Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1c46451c-4018-4368-bf93-0c5267ef5622.roa
File:                     1c46451c-4018-4368-bf93-0c5267ef5622.roa (raw, json)
Hash identifier:          zlFJw/KgssAweDbhWXIN2JZ5PEWcv91Ivm6w51eDp4Y=
Subject key identifier:   77:AD:DA:FE:EF:FA:76:C9:3D:92:E0:EB:7D:2F:C7:41:52:FD:23:25
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       750E1E1C5D728F367C26C32F4BD5F902AE1B918C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1c46451c-4018-4368-bf93-0c5267ef5622.roa
Signing time:             Mon 20 Feb 2023 00:00:00 +0000
ROA not before:           Mon 20 Feb 2023 00:00:00 +0000
ROA not after:            Thu 23 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0e:1e:1c:5d:72:8f:36:7c:26:c3:2f:4b:d5:f9:02:ae:1b:91:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 20 00:00:00 2023 GMT
            Not After : Feb 23 23:59:59 2023 GMT
        Subject: serialNumber=ac39fff57fe09d2cc959aa9064f7363d119400a55edbc3d2325e4fd37c7e4928, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:4a:b2:17:8d:1d:77:d0:a0:7f:2c:5f:e9:
                    ae:3f:ab:a0:36:b2:a0:23:25:78:3a:a6:15:3f:94:
                    0c:45:03:b0:bc:fa:34:21:ec:74:c7:e0:48:1f:15:
                    72:9b:5e:e3:4b:13:6e:44:8c:1f:2f:bb:91:fa:0c:
                    39:f6:aa:88:fa:87:10:0e:17:7c:d8:cf:e7:fa:1f:
                    c7:a4:73:36:65:c4:b8:51:bd:75:69:cb:7b:32:d1:
                    39:26:c7:e8:95:24:74:bf:5b:ba:50:b6:91:20:fb:
                    37:0c:de:6c:39:b9:13:37:36:bc:c3:1a:18:11:2c:
                    55:4a:7c:aa:4a:52:76:4c:3e:11:0f:34:a6:67:e2:
                    2b:96:4c:76:0e:c6:7f:20:5b:12:d9:e0:d2:e3:fc:
                    d1:90:a9:f3:3a:27:ef:c8:96:f1:d7:e9:1d:ab:d5:
                    c1:7f:06:44:a9:36:c1:2e:d8:ad:bf:e0:a6:02:22:
                    f4:13:75:e1:f8:01:93:3e:5e:85:df:97:9d:80:32:
                    fe:3e:12:15:dd:0e:cf:ff:41:08:6a:27:d6:50:2b:
                    f0:7d:d0:b0:06:50:80:4f:87:8a:e3:9b:10:a9:ff:
                    a6:c3:fa:60:76:68:a8:88:a8:04:33:51:71:b7:6a:
                    71:75:d6:b5:97:3f:92:57:fa:1f:0f:63:76:96:9f:
                    d2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AD:DA:FE:EF:FA:76:C9:3D:92:E0:EB:7D:2F:C7:41:52:FD:23:25
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1c46451c-4018-4368-bf93-0c5267ef5622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:1c:c0:e2:0b:cb:38:58:82:07:f7:09:11:32:20:49:51:9f:
         b7:0d:a0:9a:9f:e2:2b:7c:74:3b:09:c6:7e:14:39:4e:85:62:
         23:7b:96:09:04:13:46:7a:39:dd:48:80:b0:a8:81:ea:28:84:
         ae:3b:1f:ab:e9:81:12:fa:d1:3c:fc:64:57:4a:66:10:46:75:
         9b:49:09:02:ba:da:68:d3:06:da:32:a9:16:86:9c:f2:ff:68:
         39:66:bc:28:b2:c1:f5:31:3c:05:be:57:a4:e7:a3:06:e1:d7:
         a3:6e:b7:e1:da:0c:2c:65:36:41:be:95:92:41:88:44:61:f5:
         1b:98:29:34:cb:42:95:73:fe:83:b8:d8:c0:73:82:65:ad:1a:
         4e:93:e7:83:95:54:81:47:b4:f9:6c:38:1b:5e:59:cb:02:a4:
         d0:74:55:c2:71:0f:20:c2:4c:f3:70:f2:fd:8a:2f:ac:e0:b3:
         ad:77:45:00:95:fd:c1:2f:41:c8:e3:e1:1c:59:3a:8d:18:5a:
         17:b0:3a:b2:94:69:cf:a3:7e:e2:c0:2a:c1:5f:9d:dd:81:ec:
         19:81:a5:af:72:c9:73:64:b8:73:d2:dd:83:60:55:12:33:16:
         36:cf:49:78:84:42:ca:6c:94:52:b1:b3:94:59:c3:30:5c:48:
         68:66:15:63
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUdQ4eHF1yjzZ8JsMvS9X5Aq4bkYwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMjIwMDAwMDAwWhcNMjMwMjIzMjM1OTU5
WjCBpTFJMEcGA1UEBRNAYWMzOWZmZjU3ZmUwOWQyY2M5NTlhYTkwNjRmNzM2M2Qx
MTk0MDBhNTVlZGJjM2QyMzI1ZTRmZDM3YzdlNDkyODEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMZNSrIXjR130KB/LF/prj+roDayoCMleDqmFT+UDEUDsLz6NCHs
dMfgSB8Vcpte40sTbkSMHy+7kfoMOfaqiPqHEA4XfNjP5/ofx6RzNmXEuFG9dWnL
ezLROSbH6JUkdL9bulC2kSD7NwzebDm5Ezc2vMMaGBEsVUp8qkpSdkw+EQ80pmfi
K5ZMdg7GfyBbEtng0uP80ZCp8zon78iW8dfpHavVwX8GRKk2wS7Yrb/gpgIi9BN1
4fgBkz5ehd+XnYAy/j4SFd0Oz/9BCGon1lAr8H3QsAZQgE+HiuObEKn/psP6YHZo
qIioBDNRcbdqcXXWtZc/klf6Hw9jdpaf0v8CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBR3rdr+7/p2yT2S4Ot9L8dBUv0jJTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMWM0NjQ1MWMtNDAxOC00MzY4LWJmOTMtMGM1MjY3ZWY1NjIyLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEEcwOILyzhYggf3
CREyIElRn7cNoJqf4it8dDsJxn4UOU6FYiN7lgkEE0Z6Od1IgLCogeoohK47H6vp
gRL60Tz8ZFdKZhBGdZtJCQK62mjTBtoyqRaGnPL/aDlmvCiywfUxPAW+V6Tnowbh
16Nut+HaDCxlNkG+lZJBiERh9RuYKTTLQpVz/oO42MBzgmWtGk6T54OVVIFHtPls
OBteWcsCpNB0VcJxDyDCTPNw8v2KL6zgs613RQCV/cEvQcjj4RxZOo0YWhewOrKU
ac+jfuLAKsFfnd2B7BmBpa9yyXNkuHPS3YNgVRIzFjbPSXiEQspslFKxs5RZwzBc
SGhmFWM=
-----END CERTIFICATE-----