Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/dbe3cfdb-b2e1-496b-8ec5-6d7e9e4b9e18.roa
File:                     dbe3cfdb-b2e1-496b-8ec5-6d7e9e4b9e18.roa (raw, json)
Hash identifier:          tLTVLEepsT5fl0EL1EaKMKDs/hSKAjLvibpcDvGmk74=
Subject key identifier:   77:81:2E:2E:99:D8:12:F9:4D:BC:6E:06:C0:19:5D:86:7B:62:A0:2A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       114D137F96D69D5EFBED1647D5863CBCE974B89A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/dbe3cfdb-b2e1-496b-8ec5-6d7e9e4b9e18.roa
Signing time:             Fri 17 Feb 2023 00:00:00 +0000
ROA not before:           Fri 17 Feb 2023 00:00:00 +0000
ROA not after:            Mon 20 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4d:13:7f:96:d6:9d:5e:fb:ed:16:47:d5:86:3c:bc:e9:74:b8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 17 00:00:00 2023 GMT
            Not After : Feb 20 23:59:59 2023 GMT
        Subject: serialNumber=77644dc445fbfb63666857d3c2d589aecfb7edd3e786c2a1468e8e51643464be, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:74:84:98:9f:02:a7:89:ab:d5:16:85:41:62:
                    8a:11:4e:69:b3:f1:6f:8a:20:ef:8a:d7:a8:03:37:
                    ec:f3:0c:fd:ea:40:01:45:65:bc:f1:8d:e4:04:33:
                    9c:a0:ce:95:97:cb:2b:cd:77:d6:20:0b:f1:a8:d0:
                    26:eb:9d:ae:13:ea:fc:1e:63:29:9b:c9:e8:dd:c7:
                    73:e7:11:84:47:0a:35:ba:37:70:fb:b3:28:77:96:
                    b9:3e:e7:86:34:a3:46:ce:39:7d:6f:ec:d8:3a:3e:
                    4c:66:10:99:27:b6:d8:cc:86:f8:2e:06:66:83:58:
                    cc:58:80:03:d0:4a:44:2a:26:aa:70:99:1d:1d:9b:
                    6a:95:73:e4:8d:8a:fe:0c:c7:e6:cb:6e:36:14:44:
                    11:75:ae:bc:b5:f6:e2:9d:ec:40:39:6d:10:c6:c3:
                    a0:1e:eb:81:dd:0a:d4:8d:3c:da:34:96:26:62:85:
                    d9:ed:d9:61:92:d8:c6:98:f6:dd:70:d8:6f:47:2a:
                    bd:7e:3d:00:84:72:cf:39:d1:1b:8e:32:fb:43:f1:
                    55:80:34:64:83:0a:b8:8f:02:56:1c:e3:94:bf:84:
                    ca:02:e3:95:d7:62:e6:1c:37:df:6e:c9:dd:65:12:
                    51:4a:ef:86:1e:66:4e:df:23:11:b7:cd:e3:76:5c:
                    33:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:81:2E:2E:99:D8:12:F9:4D:BC:6E:06:C0:19:5D:86:7B:62:A0:2A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/dbe3cfdb-b2e1-496b-8ec5-6d7e9e4b9e18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:3d:da:df:60:86:d4:91:38:7e:21:ab:9e:fb:b8:3c:8c:62:
         c4:7b:9e:b6:ef:87:e2:c7:0b:78:cf:af:cc:45:7a:82:a6:c7:
         6a:a0:bb:36:7e:75:c1:30:62:fd:b4:46:34:34:31:1d:5c:60:
         a2:0d:5e:1a:65:49:58:22:71:0e:77:32:18:2a:33:cc:0a:75:
         07:84:20:f1:48:6b:51:2f:d5:f7:ff:76:8d:b0:37:d6:6c:d1:
         73:9f:9c:7e:51:5f:aa:1d:58:09:de:0f:09:84:39:79:f8:c9:
         ce:1c:12:eb:a4:5f:84:ca:8c:a6:60:56:29:7a:c1:20:70:9d:
         3c:38:23:7d:e2:23:a9:51:c8:26:77:0a:26:19:89:86:45:48:
         b7:80:9e:95:57:5b:ef:45:80:78:98:0e:cd:00:03:fe:c4:4d:
         f2:a0:0f:52:26:69:6b:15:30:b1:47:a2:38:8c:4b:7e:64:8c:
         a3:e3:16:b3:5e:32:7f:84:ed:59:d5:a7:b9:11:70:66:2c:db:
         ca:e4:01:00:c3:97:66:7e:22:96:81:c4:ad:41:54:b3:72:ef:
         03:a0:04:05:02:6e:61:e1:4d:94:43:4a:f3:76:46:2a:d2:3c:
         75:9f:9e:d0:b0:70:3f:9f:b7:6c:bf:e1:90:54:c8:31:33:5c:
         c8:cd:8b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----