Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d50c08d5-409b-4f1b-96a0-c11b1d5c3b92.roa
File:                     d50c08d5-409b-4f1b-96a0-c11b1d5c3b92.roa (raw, json)
Hash identifier:          /Z7E3Jz285PI1xcmlFeyDc2wAdGzt+nlnWW4ztXrsx0=
Subject key identifier:   34:71:1B:38:52:31:ED:42:C0:1D:62:0B:F3:FD:B4:C1:90:2A:41:0B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0BE0244EA4D38E943B026DDA896E8440E2B7AA29
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d50c08d5-409b-4f1b-96a0-c11b1d5c3b92.roa
Signing time:             Sat 11 Feb 2023 00:00:00 +0000
ROA not before:           Sat 11 Feb 2023 00:00:00 +0000
ROA not after:            Tue 14 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e0:24:4e:a4:d3:8e:94:3b:02:6d:da:89:6e:84:40:e2:b7:aa:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 11 00:00:00 2023 GMT
            Not After : Feb 14 23:59:59 2023 GMT
        Subject: serialNumber=82adada6f6fee5c5622bf89d2168d3d6cd1d90aaabb968d199e0f1967e29430d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d8:53:c6:c9:45:ed:4c:b2:fa:da:11:aa:b5:
                    b9:41:55:10:d9:c6:c8:fd:c0:91:5b:97:4f:86:17:
                    06:de:ed:8f:3c:20:cb:36:7b:96:b0:3b:44:7c:f2:
                    b3:d3:bd:1f:ea:72:18:35:fb:7e:be:a4:dd:06:99:
                    ff:22:e9:df:a6:60:ee:14:3f:57:fe:e7:de:a4:14:
                    19:94:6b:67:69:39:82:1d:3e:2d:e5:5e:4d:d8:ff:
                    34:74:de:ba:4c:ff:c7:f0:7a:d8:95:71:de:5d:78:
                    36:03:5e:e3:f3:33:15:09:8b:6d:ba:61:81:63:66:
                    3a:98:be:59:7a:2e:c7:dc:1d:95:e1:28:8f:1c:30:
                    1d:40:ab:75:2e:d4:1a:54:96:9c:95:1d:93:71:c9:
                    0b:e8:89:c2:5d:76:a9:45:32:f2:2e:63:73:85:dc:
                    fb:45:f5:c9:59:65:f7:fb:17:a6:84:de:8f:c5:66:
                    ee:4b:56:66:7f:99:8b:89:0e:2a:60:ab:e5:cc:7d:
                    cd:ee:02:98:2b:38:f0:81:fa:b8:70:a1:b9:66:39:
                    6b:71:2c:2b:58:cf:cf:6b:ab:3f:36:a7:ae:b0:6a:
                    8a:95:eb:91:5a:ee:81:56:a5:79:5c:05:6c:de:fc:
                    18:7c:c7:d1:6b:f5:61:ad:04:62:c6:fa:d0:54:3c:
                    39:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:71:1B:38:52:31:ED:42:C0:1D:62:0B:F3:FD:B4:C1:90:2A:41:0B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d50c08d5-409b-4f1b-96a0-c11b1d5c3b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:70:43:ed:d0:4c:22:7f:aa:e4:72:ee:db:99:4c:78:a9:51:
         8a:63:f5:b4:53:ae:09:62:f0:46:07:c6:d0:f5:59:94:73:18:
         3d:8b:27:9f:5f:da:0b:11:d3:22:e1:e0:f3:92:9c:72:d5:96:
         d2:ad:77:07:ba:41:ee:2f:cb:3d:f6:c3:f9:11:51:6f:b6:d9:
         64:70:dc:30:56:97:07:83:16:b6:a6:6a:48:b0:e6:d2:8e:21:
         cc:0f:aa:c5:9b:1b:22:a1:fe:c9:55:5b:db:11:29:f6:9f:3a:
         fa:5a:51:c0:a7:eb:66:95:05:e6:a3:e1:c2:f6:44:bc:fa:ea:
         30:46:b9:e6:ce:6b:eb:3b:52:07:55:44:7a:33:1a:ed:ab:76:
         ac:9a:fd:42:e5:39:ed:8b:ec:50:7a:12:2f:19:21:47:58:38:
         97:51:f4:ff:5c:f0:7e:77:62:bc:15:89:c0:39:72:b0:46:36:
         b2:52:0d:8f:22:87:b7:60:c5:e1:9f:1d:a6:d3:bf:a6:ad:be:
         b9:f2:18:9b:24:c1:ba:8f:58:1c:80:1d:18:12:ea:6d:c5:11:
         17:77:b5:3d:3b:10:71:db:73:d1:0c:b7:3c:ff:f4:ee:65:dc:
         16:e6:ed:59:b0:25:20:69:3b:18:16:a8:da:52:d8:36:8a:6f:
         a8:ec:b9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----