Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d2f6e096-4726-4f0e-9d0f-e1db3a064a28.roa
File:                     d2f6e096-4726-4f0e-9d0f-e1db3a064a28.roa (raw, json)
Hash identifier:          PYrzYGXd/eJwfIGCSbmYSC0skKFDfJgilpkiuU/5Jt0=
Subject key identifier:   F0:34:B1:92:F2:FF:44:96:77:1B:9F:75:E0:55:5F:28:6F:2C:ED:D0
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       310A782050FD0B698EE613599383676451311496
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d2f6e096-4726-4f0e-9d0f-e1db3a064a28.roa
Signing time:             Sun 22 Jan 2023 00:00:00 +0000
ROA not before:           Sun 22 Jan 2023 00:00:00 +0000
ROA not after:            Wed 25 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0a:78:20:50:fd:0b:69:8e:e6:13:59:93:83:67:64:51:31:14:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 22 00:00:00 2023 GMT
            Not After : Jan 25 23:59:59 2023 GMT
        Subject: serialNumber=be16af4d8a05896b825fd2dd959a9b53dfb19454bd120cd44194bffc0479c5cf, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d7:09:c9:2b:6d:a5:c7:f1:fb:6a:0e:05:5d:
                    73:eb:09:36:d4:d5:0f:42:4c:ff:67:4b:f9:e7:bb:
                    24:20:1f:1f:1d:4e:b4:1d:fa:97:81:10:1f:5d:26:
                    81:e3:d8:7f:19:e1:dc:e8:91:b6:43:cf:96:87:7b:
                    70:29:41:44:8d:89:2e:93:ec:4e:e2:aa:60:d7:8b:
                    f8:06:ba:e5:f3:38:86:70:05:9e:eb:fe:d6:ec:ed:
                    4d:fd:17:08:75:eb:f0:1d:07:4f:d7:d1:d7:fa:cd:
                    ac:bb:cc:d9:96:dc:a2:66:1d:c9:30:a2:68:90:4c:
                    4b:2c:4d:2e:19:4a:2f:a5:8b:91:35:ca:96:73:ef:
                    2e:60:49:86:93:72:52:ff:9f:b3:4c:c5:d7:eb:14:
                    dc:68:d9:32:c4:72:14:ce:85:a7:db:c2:63:da:a4:
                    67:68:c5:aa:c6:75:e2:df:06:aa:c5:3d:3b:18:e1:
                    88:32:81:f2:05:82:49:49:1c:65:4b:1b:47:04:a7:
                    81:d0:50:19:da:57:70:50:6f:e0:11:1c:8e:36:04:
                    a5:ef:d7:ed:d1:e5:99:f7:76:87:e8:1a:eb:81:ed:
                    64:2b:c7:b2:c9:ad:7a:fe:2b:0f:6c:36:f2:1d:ac:
                    82:f6:7c:49:f7:36:ba:28:42:10:c2:6a:41:96:e3:
                    90:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:34:B1:92:F2:FF:44:96:77:1B:9F:75:E0:55:5F:28:6F:2C:ED:D0
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d2f6e096-4726-4f0e-9d0f-e1db3a064a28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:c6:3d:23:ed:4d:7d:14:db:3f:fa:0d:56:d0:db:84:4b:60:
         8a:3c:c4:d2:0b:ff:29:28:00:c9:e1:07:bc:ca:5f:58:95:80:
         1b:86:05:7e:15:b2:7f:fd:e2:c1:51:f8:d0:07:dc:5d:66:b9:
         9e:dd:a4:cb:f3:6a:fd:ef:51:3f:bd:ac:1f:4d:b8:bf:c2:7b:
         f0:c8:8e:6c:64:6e:ea:11:74:b7:6b:e2:4c:ac:40:d0:24:91:
         cb:a5:46:d4:9f:94:4b:56:45:10:49:53:72:5e:50:6a:1d:e7:
         2e:55:ce:83:67:eb:34:16:cc:b2:ac:6b:e0:27:ef:63:d9:3c:
         cd:b6:bd:86:a3:7e:66:43:4b:2a:67:71:17:35:40:8d:f5:e0:
         2f:59:71:66:5c:a9:7f:96:2a:c8:f9:d8:f8:b5:ae:51:42:10:
         c2:ca:f1:a6:4e:81:5c:b7:08:a2:c4:54:1e:df:6e:28:91:16:
         b5:7a:c8:db:a2:17:22:59:f1:eb:9f:2b:b4:95:8d:4b:f3:80:
         4b:7f:49:97:e4:41:b3:aa:14:58:d3:14:a0:19:d3:23:02:67:
         ea:b7:29:ce:a8:42:68:f0:ee:79:9a:a2:d1:91:96:e3:dd:d9:
         b7:5b:d2:fb:5c:4c:84:df:ab:a5:b2:4a:5b:bd:3f:eb:d4:0c:
         92:12:00:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----