Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/39b46ea8-17f0-4ad9-b9df-643ef31b6641.roa
File:                     39b46ea8-17f0-4ad9-b9df-643ef31b6641.roa (raw, json)
Hash identifier:          pEPY9rDjAA6iJRf7/ykbDGsaFk2nLE3VFvJfvz3hqjQ=
Subject key identifier:   E9:69:BA:79:76:46:E3:07:32:55:D3:FE:EC:D1:C8:E5:B6:D1:C2:4C
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       49C55D4BD74B33A79E19D5BB74346992A8EC3BB7
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/39b46ea8-17f0-4ad9-b9df-643ef31b6641.roa
Signing time:             Sun 09 Apr 2023 00:00:00 +0000
ROA not before:           Sun 09 Apr 2023 00:00:00 +0000
ROA not after:            Wed 12 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c5:5d:4b:d7:4b:33:a7:9e:19:d5:bb:74:34:69:92:a8:ec:3b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  9 00:00:00 2023 GMT
            Not After : Apr 12 23:59:59 2023 GMT
        Subject: serialNumber=633e6f9f554670c9bb482a2ad2eb0b541e1a54d3d26fa0d664678ff31048b6a2, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:92:39:d3:93:95:f8:8e:2e:3e:c6:77:63:56:
                    8d:6d:cf:07:e4:bd:8e:6d:ff:85:71:b1:04:ef:43:
                    d2:4c:6f:0e:f9:e5:38:c4:fd:bd:bc:e8:57:59:aa:
                    70:c2:69:36:4c:a0:fa:16:b6:47:dd:54:bf:56:5c:
                    52:d1:e3:04:7d:c8:38:70:a6:c9:db:d2:be:8d:56:
                    af:3a:03:85:98:00:e8:de:3d:30:81:a4:84:ae:06:
                    a9:d1:46:e8:c7:2b:ca:89:91:97:41:19:49:a1:e6:
                    ec:76:8b:d1:49:25:7b:70:08:ca:94:ed:cd:98:a4:
                    03:e9:00:f0:b2:48:e0:05:f5:aa:47:ce:3f:8b:07:
                    48:b3:e1:62:64:b5:4f:29:93:8e:0a:f1:63:92:f9:
                    a8:d2:31:73:ce:55:e1:f8:1e:b8:33:b5:13:0c:7b:
                    e6:dd:71:03:6b:d7:84:95:48:74:cd:f7:f5:fe:85:
                    18:1a:c3:53:e6:05:0a:a0:ca:b2:bd:92:64:2c:c1:
                    c2:28:15:6e:6b:d2:97:6e:9e:33:1b:a5:93:e4:cf:
                    7c:52:15:48:92:e3:04:07:06:ab:99:08:f4:07:46:
                    1b:34:7a:2c:86:86:dc:6f:ac:9c:f4:e7:a9:4e:68:
                    18:9a:88:a4:b0:4d:1b:30:ab:34:f2:54:06:39:95:
                    41:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:69:BA:79:76:46:E3:07:32:55:D3:FE:EC:D1:C8:E5:B6:D1:C2:4C
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/39b46ea8-17f0-4ad9-b9df-643ef31b6641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:4b:db:34:10:bb:2e:b5:25:2b:9d:c4:27:82:aa:26:f3:3c:
         51:6e:30:5d:ba:59:6b:f2:28:0e:ae:2e:b6:93:de:04:c7:16:
         ca:a8:59:dc:90:23:80:2e:23:30:5e:4c:57:69:3a:1b:9e:58:
         07:4b:8b:b7:95:f0:75:ee:cc:9d:19:a1:c4:94:02:86:9e:99:
         5a:b8:f3:38:81:e6:de:c9:4a:b0:78:fb:dd:f2:b2:45:b5:be:
         7b:7d:3b:99:2a:d0:89:41:c6:ec:d5:06:fd:72:43:53:f3:a6:
         7a:8f:7e:46:ea:c9:70:59:d0:6e:02:2c:49:7e:ce:96:19:cd:
         44:7c:90:9a:0d:86:9a:53:63:09:45:e2:21:f2:1c:fa:e2:fd:
         88:4c:ac:05:5b:58:2b:f6:3d:69:80:d2:3a:2d:28:88:eb:16:
         22:f5:de:96:46:eb:ad:c0:52:3f:49:7b:f2:1e:a5:7e:23:c8:
         3f:c8:66:3a:89:5a:18:4c:01:8d:b5:2d:f0:c2:91:70:96:d4:
         27:12:7f:18:3c:d4:4d:54:45:ce:1a:f6:26:75:f4:0a:29:01:
         da:0f:08:f2:59:cf:33:69:17:aa:b9:f0:57:40:d7:96:3a:0a:
         f8:59:49:21:7f:29:19:f0:d6:03:d4:97:48:6b:bf:dc:07:94:
         31:b3:db:10
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUScVdS9dLM6eeGdW7dDRpkqjsO7cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNDA5MDAwMDAwWhcNMjMwNDEyMjM1OTU5
WjCBpTFJMEcGA1UEBRNANjMzZTZmOWY1NTQ2NzBjOWJiNDgyYTJhZDJlYjBiNTQx
ZTFhNTRkM2QyNmZhMGQ2NjQ2NzhmZjMxMDQ4YjZhMjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANWSOdOTlfiOLj7Gd2NWjW3PB+S9jm3/hXGxBO9D0kxvDvnlOMT9
vbzoV1mqcMJpNkyg+ha2R91Uv1ZcUtHjBH3IOHCmydvSvo1WrzoDhZgA6N49MIGk
hK4GqdFG6McryomRl0EZSaHm7HaL0Ukle3AIypTtzZikA+kA8LJI4AX1qkfOP4sH
SLPhYmS1TymTjgrxY5L5qNIxc85V4fgeuDO1Ewx75t1xA2vXhJVIdM339f6FGBrD
U+YFCqDKsr2SZCzBwigVbmvSl26eMxulk+TPfFIVSJLjBAcGq5kI9AdGGzR6LIaG
3G+snPTnqU5oGJqIpLBNGzCrNPJUBjmVQc8CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTpabp5dkbjBzJV0/7s0cjlttHCTDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMzliNDZlYTgtMTdmMC00YWQ5LWI5ZGYtNjQzZWYzMWI2NjQxLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIBL2zQQuy61JSud
xCeCqibzPFFuMF26WWvyKA6uLraT3gTHFsqoWdyQI4AuIzBeTFdpOhueWAdLi7eV
8HXuzJ0ZocSUAoaemVq48ziB5t7JSrB4+93yskW1vnt9O5kq0IlBxuzVBv1yQ1Pz
pnqPfkbqyXBZ0G4CLEl+zpYZzUR8kJoNhppTYwlF4iHyHPri/YhMrAVbWCv2PWmA
0jotKIjrFiL13pZG663AUj9Je/IepX4jyD/IZjqJWhhMAY21LfDCkXCW1CcSfxg8
1E1URc4a9iZ19AopAdoPCPJZzzNpF6q58FdA15Y6CvhZSSF/KRnw1gPUl0hrv9wH
lDGz2xA=
-----END CERTIFICATE-----