Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fb1de5c4-a471-462b-aafb-ca0e6d329421.roa
File:                     fb1de5c4-a471-462b-aafb-ca0e6d329421.roa (raw, json)
Hash identifier:          IGgHyAKSFRf8HRmnQmOg4AlGOLHE6Fm8wBXr0UgCIW0=
Subject key identifier:   8C:96:F9:8D:98:0B:5D:5A:7E:89:D2:A1:36:B4:17:03:74:E7:43:C9
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2F91BD908E1A7AA8C33FC7B1EAAA4E178AC57F1B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fb1de5c4-a471-462b-aafb-ca0e6d329421.roa
Signing time:             Fri 24 Feb 2023 00:00:00 +0000
ROA not before:           Fri 24 Feb 2023 00:00:00 +0000
ROA not after:            Mon 27 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:91:bd:90:8e:1a:7a:a8:c3:3f:c7:b1:ea:aa:4e:17:8a:c5:7f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 24 00:00:00 2023 GMT
            Not After : Feb 27 23:59:59 2023 GMT
        Subject: serialNumber=d799486fb6ca574e48e78889b4a503e9ebd300b12c7c2cd660e1bd01ce85e01e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:57:26:f8:64:ed:3b:15:94:03:b3:2e:71:29:
                    b3:dd:dc:79:1f:45:05:11:46:50:f4:ff:41:a2:21:
                    33:03:0e:06:f7:6a:a7:95:48:f5:c2:4f:7b:35:fe:
                    36:9e:5f:ff:54:a2:88:b1:65:c9:b1:35:d2:b4:ae:
                    27:ca:1f:bc:a1:1d:ab:26:11:ab:df:81:4b:fa:ed:
                    5f:32:ee:6f:19:01:aa:c6:12:66:6c:0f:c8:98:5c:
                    ae:80:52:94:54:84:8f:59:24:74:8f:73:44:5f:50:
                    76:a3:3a:ba:fe:4f:d1:57:66:d2:2b:14:a9:38:8c:
                    73:e3:71:26:d0:63:ba:33:ee:00:85:9b:07:3b:7e:
                    5a:c9:dc:60:e6:34:76:2f:31:e3:dd:9a:09:77:55:
                    08:63:dc:bb:b1:a6:ab:6f:34:49:f6:89:02:79:74:
                    9f:11:de:63:b6:b1:ee:e0:93:4c:ee:27:83:52:c5:
                    d1:76:9a:91:a9:f1:dd:ba:35:21:a9:b5:9e:35:97:
                    ca:ae:99:4f:19:df:dc:8f:ff:9a:65:61:73:72:32:
                    94:c5:e6:2d:02:61:cf:6b:fc:97:65:e8:34:a8:f0:
                    d9:bf:ce:7d:61:ab:8a:a5:9e:8e:2c:d9:0a:c6:3b:
                    3f:bb:ba:f5:ec:36:91:1e:74:d0:56:b9:de:c1:06:
                    c6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:96:F9:8D:98:0B:5D:5A:7E:89:D2:A1:36:B4:17:03:74:E7:43:C9
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fb1de5c4-a471-462b-aafb-ca0e6d329421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:9a:2f:50:f6:e8:9a:28:59:e4:1a:d4:9d:2f:d5:69:2c:2e:
         35:f9:38:c4:35:1f:76:9e:af:51:47:af:ae:d3:7f:85:c0:35:
         9a:39:01:77:54:19:1e:c0:0b:3b:9e:06:2b:b5:d0:24:8b:61:
         ea:36:bb:e0:72:da:93:9d:e1:ac:a5:22:bc:df:a1:2e:3b:30:
         07:d2:51:f9:e4:1c:93:f2:71:db:04:3b:67:49:3b:50:dc:00:
         e3:aa:b2:fb:41:8e:a8:c4:90:1b:41:58:8b:87:04:34:eb:43:
         e6:61:66:eb:0f:49:28:81:b3:4f:6c:8d:42:4f:cd:58:3c:44:
         45:6a:e9:75:90:42:b2:94:95:f3:ed:81:97:ab:12:82:d3:28:
         dc:0a:c6:ea:1e:1a:77:5a:82:33:ad:09:b0:10:4d:1e:ed:eb:
         60:f5:9f:f7:45:15:50:95:08:d3:fd:c7:ac:6b:38:fb:1c:20:
         02:c5:c4:ae:e1:39:46:c8:65:38:0a:c3:8d:99:95:35:8c:ca:
         4b:0c:29:a4:92:95:76:50:1d:4b:7d:c8:fe:d7:d9:b9:74:9f:
         6a:b6:d5:db:31:c8:6a:9e:3c:78:7f:dd:4c:48:35:97:a0:54:
         3c:cb:7b:25:63:cf:d1:4c:52:ff:17:5a:1f:dd:20:0b:44:5e:
         84:bc:47:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----