Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e0dfa0f4-1781-4008-8360-0d6c94336216.roa
File:                     e0dfa0f4-1781-4008-8360-0d6c94336216.roa (raw, json)
Hash identifier:          jbFN3Kx/UGj3FT19TTFmS3kKX91a3enZYbUG7vvomyI=
Subject key identifier:   44:99:D3:AE:85:1A:D0:6F:4A:0F:F9:FB:4F:50:CE:38:48:94:C7:D9
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       65E75FEDE0A0B2693EFCD47F2C69DDBBA84FC8A1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e0dfa0f4-1781-4008-8360-0d6c94336216.roa
Signing time:             Sat 22 Apr 2023 00:00:00 +0000
ROA not before:           Sat 22 Apr 2023 00:00:00 +0000
ROA not after:            Tue 25 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e7:5f:ed:e0:a0:b2:69:3e:fc:d4:7f:2c:69:dd:bb:a8:4f:c8:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 22 00:00:00 2023 GMT
            Not After : Apr 25 23:59:59 2023 GMT
        Subject: serialNumber=2eb47ed8d62288b188e7a203ffe9f29e2cef70658cde8997c6884a2a956b6ed4, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9f:f5:8f:ba:0e:17:17:45:3c:54:79:2a:61:
                    c5:7c:f6:56:8f:f1:45:06:6f:3f:07:27:5d:37:a9:
                    41:ee:9e:8e:35:9c:0b:6b:f3:2b:17:71:b7:f5:ea:
                    67:37:4a:61:42:df:e1:24:d8:7f:79:09:61:57:d6:
                    a5:ac:96:70:35:ed:cf:22:4c:0e:d7:5e:0f:29:09:
                    0d:f0:a7:31:cf:86:66:56:0c:6f:98:f7:91:56:cc:
                    6e:a6:3f:7f:12:e1:63:5a:05:a6:01:d2:da:6c:29:
                    80:23:cd:e3:e7:28:52:6d:45:bb:aa:8e:c0:b4:dd:
                    23:db:25:80:de:3a:3d:36:5c:cd:fb:a3:f6:40:a8:
                    9d:ef:f2:64:fa:89:cc:33:82:86:93:fa:f7:67:10:
                    fb:d6:6d:bb:43:11:9c:cb:c2:86:69:04:34:67:89:
                    7c:2c:38:ae:b8:6c:62:36:3a:48:1d:56:59:22:78:
                    06:43:1c:58:e2:59:41:dd:09:78:09:bb:48:43:a1:
                    53:0c:18:ee:a7:f7:1b:4c:ee:62:3a:97:1b:d6:94:
                    cd:87:fb:e3:26:f1:d1:99:2b:92:3f:9e:cc:4a:a6:
                    f9:f6:ab:81:7d:18:37:8c:b0:88:e9:95:1f:a2:f1:
                    1e:48:66:22:b2:a4:b1:57:fc:1a:28:9b:a2:4e:3a:
                    36:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:99:D3:AE:85:1A:D0:6F:4A:0F:F9:FB:4F:50:CE:38:48:94:C7:D9
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e0dfa0f4-1781-4008-8360-0d6c94336216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:90:6c:a1:8a:7c:f3:05:f9:b7:fe:48:c6:39:db:33:7d:6b:
         22:fe:bd:9c:36:e6:8c:e1:bd:4b:11:87:ac:30:4d:30:7e:28:
         9c:11:6e:3e:25:b7:81:6e:40:db:76:be:3d:a8:6b:33:80:c8:
         97:81:d4:71:60:e4:65:27:29:53:21:3b:80:fb:20:1f:3a:be:
         82:1d:4a:04:1e:f7:81:15:76:28:b3:61:3c:7a:f6:e7:1d:70:
         96:01:4e:e7:e6:99:ee:d8:62:0e:54:86:5f:09:a5:c4:be:75:
         6b:c6:f9:8e:03:40:cf:32:0d:52:43:e2:a5:f6:85:e7:3d:96:
         87:62:0a:3e:e7:a5:d3:f5:03:a7:98:a3:e4:7d:91:57:fa:2b:
         35:91:79:42:9a:ab:fb:26:f8:d3:f1:a9:cd:a4:91:7a:20:82:
         8d:18:8e:dc:d5:84:b8:6c:21:8e:ff:b8:00:f4:e2:8a:a9:da:
         1e:60:80:ee:3a:e4:33:0b:0d:95:af:38:d2:d6:9f:cf:21:fc:
         15:bc:70:de:22:c9:83:a1:3c:ca:10:02:32:5d:a6:ef:6b:8a:
         d4:89:b6:82:0a:3f:d2:49:e7:c0:83:49:4b:bb:8c:d1:9e:2d:
         7f:7c:22:c8:9b:8c:b1:5a:41:83:81:e2:87:11:a7:22:d5:c7:
         12:0d:92:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----