Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/47b6d75d-0860-4052-9f8d-1360570fbefe.roa
File:                     47b6d75d-0860-4052-9f8d-1360570fbefe.roa (raw, json)
Hash identifier:          8mj4+f1ruOZvcToasbKaeJRQalqKIyBSnqujpYl/YpY=
Subject key identifier:   F2:22:3D:FA:76:97:C5:4D:60:E7:EB:ED:FD:BC:AB:61:D2:88:FF:92
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       194F766AAB6F6ED78EDBCAA816D458B4951D5B5C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/47b6d75d-0860-4052-9f8d-1360570fbefe.roa
Signing time:             Sun 05 Mar 2023 00:00:00 +0000
ROA not before:           Sun 05 Mar 2023 00:00:00 +0000
ROA not after:            Wed 08 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:4f:76:6a:ab:6f:6e:d7:8e:db:ca:a8:16:d4:58:b4:95:1d:5b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  5 00:00:00 2023 GMT
            Not After : Mar  8 23:59:59 2023 GMT
        Subject: serialNumber=fe273eb8fe9aff1279a2eee11597a31ab34e805878ca4d35288b6460e73a742a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:6c:4e:a6:81:b8:99:2a:81:5a:6a:5d:f5:
                    3d:eb:85:bc:07:af:38:f6:e5:4f:a1:cb:06:d4:09:
                    d3:17:6c:b4:63:a5:ca:b1:72:29:08:86:c1:0a:d7:
                    9a:fe:6a:55:dd:19:ab:13:59:b8:36:0c:33:e1:13:
                    99:d0:6c:43:54:9d:c1:c7:7a:46:9a:0f:9f:54:b2:
                    6a:35:8c:a8:14:bb:e5:e1:f5:59:16:18:d8:08:08:
                    ec:9f:62:43:b8:20:ed:82:d2:68:60:fe:ad:ed:7d:
                    69:91:ff:c3:40:c2:c0:ae:0f:e6:0c:84:6c:bc:73:
                    61:6e:73:36:eb:85:76:ab:b6:cb:47:8b:69:1b:7c:
                    fb:8d:46:80:09:b5:7f:9d:2c:67:7f:89:50:58:66:
                    92:48:32:36:8d:f4:bc:b5:d1:ea:e3:ce:96:12:58:
                    4e:36:9c:78:be:ca:10:cd:95:8c:39:b8:39:88:11:
                    19:2d:1b:8e:fe:7f:50:3d:0f:2e:76:2c:91:68:f0:
                    ca:95:2f:1d:34:30:21:3f:15:8b:40:94:50:39:1e:
                    7d:dd:22:0b:e2:92:66:35:1e:7c:ef:03:07:76:0a:
                    dc:a4:60:ef:b9:0e:e3:24:b8:8a:f2:36:f0:70:fe:
                    da:a5:9b:11:9b:03:71:d6:a2:00:d3:d4:e7:17:5e:
                    c2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:22:3D:FA:76:97:C5:4D:60:E7:EB:ED:FD:BC:AB:61:D2:88:FF:92
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/47b6d75d-0860-4052-9f8d-1360570fbefe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:c6:40:75:47:e1:2e:f6:da:df:01:f5:de:7d:3a:ab:52:7a:
         80:32:6f:85:bf:34:4f:2a:be:41:23:38:f8:ba:1d:0b:98:dd:
         d1:9a:c9:1b:3e:ab:ef:44:5a:38:25:a0:dc:52:9f:f9:2c:2d:
         ca:89:08:a4:99:74:06:f8:82:b3:56:31:03:74:6a:08:79:95:
         a0:22:64:ee:64:b6:7f:5a:40:8f:37:0c:64:18:89:54:c7:a3:
         fc:80:0e:29:65:db:a2:17:fa:68:0a:35:19:8c:00:db:2c:4f:
         4d:28:ab:47:42:f6:88:9c:07:1c:b2:87:19:ff:a1:50:d2:a5:
         7f:46:af:25:5f:5c:81:16:19:48:fd:89:fc:74:d2:a7:61:4a:
         7e:f5:f4:4c:2e:53:1a:83:82:c5:2f:67:60:5f:80:02:a0:85:
         4a:5b:23:f8:56:8d:be:9c:72:de:82:b4:d8:72:e2:d9:71:a5:
         92:1a:03:70:67:b8:ad:c5:45:94:33:34:b3:a8:34:49:32:fd:
         67:9a:98:b0:06:59:fe:b2:a3:99:29:04:63:b9:e2:20:b0:4a:
         8c:ae:f7:28:3f:2d:77:d8:f2:57:24:d2:aa:c6:4a:d2:38:44:
         ff:ae:64:b9:c6:a5:a0:3b:c6:3a:40:a4:99:23:b0:5d:23:e1:
         a7:eb:cc:53
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUGU92aqtvbteO28qoFtRYtJUdW1wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzA1MDAwMDAwWhcNMjMwMzA4MjM1OTU5
WjCBpTFJMEcGA1UEBRNAZmUyNzNlYjhmZTlhZmYxMjc5YTJlZWUxMTU5N2EzMWFi
MzRlODA1ODc4Y2E0ZDM1Mjg4YjY0NjBlNzNhNzQyYTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL/GbE6mgbiZKoFaal31PeuFvAevOPblT6HLBtQJ0xdstGOlyrFy
KQiGwQrXmv5qVd0ZqxNZuDYMM+ETmdBsQ1Sdwcd6RpoPn1SyajWMqBS75eH1WRYY
2AgI7J9iQ7gg7YLSaGD+re19aZH/w0DCwK4P5gyEbLxzYW5zNuuFdqu2y0eLaRt8
+41GgAm1f50sZ3+JUFhmkkgyNo30vLXR6uPOlhJYTjaceL7KEM2VjDm4OYgRGS0b
jv5/UD0PLnYskWjwypUvHTQwIT8Vi0CUUDkefd0iC+KSZjUefO8DB3YK3KRg77kO
4yS4ivI28HD+2qWbEZsDcdaiANPU5xdewpsCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTyIj36dpfFTWDn6+39vKth0oj/kjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNDdiNmQ3NWQtMDg2MC00MDUyLTlmOGQtMTM2MDU3MGZiZWZlLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALjGQHVH4S722t8B
9d59OqtSeoAyb4W/NE8qvkEjOPi6HQuY3dGayRs+q+9EWjgloNxSn/ksLcqJCKSZ
dAb4grNWMQN0agh5laAiZO5ktn9aQI83DGQYiVTHo/yADill26IX+mgKNRmMANss
T00oq0dC9oicBxyyhxn/oVDSpX9GryVfXIEWGUj9ifx00qdhSn719EwuUxqDgsUv
Z2BfgAKghUpbI/hWjb6cct6CtNhy4tlxpZIaA3BnuK3FRZQzNLOoNEky/WeamLAG
Wf6yo5kpBGO54iCwSoyu9yg/LXfY8lck0qrGStI4RP+uZLnGpaA7xjpApJkjsF0j
4afrzFM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:41 2023 by rpki-client on console-ams.rpki-client.org