Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d5232424-5fbc-4757-9a2f-6ee1ca51a069.roa
File:                     d5232424-5fbc-4757-9a2f-6ee1ca51a069.roa (raw, json)
Hash identifier:          vgm14EM0dmMG6mFc9g1BU5HTpKbRnnlr/xl3cJOHb2I=
Subject key identifier:   E1:17:99:77:15:F8:5A:00:B4:41:31:2E:5B:5A:AE:3A:A7:C4:43:46
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1BD9E63BB5371FA7493491C706EDEB22929F579F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d5232424-5fbc-4757-9a2f-6ee1ca51a069.roa
Signing time:             Tue 20 Dec 2022 00:00:00 +0000
ROA not before:           Tue 20 Dec 2022 00:00:00 +0000
ROA not after:            Fri 23 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d9:e6:3b:b5:37:1f:a7:49:34:91:c7:06:ed:eb:22:92:9f:57:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 20 00:00:00 2022 GMT
            Not After : Dec 23 23:59:59 2022 GMT
        Subject: serialNumber=600d5d1d2a96a826ba4ae9c9216f9830c0ab3550305af85b2425d6dcde1126fb, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:e1:bb:bc:8f:5d:0c:61:36:5a:dd:0a:79:
                    99:03:a9:3c:2d:44:70:2a:bc:cf:ff:82:45:fe:f3:
                    96:f0:60:53:7d:76:de:71:9c:d4:c5:cf:4f:b7:b3:
                    90:01:71:0e:98:2e:40:ce:9b:1d:15:a5:bd:40:58:
                    72:3f:6a:1d:49:fe:75:40:dc:0f:37:0d:6d:30:3f:
                    34:23:02:a2:53:d3:c2:91:ec:81:a2:8c:19:d4:15:
                    95:e8:13:07:ed:eb:22:be:3a:22:9e:09:fc:31:ac:
                    b5:a1:32:b8:af:48:0b:ec:00:65:cd:da:74:9f:53:
                    d2:6c:98:bf:41:42:d7:05:43:7d:e9:3b:c5:75:13:
                    2c:f1:34:97:00:e8:bd:ba:1c:f2:52:6e:dd:46:d8:
                    31:a5:cf:4e:23:2d:ee:53:e0:3f:1e:4d:52:14:83:
                    30:03:5a:98:66:28:67:6c:69:02:8e:12:f9:b7:fc:
                    f1:68:68:38:bd:28:5f:a3:3e:7c:20:cc:1d:b7:4c:
                    13:05:4c:a9:93:3f:1b:0e:9a:f9:7c:e3:1e:a9:07:
                    42:d2:5a:b9:04:f7:47:0e:1b:24:1a:8d:d7:eb:4b:
                    7e:fe:a6:e7:3d:fa:b4:02:c9:95:7d:4a:50:0f:cb:
                    0d:87:f7:7e:59:cc:e8:96:10:5b:6a:5e:2f:c2:b7:
                    1b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:17:99:77:15:F8:5A:00:B4:41:31:2E:5B:5A:AE:3A:A7:C4:43:46
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d5232424-5fbc-4757-9a2f-6ee1ca51a069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:df:74:6f:e1:33:5f:8d:35:69:4a:96:7a:82:65:a9:2a:a3:
         85:e2:7e:7f:22:1c:d8:f2:90:26:82:9a:a1:b6:59:d9:29:71:
         d3:70:51:cc:69:50:2e:93:d6:70:81:a2:9c:9e:59:a9:40:f9:
         5d:9d:66:09:2f:44:51:79:ef:de:ef:29:50:12:81:4d:2a:f2:
         9a:6c:38:61:51:72:09:a1:75:e7:f9:58:f7:5d:0b:c2:81:6d:
         e3:92:f0:3b:66:ab:01:40:31:99:7e:e1:09:fe:35:55:b3:1c:
         bd:8e:91:70:9f:50:90:ba:63:59:aa:2a:2a:8d:cf:de:a7:be:
         29:d7:c9:1b:aa:1a:89:af:e5:60:01:9a:7c:43:3f:7d:3d:cc:
         a4:c4:6f:d0:8f:be:90:ee:14:27:50:bb:ea:41:fb:c5:4b:4e:
         88:b8:01:13:b2:ac:3e:34:cb:c6:a6:87:ac:99:11:af:6a:cb:
         fc:a6:a3:4f:01:42:6f:25:85:04:d8:87:e7:75:a2:16:04:da:
         32:44:d6:31:d2:04:21:85:32:85:7b:ec:59:2e:c6:f5:e1:fa:
         7f:6d:13:83:fc:42:57:04:99:26:6a:f5:ce:ee:c0:eb:93:40:
         b3:c5:9c:be:be:71:7a:ce:d0:da:3b:46:77:e0:ba:38:ae:72:
         ee:4b:fa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----