Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/42b46348-0ba1-407f-ba53-8fd1bfced988.roa
File:                     42b46348-0ba1-407f-ba53-8fd1bfced988.roa (raw, json)
Hash identifier:          dX26r7erVp2hng/DHfHPQWw0i9FeaKIV/gYT2evsWWA=
Subject key identifier:   A2:F5:5F:2E:B7:E0:C1:4C:69:57:E5:88:49:79:DB:77:81:01:B5:C4
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3E1B3972EBA9FAB9DD9629BC3A01C1A133F601BF
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/42b46348-0ba1-407f-ba53-8fd1bfced988.roa
Signing time:             Mon 17 Apr 2023 00:00:00 +0000
ROA not before:           Mon 17 Apr 2023 00:00:00 +0000
ROA not after:            Thu 20 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1b:39:72:eb:a9:fa:b9:dd:96:29:bc:3a:01:c1:a1:33:f6:01:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 17 00:00:00 2023 GMT
            Not After : Apr 20 23:59:59 2023 GMT
        Subject: serialNumber=9db33164283d411ada14d3466d73260bd6d79d7c940c6d073af44e876ebf972b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b3:31:18:f7:41:35:08:75:06:5f:d4:ae:2a:
                    db:72:3d:bf:00:e3:42:77:4b:a7:e5:b9:14:a0:12:
                    05:d4:05:77:ba:78:fc:a5:b8:5d:ed:38:8b:5c:d2:
                    cf:b5:76:8c:f6:f2:10:ed:64:60:01:56:13:e9:d2:
                    86:0f:4d:2d:a6:5b:26:10:52:21:ab:4d:ba:fd:b6:
                    44:71:f6:da:34:60:1f:b6:7d:04:da:dc:6c:e8:72:
                    41:43:0d:b1:57:cd:cc:ec:09:80:30:24:dd:aa:3c:
                    2a:cf:05:61:cc:df:0c:1f:75:29:13:6a:0f:82:ad:
                    3d:4e:e7:fb:99:48:09:36:ce:cd:af:e8:af:00:2c:
                    d1:0d:a0:85:42:56:06:66:02:10:cf:bf:8a:e0:2d:
                    b4:47:f3:1a:18:e5:07:24:65:88:01:82:00:fa:d5:
                    e3:22:3c:30:ba:58:57:fa:70:13:37:88:99:bf:07:
                    c4:81:19:bf:97:64:18:76:14:ea:9c:f2:00:c0:25:
                    4f:64:ec:ee:ed:73:ee:9e:3f:9a:0b:3e:26:0f:c9:
                    d0:78:26:55:b4:f4:53:b0:f1:22:e4:17:80:84:79:
                    d0:c2:57:50:fd:a3:b7:03:05:60:55:47:bd:5a:9e:
                    2b:d8:97:20:96:1d:f5:65:db:a9:e2:a0:44:1a:32:
                    f5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F5:5F:2E:B7:E0:C1:4C:69:57:E5:88:49:79:DB:77:81:01:B5:C4
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/42b46348-0ba1-407f-ba53-8fd1bfced988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:0b:5a:76:17:1c:8e:7a:2d:03:ea:20:6e:e1:ee:1a:db:26:
         8e:ab:84:ec:89:e3:f3:1b:35:61:af:72:4e:89:00:1c:72:f5:
         eb:fb:e4:a4:fc:33:93:46:0f:96:df:7e:22:a9:05:3a:81:7e:
         d8:cf:7d:2e:4e:40:00:f4:4e:25:fc:90:a9:80:f2:59:a7:b8:
         e0:a9:bb:cf:1f:bc:f5:fc:1a:b8:73:a8:38:0d:b6:2a:de:28:
         4e:84:a7:18:55:7b:99:30:1d:11:a3:6f:f0:59:ab:a0:1d:1c:
         57:78:5b:a7:c2:a9:0f:d6:21:3f:14:7c:50:04:f5:56:b3:93:
         86:f4:a9:72:ee:bf:8f:70:1a:cc:ae:56:9e:0d:f7:83:2f:fc:
         63:b3:bd:0a:b7:85:16:e5:2d:42:cd:e0:00:cd:7e:c2:9c:cb:
         5d:1d:72:4a:cc:96:8b:90:06:fe:c3:93:32:cc:76:f5:eb:dd:
         9c:02:a6:3e:bf:cd:43:90:6b:01:af:33:89:17:b1:d5:56:99:
         56:45:93:8e:ee:80:05:3a:c6:11:66:36:02:65:a7:6e:74:ea:
         3d:90:99:54:e8:b8:36:d6:c0:4a:02:dd:6e:d1:a1:3b:8c:ef:
         2e:9a:a0:3f:e4:f2:19:9f:a2:c6:e5:a2:29:3e:53:1b:79:d8:
         c1:4c:c1:c9
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUPhs5cuup+rndlim8OgHBoTP2Ab8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNDE3MDAwMDAwWhcNMjMwNDIwMjM1OTU5
WjCBpTFJMEcGA1UEBRNAOWRiMzMxNjQyODNkNDExYWRhMTRkMzQ2NmQ3MzI2MGJk
NmQ3OWQ3Yzk0MGM2ZDA3M2FmNDRlODc2ZWJmOTcyYjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANKzMRj3QTUIdQZf1K4q23I9vwDjQndLp+W5FKASBdQFd7p4/KW4
Xe04i1zSz7V2jPbyEO1kYAFWE+nShg9NLaZbJhBSIatNuv22RHH22jRgH7Z9BNrc
bOhyQUMNsVfNzOwJgDAk3ao8Ks8FYczfDB91KRNqD4KtPU7n+5lICTbOza/orwAs
0Q2ghUJWBmYCEM+/iuAttEfzGhjlByRliAGCAPrV4yI8MLpYV/pwEzeImb8HxIEZ
v5dkGHYU6pzyAMAlT2Ts7u1z7p4/mgs+Jg/J0HgmVbT0U7DxIuQXgIR50MJXUP2j
twMFYFVHvVqeK9iXIJYd9WXbqeKgRBoy9dECAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBSi9V8ut+DBTGlX5YhJedt3gQG1xDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNDJiNDYzNDgtMGJhMS00MDdmLWJhNTMtOGZkMWJmY2VkOTg4LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIsLWnYXHI56LQPq
IG7h7hrbJo6rhOyJ4/MbNWGvck6JABxy9ev75KT8M5NGD5bffiKpBTqBftjPfS5O
QAD0TiX8kKmA8lmnuOCpu88fvPX8GrhzqDgNtireKE6EpxhVe5kwHRGjb/BZq6Ad
HFd4W6fCqQ/WIT8UfFAE9Vazk4b0qXLuv49wGsyuVp4N94Mv/GOzvQq3hRblLULN
4ADNfsKcy10dckrMlouQBv7DkzLMdvXr3ZwCpj6/zUOQawGvM4kXsdVWmVZFk47u
gAU6xhFmNgJlp2506j2QmVTouDbWwEoC3W7RoTuM7y6aoD/k8hmfosbloik+Uxt5
2MFMwck=
-----END CERTIFICATE-----