Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f5fd5e41-7712-4264-97a0-1f7e3122bad7.roa
File:                     f5fd5e41-7712-4264-97a0-1f7e3122bad7.roa (raw, json)
Hash identifier:          idLaaxWODcR6hFYokQAXnsaZ0ReIIKa3SCexlUbVr50=
Subject key identifier:   F6:35:7F:76:A7:A3:FF:16:18:73:E7:76:78:31:C8:6E:06:5F:5C:78
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1FF973C56144C85091A280623EB726493E258E87
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f5fd5e41-7712-4264-97a0-1f7e3122bad7.roa
Signing time:             Sun 23 Apr 2023 00:00:00 +0000
ROA not before:           Sun 23 Apr 2023 00:00:00 +0000
ROA not after:            Wed 26 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f9:73:c5:61:44:c8:50:91:a2:80:62:3e:b7:26:49:3e:25:8e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 23 00:00:00 2023 GMT
            Not After : Apr 26 23:59:59 2023 GMT
        Subject: serialNumber=72c3d5fe3a0c7353b24de2ef18b6386cd90dfc8814cf251973017a93a05ba191, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:57:9c:cb:52:3c:05:29:aa:9a:ad:0e:9b:62:
                    19:dd:21:ff:bb:ea:bd:42:9d:98:ba:59:1f:51:42:
                    43:04:50:e5:d4:b9:21:8f:b2:bb:fd:57:6f:2b:27:
                    a8:55:ce:36:36:d1:7d:c2:f5:86:64:5a:6f:9c:0c:
                    d4:6c:29:b8:f0:1b:9b:95:0f:94:90:ae:10:20:bc:
                    4e:ef:af:89:82:72:42:79:85:84:37:2d:45:c9:b2:
                    14:39:0f:00:ea:fc:b0:dc:36:96:74:17:6b:a1:26:
                    ce:11:cf:db:6a:ed:8a:5f:ca:c0:e1:6e:ee:cb:f4:
                    aa:4c:10:be:d0:40:70:63:80:69:e2:ca:30:e8:e9:
                    46:08:56:18:2d:61:e6:c3:f0:03:39:d1:e8:99:e8:
                    21:f6:d2:9e:54:a2:17:71:22:55:ce:3b:31:6f:02:
                    02:3d:6a:85:0e:a7:fd:06:c9:84:27:ad:78:2e:b9:
                    f9:d5:9d:07:fe:3c:13:97:33:35:2c:d7:cb:73:bc:
                    34:9c:b2:ed:a1:1b:35:5a:7d:1e:f1:67:95:af:d7:
                    9c:7d:19:a5:29:93:e7:8e:b6:fb:1b:52:9b:96:67:
                    45:0e:aa:c3:92:28:a7:74:a1:b5:ad:8d:35:49:3b:
                    7d:6a:5e:43:51:0b:dd:8d:f6:48:59:8b:37:fe:7c:
                    41:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:35:7F:76:A7:A3:FF:16:18:73:E7:76:78:31:C8:6E:06:5F:5C:78
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f5fd5e41-7712-4264-97a0-1f7e3122bad7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:3b:60:2e:75:ee:a0:cd:a8:31:10:f7:fa:3d:0f:03:d5:e7:
         c5:22:ec:70:25:67:5a:3b:c6:71:4c:a9:9f:ed:cf:4f:aa:ce:
         91:53:c1:1c:99:0a:d1:c8:c7:52:23:63:f9:d7:cf:2e:79:75:
         5e:97:72:5b:a8:97:04:bc:53:7f:93:47:31:7a:b5:44:2f:8c:
         58:06:c6:77:bd:f7:d5:a0:f7:01:3a:32:07:d3:25:00:50:25:
         67:fc:6d:1b:df:38:b3:5a:24:cc:9d:c2:9b:3e:18:5a:87:35:
         61:68:7f:30:5e:93:80:2a:86:4f:b5:96:15:0e:36:9e:82:3c:
         03:67:2d:7b:5c:0e:58:65:ff:1e:f8:31:e4:09:d1:49:fb:d4:
         64:8c:b5:11:55:77:e1:65:82:d1:48:d0:2d:16:13:14:1f:81:
         50:c8:8b:b6:e1:e8:a6:f3:02:16:82:a6:01:8a:8a:39:d2:31:
         5b:ec:4f:d4:a9:5d:b0:81:bd:66:35:8f:fc:8c:45:f8:56:de:
         2c:d9:9a:bc:2b:cb:eb:2a:9e:e6:89:b3:39:e4:00:67:58:89:
         c2:ca:81:28:64:9d:4c:94:5e:b5:b4:04:70:a7:85:e3:26:42:
         eb:6f:bb:21:ee:e5:c0:c4:b3:d0:6c:19:5b:2f:20:16:df:c3:
         a0:f4:67:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----