Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0ea6129e-7a75-42ea-98e8-5fe5ebc561b3.roa
File:                     0ea6129e-7a75-42ea-98e8-5fe5ebc561b3.roa (raw, json)
Hash identifier:          xhR6upFkSEb+/zFNXLgAoAB7LCeV3neVDpA6PM4Wh+Q=
Subject key identifier:   4E:2D:1D:31:74:27:EC:45:64:3D:9F:78:CD:CE:B5:96:61:4F:1D:33
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3E412624D300875777AB246AC6D1934782B50BC9
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0ea6129e-7a75-42ea-98e8-5fe5ebc561b3.roa
Signing time:             Sat 04 Feb 2023 00:00:00 +0000
ROA not before:           Sat 04 Feb 2023 00:00:00 +0000
ROA not after:            Tue 07 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:41:26:24:d3:00:87:57:77:ab:24:6a:c6:d1:93:47:82:b5:0b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb  4 00:00:00 2023 GMT
            Not After : Feb  7 23:59:59 2023 GMT
        Subject: serialNumber=7a0f08f777c852a76f140be75077fc20b9358dab0ab042b3141561876c94423f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:45:ec:56:5f:ce:19:0c:97:b7:30:65:f4:cd:
                    f6:18:53:65:8b:31:3e:67:8a:c2:8d:a5:2e:7f:5d:
                    d8:da:2d:93:50:aa:ca:46:50:ea:eb:f0:a4:6f:4f:
                    e3:5e:62:7f:62:93:ca:f2:15:8d:e1:06:c3:21:c6:
                    64:a1:f7:a1:1b:d6:e3:4a:60:10:ca:19:77:5c:e4:
                    be:c7:94:57:0d:69:93:ff:68:c0:08:ae:9e:3b:74:
                    7d:1a:e0:aa:3b:f2:57:c8:81:0c:c8:1e:36:53:a5:
                    e2:59:48:e6:68:02:2c:b2:ad:03:ad:d7:62:df:d4:
                    e7:f9:7f:bd:b9:aa:ae:b0:77:0d:12:92:ec:61:fd:
                    9d:c3:72:30:4f:a3:42:37:ec:e1:ae:a1:3c:f1:f8:
                    19:d2:ca:c5:9a:6a:64:0c:e1:72:25:38:c6:25:1d:
                    b8:45:ba:0b:49:8a:6a:ae:bb:79:ac:a2:d4:7a:07:
                    00:4d:2c:5e:2e:ef:02:fe:98:4d:12:c0:ac:f9:14:
                    0d:3c:80:89:3c:11:af:ef:d6:f6:d7:ad:43:be:66:
                    37:35:73:36:8e:07:5c:54:c3:4c:95:4a:13:c5:7a:
                    49:2f:80:96:8f:3c:56:21:51:f2:97:6b:e8:4b:1f:
                    1d:10:20:ea:3f:84:66:2a:c5:36:f6:e4:a4:b6:36:
                    da:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2D:1D:31:74:27:EC:45:64:3D:9F:78:CD:CE:B5:96:61:4F:1D:33
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0ea6129e-7a75-42ea-98e8-5fe5ebc561b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:6a:7b:27:fd:40:4d:14:10:ec:50:8a:9c:bb:81:28:25:11:
         01:11:c9:d0:9e:8c:2f:11:39:66:5b:fa:84:64:79:71:8f:6c:
         b8:d2:5a:30:ad:f7:d8:40:2e:73:c1:a2:69:c3:6a:b5:28:2d:
         68:f6:1d:29:70:9e:4a:c9:35:07:1c:e0:21:5a:e8:cb:7a:cb:
         2e:36:26:f1:81:55:6a:76:89:cb:56:9f:26:8d:2e:80:e2:b8:
         4f:78:ad:39:7b:35:37:bb:d5:4c:dc:ea:11:6b:c8:18:c8:af:
         54:7d:ed:f7:33:90:0a:ef:f3:1f:7d:cd:b4:6e:76:67:36:a5:
         55:e9:4f:9b:de:f5:af:84:e6:d6:32:6a:3d:e2:af:c1:95:2c:
         ba:37:5f:a6:9a:f7:ff:9f:15:1a:2f:4d:4b:1d:38:19:1a:4e:
         1b:02:10:4a:a3:50:0c:94:16:26:b8:c0:32:95:4c:64:24:ec:
         4e:d9:11:8f:73:25:21:9d:3a:d9:8f:11:02:b3:dd:4a:55:8e:
         61:3d:fa:6b:b2:a7:ef:29:70:d1:b4:ff:43:22:8b:b6:1a:a6:
         c9:e0:d8:5c:ec:68:ae:d2:3b:f2:8e:6f:2e:1a:f3:e5:94:a4:
         a0:da:5d:eb:47:65:8e:f9:3a:e2:f2:c5:58:33:34:33:ce:a8:
         3b:51:89:1c
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUPkEmJNMAh1d3qyRqxtGTR4K1C8kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMjA0MDAwMDAwWhcNMjMwMjA3MjM1OTU5
WjCBpTFJMEcGA1UEBRNAN2EwZjA4Zjc3N2M4NTJhNzZmMTQwYmU3NTA3N2ZjMjBi
OTM1OGRhYjBhYjA0MmIzMTQxNTYxODc2Yzk0NDIzZjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJhF7FZfzhkMl7cwZfTN9hhTZYsxPmeKwo2lLn9d2Notk1CqykZQ
6uvwpG9P415if2KTyvIVjeEGwyHGZKH3oRvW40pgEMoZd1zkvseUVw1pk/9owAiu
njt0fRrgqjvyV8iBDMgeNlOl4llI5mgCLLKtA63XYt/U5/l/vbmqrrB3DRKS7GH9
ncNyME+jQjfs4a6hPPH4GdLKxZpqZAzhciU4xiUduEW6C0mKaq67eayi1HoHAE0s
Xi7vAv6YTRLArPkUDTyAiTwRr+/W9tetQ75mNzVzNo4HXFTDTJVKE8V6SS+Alo88
ViFR8pdr6EsfHRAg6j+EZirFNvbkpLY22mUCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBROLR0xdCfsRWQ9n3jNzrWWYU8dMzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMGVhNjEyOWUtN2E3NS00MmVhLTk4ZTgtNWZlNWViYzU2MWIzLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAARqeyf9QE0UEOxQ
ipy7gSglEQERydCejC8ROWZb+oRkeXGPbLjSWjCt99hALnPBomnDarUoLWj2HSlw
nkrJNQcc4CFa6Mt6yy42JvGBVWp2ictWnyaNLoDiuE94rTl7NTe71Uzc6hFryBjI
r1R97fczkArv8x99zbRudmc2pVXpT5ve9a+E5tYyaj3ir8GVLLo3X6aa9/+fFRov
TUsdOBkaThsCEEqjUAyUFia4wDKVTGQk7E7ZEY9zJSGdOtmPEQKz3UpVjmE9+muy
p+8pcNG0/0Mii7Yapsng2FzsaK7SO/KOby4a8+WUpKDaXetHZY75OuLyxVgzNDPO
qDtRiRw=
-----END CERTIFICATE-----