Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e033beb7-8393-40e0-8241-0505fdbdfe44.roa
File:                     e033beb7-8393-40e0-8241-0505fdbdfe44.roa (raw, json)
Hash identifier:          Xfib7OuGqA8j8HA4uQVWE9jdOxjJKtkX++JKgj06M9Y=
Subject key identifier:   25:A3:69:69:5C:DB:18:78:EC:03:0D:28:C2:32:F7:84:87:02:53:67
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       56A9D1406E1ABB061D3E9D28329811CB242812C4
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e033beb7-8393-40e0-8241-0505fdbdfe44.roa
Signing time:             Sun 28 May 2023 00:00:00 +0000
ROA not before:           Sun 28 May 2023 00:00:00 +0000
ROA not after:            Wed 31 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a9:d1:40:6e:1a:bb:06:1d:3e:9d:28:32:98:11:cb:24:28:12:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 28 00:00:00 2023 GMT
            Not After : May 31 23:59:59 2023 GMT
        Subject: serialNumber=3211b48ed2246a092dc168b33f94369e27636547b376b5221802ffcac914eaa5, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:df:d1:f5:17:3a:ab:fa:1f:f9:91:b7:b2:f7:
                    c5:60:8d:ba:05:88:d6:81:61:0e:f0:f9:04:ce:97:
                    3e:6f:f3:4f:c3:50:4f:97:0b:c5:11:df:dc:8b:b7:
                    93:5c:63:78:48:46:30:6b:be:25:84:fd:12:a6:c9:
                    a9:bc:7e:76:35:9f:0f:9e:38:8e:03:76:c4:97:b0:
                    5a:49:9f:84:08:32:77:56:96:d3:1b:76:74:03:94:
                    59:55:c9:9e:f5:2d:cc:04:35:9e:38:4c:4f:b5:7b:
                    68:30:cd:83:b7:db:95:bf:2c:93:2d:3d:a5:9f:90:
                    f0:15:6d:02:75:67:32:49:d1:b9:c3:dd:9b:da:11:
                    8e:cf:4f:12:e6:59:d3:8b:e3:be:6f:82:36:d7:89:
                    fd:d7:bc:f2:12:be:a2:65:86:aa:38:fc:72:00:48:
                    53:3e:97:b0:a1:b3:01:90:c9:69:5d:c2:d5:28:f7:
                    b5:82:ae:55:13:7b:77:22:f9:bf:12:ac:a2:b8:6b:
                    12:d0:c2:2e:37:ad:f4:36:d7:25:2e:0a:60:61:30:
                    03:1e:6a:40:58:e6:01:a3:a7:49:e6:15:63:f9:05:
                    9b:65:f7:6a:a1:ce:f8:bf:bc:1c:90:f4:3c:82:c8:
                    b6:ef:d8:60:b1:4d:9a:72:f0:b6:81:c7:cb:89:34:
                    11:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A3:69:69:5C:DB:18:78:EC:03:0D:28:C2:32:F7:84:87:02:53:67
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e033beb7-8393-40e0-8241-0505fdbdfe44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:59:cf:eb:56:49:e4:dc:a3:56:e1:d5:4e:bd:ea:15:0c:b0:
         34:2a:6b:93:07:da:2e:c1:93:ea:f1:1a:65:5b:2f:a9:19:53:
         d0:73:83:9b:a7:a7:54:57:a1:7c:0c:3c:1f:a4:d3:a4:6b:3d:
         8b:cb:02:cb:ed:ce:6c:e7:a0:e8:1d:fb:1d:db:7c:2c:b3:56:
         d6:aa:35:57:20:9f:db:fc:6a:f3:a8:7a:f9:e2:4c:d3:1f:eb:
         2b:07:89:d9:92:4f:a3:67:46:9a:53:30:1c:dd:3e:00:8f:37:
         83:32:02:71:59:b8:96:f4:ec:46:bb:8e:a7:43:9c:fc:09:33:
         09:d2:6d:76:aa:3c:5e:7d:45:74:ec:57:a6:d7:43:ba:ea:3a:
         36:cf:89:d9:b2:2d:66:4d:61:a3:69:42:3b:18:50:55:f1:8c:
         11:dc:81:79:14:65:24:75:89:e9:93:f7:4a:eb:5a:3e:4e:b5:
         a7:6d:5e:85:da:61:6f:85:f4:e8:e2:73:49:c2:f3:d9:67:70:
         2b:69:9a:69:1d:ef:2e:ba:a6:e6:6a:7c:b8:cb:72:cd:d7:56:
         89:56:10:c1:64:33:cf:4e:d0:c2:22:10:c2:0c:a9:22:ce:be:
         e8:c0:86:a5:9f:4f:dd:4e:61:12:94:fd:d4:c4:f2:f5:35:f3:
         d2:64:6e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----