Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/db6b94be-4a30-42bd-a460-adadb4f7e548.roa
File:                     db6b94be-4a30-42bd-a460-adadb4f7e548.roa (raw, json)
Hash identifier:          pabBELla2nDAjRsei6a0SdFHfga743r415JY20Upy60=
Subject key identifier:   3F:E6:3F:A0:E2:5E:94:BF:5D:A6:47:2B:1A:F2:FF:23:8B:37:B5:CE
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7936F578F21615422FACBD4EAF29A9948D59DBDA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/db6b94be-4a30-42bd-a460-adadb4f7e548.roa
Signing time:             Mon 24 Apr 2023 00:00:00 +0000
ROA not before:           Mon 24 Apr 2023 00:00:00 +0000
ROA not after:            Thu 27 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:36:f5:78:f2:16:15:42:2f:ac:bd:4e:af:29:a9:94:8d:59:db:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 24 00:00:00 2023 GMT
            Not After : Apr 27 23:59:59 2023 GMT
        Subject: serialNumber=76c6109b684f12cbb65db51fcc4f71219f9577f215cd39d110ffc3afe70948a6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2d:96:6e:e6:d1:d3:d4:f2:c1:de:db:95:9d:
                    d7:60:05:6f:66:21:ba:6b:cc:ed:18:8d:9e:53:5c:
                    c6:ce:f5:41:09:4a:c1:69:6c:d5:cf:11:bc:6b:99:
                    02:a7:78:29:47:31:21:68:b2:37:c2:fd:84:27:5c:
                    28:84:8b:8d:a3:72:ef:1a:b0:4c:09:70:58:b0:95:
                    90:93:60:8f:85:ef:29:de:61:bc:81:cb:22:82:ac:
                    21:dc:da:0c:c1:c3:b7:a4:9a:13:b6:6e:55:42:1b:
                    65:6e:fe:5d:66:b8:1e:87:0b:a8:0b:77:cb:6f:29:
                    cb:01:be:6d:83:df:38:95:2c:cf:d2:92:df:41:8f:
                    c0:37:4d:05:1f:8f:0a:a1:50:44:11:6d:d0:f1:86:
                    37:75:34:55:31:a8:e7:79:cb:10:79:90:f3:54:98:
                    0e:86:e5:37:94:ae:a0:8f:00:db:8d:8d:5d:12:84:
                    e0:02:97:91:71:ef:0a:e8:db:5d:5a:05:99:a5:06:
                    f4:9c:2d:d9:5f:f5:3c:d5:86:da:e8:fe:7c:11:16:
                    3c:70:ca:a3:94:de:86:f7:f2:00:3c:14:85:c4:b3:
                    83:fa:65:4d:c3:2d:14:b8:28:8d:5d:72:fc:eb:94:
                    16:ff:8d:40:c0:99:0a:39:72:33:14:cf:cc:f9:9f:
                    1e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E6:3F:A0:E2:5E:94:BF:5D:A6:47:2B:1A:F2:FF:23:8B:37:B5:CE
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/db6b94be-4a30-42bd-a460-adadb4f7e548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:bc:45:1b:eb:ea:a5:dc:1f:21:3a:3e:c2:fe:8d:ee:5d:3e:
         99:b7:34:2f:ca:08:85:d3:34:78:61:1a:ec:d0:96:cf:07:84:
         55:25:71:4e:5c:f7:14:a5:fd:d4:bc:56:ed:80:17:cf:78:12:
         75:d6:65:0d:5b:04:1e:1a:0a:e4:fd:a2:4c:4f:ba:d2:d9:38:
         9c:a3:a1:32:e4:5a:ce:2e:7c:4b:6a:08:3e:10:8d:12:92:25:
         99:84:1c:7b:b2:d6:3f:7d:16:21:24:7e:0d:47:3d:1b:76:96:
         39:16:62:74:b4:4d:0f:a9:1b:5e:ad:3b:3e:7f:1c:46:1f:ed:
         7c:04:fa:7f:2a:73:88:bd:a4:6b:fd:4a:94:ef:1b:eb:c0:7a:
         99:68:27:cb:63:0c:15:f2:55:da:02:98:fe:0f:c6:8f:a2:86:
         45:b3:4b:3a:4d:f0:19:05:78:0c:97:2d:c9:6d:54:bf:75:77:
         0d:27:d5:73:21:e4:a4:e0:27:d1:89:dd:93:e4:9f:e0:b5:bb:
         5d:9a:37:b9:3b:4b:c2:6d:8a:a2:bd:7d:cf:d0:ed:3c:f5:2b:
         d5:27:41:8a:41:1b:c5:fb:dd:a7:93:19:a6:ae:6e:b9:e6:8d:
         bb:a9:55:44:95:49:0a:be:2c:6d:b7:20:3a:05:dc:3c:65:78:
         e4:d0:f2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----