                    4b:d4:01:b4:e6:4f:19:86:74:3b:6d:98:59:b7:67:
                    a2:7d:33:86:d3:2f:a8:17:e4:b4:92:da:f8:eb:23:
                    0a:9d:ed:59:6b:37:76:3a:4f:d3:e5:f4:a7:95:42:
                    07:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A6:DB:B8:87:BD:73:3F:9A:01:66:C0:8A:1E:4D:3F:B7:58:CC:56
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cc21d44d-aba4-43ae-a7a1-f8a922b67c27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:d4:20:fe:94:1f:f8:35:8e:67:26:16:f5:80:42:3c:ad:76:
         ca:b9:d6:09:e5:ed:53:09:cb:2a:ca:8e:41:52:52:a5:82:7c:
         93:5f:ad:a8:54:b5:a6:f0:a3:85:80:e0:44:0e:06:3f:9c:c3:
         f1:7a:74:c4:5b:eb:93:93:80:ea:03:04:e6:98:01:4e:65:4b:
         ad:45:54:e8:35:2b:fe:64:c9:40:50:a2:c3:c6:a8:4d:bf:28:
         e6:ef:f1:c1:d4:02:22:16:a8:56:8a:a5:7c:17:85:3b:9e:87:
         b5:5e:b2:c7:47:c2:76:aa:ba:2e:64:dc:54:33:34:aa:5c:92:
         6c:c1:52:7e:a3:93:ed:f1:f6:d6:86:ba:c5:b5:55:c4:5c:15:
         83:85:ca:1d:23:bf:88:ca:7e:0d:a6:5f:f3:56:af:9c:06:ac:
         8a:0c:23:fb:b1:11:91:58:e0:7b:92:73:25:5e:d3:18:7c:ec:
         bc:8d:96:fc:88:ba:7b:57:3f:0b:ae:ab:76:ef:a2:97:29:76:
         98:8e:69:31:46:38:99:85:a0:18:2f:08:aa:12:2a:3e:a1:75:
         42:bf:87:13:fb:5c:4e:9d:90:80:93:55:ce:e5:d9:3a:26:da:
         08:21:43:46:ff:59:2e:a9:eb:14:7a:1b:c9:26:da:56:03:1d:
         f8:e7:2c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----