Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d8cb9ce1-365c-4af6-bf2b-fc70511a5b80.roa
File:                     d8cb9ce1-365c-4af6-bf2b-fc70511a5b80.roa (raw, json)
Hash identifier:          6jPIGbTooS+yrljA5ENVnB+Tmpg66IPfi6X6Gpk8J30=
Subject key identifier:   4E:95:EA:EC:AF:7B:7E:CB:66:C0:E1:61:E4:3A:51:0A:AE:61:CE:FE
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       62B0978BC1D46E9E13248A38E198B920CAC0788D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d8cb9ce1-365c-4af6-bf2b-fc70511a5b80.roa
Signing time:             Thu 23 Mar 2023 00:00:00 +0000
ROA not before:           Thu 23 Mar 2023 00:00:00 +0000
ROA not after:            Sun 26 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b0:97:8b:c1:d4:6e:9e:13:24:8a:38:e1:98:b9:20:ca:c0:78:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 23 00:00:00 2023 GMT
            Not After : Mar 26 23:59:59 2023 GMT
        Subject: serialNumber=1ceadafe9832c880f9a84adb7be0dfc80d9d21fac5a4db39c7674291c69a3c1c, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bb:dd:a7:d5:0b:37:f2:84:6f:33:62:86:df:
                    19:ee:48:42:d6:db:85:24:62:61:12:93:08:0e:bc:
                    df:e0:23:50:88:77:94:35:51:cf:b0:22:d9:d6:8d:
                    39:31:e7:3b:13:de:1e:c1:be:1c:0c:c1:19:7b:04:
                    ef:b4:14:bc:78:45:e8:b7:6e:8a:aa:4c:39:6e:b7:
                    d6:f8:38:55:a5:77:d5:8e:d0:3d:0a:9f:81:d9:d8:
                    02:43:87:46:54:65:bf:74:8f:32:3f:92:b7:0a:97:
                    58:5e:6c:79:29:fe:d2:53:a5:c3:71:cd:bc:68:c0:
                    87:fa:3e:fa:d7:5c:71:05:fe:cc:76:1a:29:4e:a7:
                    38:47:b6:dd:16:a9:8d:9c:e4:92:c9:00:82:55:6b:
                    c8:c6:8c:3d:f6:ab:03:0f:3f:1c:34:87:9a:45:43:
                    71:74:05:67:a4:e3:cd:e0:75:7d:d1:f2:ef:7b:4a:
                    7c:d1:16:c7:be:99:b3:e9:cc:73:f7:fe:30:58:53:
                    61:2e:35:16:94:b6:97:7d:71:e7:3c:90:00:3f:6a:
                    ae:49:47:08:d4:4a:f4:aa:9d:11:08:8e:e5:87:2c:
                    ac:72:18:7b:00:34:3a:5c:ee:71:b8:9e:c2:c1:6c:
                    6d:70:20:93:4b:9e:48:25:ab:6e:a6:bf:18:91:21:
                    ab:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:95:EA:EC:AF:7B:7E:CB:66:C0:E1:61:E4:3A:51:0A:AE:61:CE:FE
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d8cb9ce1-365c-4af6-bf2b-fc70511a5b80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:9d:a3:d2:1c:09:30:2d:82:7e:05:3a:18:e1:54:dc:64:9a:
         21:25:d1:81:ab:e5:a8:ac:e0:7f:49:2e:8d:82:81:85:9e:5c:
         aa:8d:cd:db:ae:b4:05:7f:2a:56:4c:2f:43:97:85:c5:40:6b:
         0d:1e:27:3f:fb:0d:fc:c1:7b:74:74:af:fe:fa:65:30:dc:3e:
         e7:1c:ac:cd:38:aa:86:e6:8e:37:29:41:6b:58:d2:3a:9d:d4:
         83:c5:fb:3f:90:48:b8:0c:ed:15:54:28:f2:1e:39:68:17:78:
         58:73:ea:e8:d6:fa:31:e5:98:f7:b4:61:ed:98:e6:6d:35:c7:
         e3:85:97:d7:8e:8d:4f:a8:01:1e:47:34:81:df:23:26:6a:11:
         37:ab:e4:1a:a5:d5:79:1a:30:c4:21:01:82:bb:d9:b2:b1:a7:
         d3:8b:9e:e9:1d:dc:ef:ea:c0:36:9a:18:92:a7:70:49:81:4f:
         d0:87:01:f1:aa:7c:f4:62:6b:d1:29:96:33:d5:8a:51:af:5c:
         93:a8:51:5a:8a:b9:08:3f:7a:00:7f:e7:63:23:e8:4f:85:78:
         8e:d2:43:3d:72:94:d4:16:20:90:09:9f:d9:a6:49:84:1c:3e:
         f1:21:07:79:66:9d:98:69:b5:dd:97:a7:e3:32:cb:46:cc:e8:
         2e:53:6c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----