Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f7113885-8024-4807-b510-ee5b1db6dc9c.roa
File:                     f7113885-8024-4807-b510-ee5b1db6dc9c.roa (raw, json)
Hash identifier:          r96Hc0IJhv0SqpVrkw4xAX0LSCF1SH33cwI4GHXVyZI=
Subject key identifier:   6C:79:E5:DD:77:F9:C5:C5:8E:38:6E:75:41:39:22:F8:AC:B4:E5:99
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       256C3E9F5FB52D3DBC16A398AD7A51FB62E5F0D2
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f7113885-8024-4807-b510-ee5b1db6dc9c.roa
Signing time:             Mon 22 May 2023 00:00:00 +0000
ROA not before:           Mon 22 May 2023 00:00:00 +0000
ROA not after:            Thu 25 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:6c:3e:9f:5f:b5:2d:3d:bc:16:a3:98:ad:7a:51:fb:62:e5:f0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 22 00:00:00 2023 GMT
            Not After : May 25 23:59:59 2023 GMT
        Subject: serialNumber=b54e48e9600a3c7cec1f1a3bc8b154337549d663f990f22fe87e06fd4b7b1b61, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a3:72:2a:de:92:a4:7f:66:7c:a6:44:22:72:
                    3c:81:68:2e:4a:7b:6a:a9:39:14:ef:95:20:67:c0:
                    0d:5d:eb:ab:e1:68:42:e9:27:35:24:87:7c:66:5d:
                    fb:cd:68:67:f1:0b:5e:da:1e:11:06:04:53:ac:80:
                    27:9f:7a:d9:00:fb:47:b8:9c:7f:37:f5:be:7b:5e:
                    24:e6:ad:5d:12:c8:70:50:93:11:63:7d:9b:ba:9b:
                    3a:aa:8f:d8:cb:55:7f:4c:ff:40:25:e3:08:4c:29:
                    e1:0d:3d:a7:74:e8:a1:22:f7:c6:f1:1d:f5:a9:4a:
                    fc:5e:9a:b7:7e:35:40:0d:75:ec:b5:74:7f:9e:6b:
                    a4:f4:c9:87:39:ba:b7:87:95:8e:8e:b9:de:d0:bf:
                    d1:c5:d8:e6:ac:a2:42:a9:ef:48:62:73:5b:d2:92:
                    7e:ea:f5:9e:80:0b:d1:f7:50:9c:c0:f0:28:cf:6b:
                    3c:11:f1:da:52:30:44:4f:a6:18:a2:60:74:6f:38:
                    11:c3:60:eb:6a:96:8e:96:3e:93:3c:6a:c4:4a:ef:
                    4a:f4:03:a9:c2:20:5e:6d:86:89:98:e3:92:0d:c2:
                    a0:40:e0:17:32:81:af:d0:2a:ac:9e:0c:5e:88:62:
                    76:ca:8c:ee:34:95:06:77:dc:d3:91:77:80:a3:38:
                    3b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:79:E5:DD:77:F9:C5:C5:8E:38:6E:75:41:39:22:F8:AC:B4:E5:99
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f7113885-8024-4807-b510-ee5b1db6dc9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:b7:bc:08:38:54:8e:15:49:b9:75:7d:d4:a5:18:db:ea:4f:
         ca:62:8d:b7:00:f7:d2:c1:7e:04:ea:a5:6a:32:16:04:f2:b8:
         64:05:43:fe:d7:89:e7:a7:60:09:02:29:94:39:29:36:39:1d:
         5f:0c:9e:9b:39:74:b7:14:92:aa:96:4d:2f:70:81:76:d6:a3:
         b9:05:4f:7f:3d:5d:96:6c:c7:5e:04:07:3a:66:59:4a:47:9c:
         f0:2e:0a:2e:2a:9e:79:cf:c3:ae:f7:2e:69:a1:c3:28:90:05:
         73:58:8f:88:ae:23:9a:c1:dd:b1:88:41:2f:7e:72:c1:13:96:
         cd:8a:5c:e5:47:e1:6d:49:05:35:1b:e8:92:c8:e4:0b:a8:1a:
         87:06:1a:59:0b:47:b2:42:d7:02:51:cf:dc:e6:91:a0:1a:8b:
         c9:17:b4:c0:da:f1:69:54:29:f3:df:f2:84:cc:03:ae:19:e2:
         8c:7f:21:07:7f:1b:ec:ed:a5:ce:19:e4:7b:2e:a6:f6:4f:e9:
         be:0e:13:77:7b:93:28:f4:db:c5:c6:c8:88:57:b2:16:e1:67:
         91:0a:20:1a:48:ee:62:60:ff:fa:1a:b4:11:9c:a1:31:b1:1e:
         a6:fd:dc:6e:b8:28:14:79:38:70:6d:95:09:f9:ef:c7:7a:79:
         38:dd:e4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----