Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/02188d34-8bc2-4c85-a194-93f5ba2e773d.roa
File:                     02188d34-8bc2-4c85-a194-93f5ba2e773d.roa (raw, json)
Hash identifier:          45FCeAzzGCXZsp6yHmssj4EoQqIrpuFmazSbu0T30Mw=
Subject key identifier:   AB:0E:BA:94:66:2E:F8:D8:F0:61:C4:DF:C0:22:12:48:A6:8C:FC:C4
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3578FE6FDAA521BF24F66544DC91413B473F79B8
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/02188d34-8bc2-4c85-a194-93f5ba2e773d.roa
Signing time:             Fri 31 Mar 2023 00:00:00 +0000
ROA not before:           Fri 31 Mar 2023 00:00:00 +0000
ROA not after:            Mon 03 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:78:fe:6f:da:a5:21:bf:24:f6:65:44:dc:91:41:3b:47:3f:79:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 31 00:00:00 2023 GMT
            Not After : Apr  3 23:59:59 2023 GMT
        Subject: serialNumber=dded64c704f36faf058575534aa50b1a2f053370a6ca14754d27780c36f3b65a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3a:80:f7:df:e2:90:ea:b1:27:84:8a:80:53:
                    66:37:c1:84:30:79:87:a9:e5:cb:0a:45:c8:36:47:
                    f9:3e:c4:4e:12:32:02:0a:25:a6:89:d8:c3:aa:7a:
                    af:b9:cd:f9:32:7b:bf:2f:3f:d8:f3:41:49:8e:58:
                    b5:d6:1b:55:ac:0c:d3:52:9e:c0:88:f4:9b:59:ea:
                    d9:a4:40:ee:19:b5:80:40:a1:c5:29:0e:71:05:cc:
                    e2:1b:23:4b:73:49:14:58:7e:fd:73:03:0e:6f:e1:
                    ff:34:d7:13:0c:24:70:48:b8:b6:c7:f6:51:f7:05:
                    d5:c6:3c:cb:18:25:5f:b3:f8:43:22:33:0a:80:3e:
                    e5:46:d5:f5:db:98:8d:08:d9:4e:34:95:7c:9c:fb:
                    8b:11:51:b4:4a:f5:ce:6b:29:31:e2:31:f7:c2:2f:
                    e7:2b:3c:42:0c:60:9c:18:57:f0:c6:d2:90:ad:78:
                    2a:db:54:31:88:3c:a5:0d:87:d4:e4:41:9d:b8:1f:
                    68:28:9d:a3:63:18:00:c0:23:d9:63:4b:55:ad:82:
                    c2:89:39:f5:9b:7d:1f:54:e0:ad:e4:40:f1:b6:ab:
                    71:3e:59:d4:21:62:56:6e:d1:28:40:8c:6a:90:82:
                    2a:8f:6f:5f:50:52:52:82:3b:3a:93:78:ab:6a:c8:
                    44:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0E:BA:94:66:2E:F8:D8:F0:61:C4:DF:C0:22:12:48:A6:8C:FC:C4
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/02188d34-8bc2-4c85-a194-93f5ba2e773d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:88:40:b4:d7:65:79:a6:97:5b:66:ee:f8:d9:e9:e4:11:e8:
         2c:97:af:a0:1f:57:19:ac:0d:ea:f5:d5:b9:d9:5d:2a:e6:b7:
         75:50:e3:b7:10:6a:eb:0f:c0:5f:bb:53:f0:88:79:c3:36:be:
         13:0e:88:4d:6d:c3:88:52:ef:3a:e9:ce:e3:2a:60:d5:a8:1b:
         14:1a:d3:ed:18:4e:58:d0:fa:95:e2:17:4d:ee:2d:f0:7d:95:
         86:a1:45:2e:8a:97:26:a2:f0:cc:6f:a9:c0:d2:ee:b8:50:3e:
         5b:af:1d:cd:04:bf:80:cd:a0:57:56:ff:c8:8f:17:5d:d0:1d:
         49:3a:3b:e5:01:de:8d:02:71:bf:97:5b:9e:06:a6:ab:fe:ac:
         59:7a:f6:ea:71:6f:6b:93:d9:9d:0c:69:1f:cb:89:23:b5:ad:
         8e:10:5f:98:29:b4:04:d2:1e:0d:b6:06:ee:1c:40:d3:76:6c:
         71:ad:42:24:41:95:e8:ce:16:1c:d4:16:00:a7:7e:5d:60:0d:
         f8:b4:55:c8:93:27:18:71:a7:6a:94:6c:45:46:be:4c:aa:39:
         de:b0:0d:dc:09:67:35:b2:3e:b9:47:a8:6b:ad:d4:71:a7:d3:
         df:b2:52:01:ec:fe:bf:27:ab:79:4d:00:a3:0f:64:5c:c2:a3:
         bb:d8:a7:a4
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUNXj+b9qlIb8k9mVE3JFBO0c/ebgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzMxMDAwMDAwWhcNMjMwNDAzMjM1OTU5
WjCBpTFJMEcGA1UEBRNAZGRlZDY0YzcwNGYzNmZhZjA1ODU3NTUzNGFhNTBiMWEy
ZjA1MzM3MGE2Y2ExNDc1NGQyNzc4MGMzNmYzYjY1YTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKY6gPff4pDqsSeEioBTZjfBhDB5h6nlywpFyDZH+T7EThIyAgol
ponYw6p6r7nN+TJ7vy8/2PNBSY5YtdYbVawM01KewIj0m1nq2aRA7hm1gEChxSkO
cQXM4hsjS3NJFFh+/XMDDm/h/zTXEwwkcEi4tsf2UfcF1cY8yxglX7P4QyIzCoA+
5UbV9duYjQjZTjSVfJz7ixFRtEr1zmspMeIx98Iv5ys8QgxgnBhX8MbSkK14KttU
MYg8pQ2H1ORBnbgfaCido2MYAMAj2WNLVa2Cwok59Zt9H1TgreRA8barcT5Z1CFi
Vm7RKECMapCCKo9vX1BSUoI7OpN4q2rIRJcCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBSrDrqUZi742PBhxN/AIhJIpoz8xDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMDIxODhkMzQtOGJjMi00Yzg1LWExOTQtOTNmNWJhMmU3NzNkLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAD2IQLTXZXmml1tm
7vjZ6eQR6CyXr6AfVxmsDer11bnZXSrmt3VQ47cQausPwF+7U/CIecM2vhMOiE1t
w4hS7zrpzuMqYNWoGxQa0+0YTljQ+pXiF03uLfB9lYahRS6Klyai8MxvqcDS7rhQ
PluvHc0Ev4DNoFdW/8iPF13QHUk6O+UB3o0Ccb+XW54Gpqv+rFl69upxb2uT2Z0M
aR/LiSO1rY4QX5gptATSHg22Bu4cQNN2bHGtQiRBlejOFhzUFgCnfl1gDfi0VciT
Jxhxp2qUbEVGvkyqOd6wDdwJZzWyPrlHqGut1HGn09+yUgHs/r8nq3lNAKMPZFzC
o7vYp6Q=
-----END CERTIFICATE-----