Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e6d0d27d-526b-4035-abf5-64ea61693853.roa
File:                     e6d0d27d-526b-4035-abf5-64ea61693853.roa (raw, json)
Hash identifier:          nfCsYbzn470L3rED41X/7bD3oovSRsx224D5enHpVoM=
Subject key identifier:   A1:EB:E6:E6:C6:FE:5D:66:EF:1A:88:2E:1D:AA:F8:F9:77:ED:E2:8F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       29B72CE35EE337ADF8D0AC5EE97EE261B1954703
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e6d0d27d-526b-4035-abf5-64ea61693853.roa
Signing time:             Sat 18 Mar 2023 00:00:00 +0000
ROA not before:           Sat 18 Mar 2023 00:00:00 +0000
ROA not after:            Tue 21 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b7:2c:e3:5e:e3:37:ad:f8:d0:ac:5e:e9:7e:e2:61:b1:95:47:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 18 00:00:00 2023 GMT
            Not After : Mar 21 23:59:59 2023 GMT
        Subject: serialNumber=9494a908a068e03d5194b39c1c0bede09afeb68c5bec76ac6ad9fcd86d395f37, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ed:92:61:38:de:9f:25:16:a5:86:9f:39:95:
                    8a:45:09:07:1a:8a:97:b8:a7:58:f2:cf:d1:f0:f9:
                    be:6b:fa:bc:87:05:92:14:16:e3:34:81:00:4a:77:
                    01:3f:15:96:f5:bd:ed:4b:20:fe:f9:e2:2e:d4:d1:
                    91:51:79:fc:23:cf:89:5c:d8:02:b3:e5:a7:13:3e:
                    e1:06:11:b2:f9:b9:a0:fc:e0:4c:51:9e:37:68:93:
                    c5:b3:bb:39:09:58:cd:1a:f9:93:7b:bd:cf:d8:f6:
                    0d:98:00:17:61:be:b5:a1:cb:23:46:01:b7:f4:40:
                    cb:13:78:61:b5:6c:1e:c5:9a:08:ab:dc:ef:4c:d2:
                    0d:6e:b1:a1:9c:14:b8:7b:5d:50:54:71:7e:83:91:
                    f6:07:49:98:67:d4:4a:26:a1:67:10:8c:c2:ca:f0:
                    f1:47:b3:de:45:f0:2a:9b:d6:55:9e:e5:1f:16:a4:
                    c5:ae:93:48:0e:e2:9b:19:87:48:b0:01:db:2c:cb:
                    53:6f:b9:ae:f5:71:7e:b4:85:f1:a0:85:a3:04:72:
                    cb:3e:51:60:9b:67:ad:46:02:77:08:43:42:ae:fe:
                    95:6a:52:45:71:b8:ca:8d:8b:29:77:e6:72:e3:c3:
                    3a:6b:75:f7:8a:c5:98:92:ca:90:8a:d4:79:76:f3:
                    7e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EB:E6:E6:C6:FE:5D:66:EF:1A:88:2E:1D:AA:F8:F9:77:ED:E2:8F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e6d0d27d-526b-4035-abf5-64ea61693853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:91:da:ac:03:35:35:81:b7:98:0c:3d:69:58:75:31:c1:7e:
         19:41:15:50:f4:a0:d6:fc:07:89:d1:3f:6c:6e:87:72:6b:de:
         9a:52:98:c9:70:29:71:de:ae:7e:b4:dd:79:24:a6:66:1a:4a:
         41:07:80:29:f5:c7:09:b3:d7:97:19:1d:aa:89:08:9d:de:39:
         40:1d:ca:e2:23:d9:d5:b1:67:17:ed:b3:09:4f:2b:27:3a:3a:
         3c:cb:c4:23:2d:34:30:da:49:9e:75:72:3d:cd:f0:9f:c4:bd:
         df:6c:52:9e:7b:69:03:fa:78:d0:55:1a:c0:03:15:c7:cc:fc:
         61:bc:97:06:0f:d7:1c:b0:2c:42:34:b9:ea:8a:b8:2a:5f:16:
         59:35:94:74:d7:e5:71:00:07:e3:e8:78:cc:42:0b:d6:22:44:
         32:f4:db:48:54:f9:b5:2e:a0:66:17:33:a7:45:d8:e5:8b:43:
         dc:67:c1:2b:20:21:c3:82:cc:67:44:eb:f0:cc:e1:71:1c:96:
         c2:3e:eb:e8:74:09:9f:14:e5:93:e0:39:db:85:ef:3c:3a:43:
         a1:55:44:5d:41:e1:38:c3:4c:bf:79:de:39:13:89:ae:07:43:
         fa:eb:56:00:80:fa:eb:52:13:fe:9d:84:f0:23:cc:c9:8f:42:
         68:01:ff:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----