Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/48ec4cab-7d6e-470c-9df1-e83eb7feb2dc.roa
File:                     48ec4cab-7d6e-470c-9df1-e83eb7feb2dc.roa (raw, json)
Hash identifier:          mJgxwKCUaGYCz2yWu/ux1VewcSiOWs3Qcae8BkeW5Us=
Subject key identifier:   7C:7C:73:9B:98:6A:D2:18:0B:02:8E:42:46:8D:B8:DE:56:0C:26:D2
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4B2B718EC3446D7EA64561EA082E4161D8EB14FB
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/48ec4cab-7d6e-470c-9df1-e83eb7feb2dc.roa
Signing time:             Tue 14 Feb 2023 00:00:00 +0000
ROA not before:           Tue 14 Feb 2023 00:00:00 +0000
ROA not after:            Fri 17 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2b:71:8e:c3:44:6d:7e:a6:45:61:ea:08:2e:41:61:d8:eb:14:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 14 00:00:00 2023 GMT
            Not After : Feb 17 23:59:59 2023 GMT
        Subject: serialNumber=22708ae72b40ef42bf5cd91ea3051bc59efaea6aa5a4969e92cbf3c1fca908f8, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:16:01:4c:c9:50:f1:c4:94:0a:93:ad:4a:4d:
                    d1:f0:f3:88:57:29:09:c5:93:07:88:3b:b2:3b:fc:
                    a8:99:41:e2:22:5c:51:db:7e:33:9e:20:0e:cc:0a:
                    ac:7d:06:ef:1b:a9:41:31:41:af:d4:6b:6e:8f:8c:
                    d1:30:c7:3e:95:71:55:31:76:ee:47:bb:df:94:07:
                    29:1f:f3:26:67:cf:f3:8f:de:4f:6e:2a:44:cc:f9:
                    2c:3b:47:07:0f:e3:4a:e0:9b:7a:c9:64:68:98:e7:
                    79:4e:d6:d6:a8:8b:3c:68:7b:ec:3d:3a:62:69:d9:
                    05:82:f9:7f:31:11:a9:c9:74:d0:f8:eb:96:7c:c3:
                    61:19:d0:21:e5:66:3a:d7:52:3e:48:79:d5:cd:e2:
                    e9:73:4d:e7:25:f3:02:67:2a:37:28:1f:3d:11:b4:
                    46:36:88:02:70:48:3a:d0:22:1a:4b:ea:0e:af:1f:
                    d0:c5:6d:87:75:4d:e9:58:5e:91:fe:43:a1:b4:42:
                    ba:de:bb:18:79:8c:6b:d0:46:01:d7:96:34:4c:7c:
                    ad:dd:cd:22:22:fe:68:8f:7e:e2:82:f1:4b:44:af:
                    ea:b1:29:07:e3:85:92:44:c0:02:0f:f5:5d:8e:80:
                    51:ec:7f:7a:51:ac:e9:d1:d1:76:55:cb:9d:aa:5e:
                    b4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7C:73:9B:98:6A:D2:18:0B:02:8E:42:46:8D:B8:DE:56:0C:26:D2
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/48ec4cab-7d6e-470c-9df1-e83eb7feb2dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:a4:1a:a7:04:a2:86:48:ad:b8:38:74:a3:b8:96:d7:07:2e:
         67:7a:c8:6a:a8:05:4f:41:08:7f:ed:af:00:b8:94:62:18:45:
         00:3f:49:81:99:39:f8:d6:3e:e3:72:df:ee:46:9c:36:f4:f6:
         4d:4d:0a:c6:74:40:c8:ec:fd:fc:5e:fb:64:10:f0:13:4b:3e:
         87:45:25:bb:59:7c:9f:9b:04:d4:cc:b4:5c:ae:09:c6:5d:7c:
         39:90:41:d6:f5:cd:a3:74:96:eb:c7:3c:8b:20:a3:12:3c:0e:
         56:df:45:e6:1c:c7:be:4e:54:38:aa:56:5b:5c:f1:d5:b9:0e:
         83:da:32:68:25:73:3f:72:42:ce:4b:83:fe:f6:90:e4:6f:ac:
         a6:90:cd:43:e3:e2:4b:1c:63:6e:a5:18:af:58:02:1b:84:5f:
         83:95:c2:55:ff:ff:37:6d:13:e1:73:c2:de:43:a2:3b:74:40:
         3d:be:ed:ef:02:7f:bd:55:62:92:95:e8:6c:b9:7b:9c:ac:da:
         1b:f2:a9:93:5e:27:04:26:af:c9:2c:84:cf:9d:f7:f7:80:10:
         3e:6e:fb:46:dd:01:a5:29:25:50:fe:44:bb:28:69:b7:83:6c:
         58:53:17:bf:86:f1:7d:4b:fb:58:c3:ef:55:63:3c:55:fd:0f:
         9a:e3:2d:5f
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUSytxjsNEbX6mRWHqCC5BYdjrFPswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMjE0MDAwMDAwWhcNMjMwMjE3MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMjI3MDhhZTcyYjQwZWY0MmJmNWNkOTFlYTMwNTFiYzU5
ZWZhZWE2YWE1YTQ5NjllOTJjYmYzYzFmY2E5MDhmODEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKgWAUzJUPHElAqTrUpN0fDziFcpCcWTB4g7sjv8qJlB4iJcUdt+
M54gDswKrH0G7xupQTFBr9Rrbo+M0TDHPpVxVTF27ke735QHKR/zJmfP84/eT24q
RMz5LDtHBw/jSuCbeslkaJjneU7W1qiLPGh77D06YmnZBYL5fzERqcl00PjrlnzD
YRnQIeVmOtdSPkh51c3i6XNN5yXzAmcqNygfPRG0RjaIAnBIOtAiGkvqDq8f0MVt
h3VN6Vhekf5DobRCut67GHmMa9BGAdeWNEx8rd3NIiL+aI9+4oLxS0Sv6rEpB+OF
kkTAAg/1XY6AUex/elGs6dHRdlXLnapetJ0CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBR8fHObmGrSGAsCjkJGjbjeVgwm0jAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNDhlYzRjYWItN2Q2ZS00NzBjLTlkZjEtZTgzZWI3ZmViMmRjLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABCkGqcEooZIrbg4
dKO4ltcHLmd6yGqoBU9BCH/trwC4lGIYRQA/SYGZOfjWPuNy3+5GnDb09k1NCsZ0
QMjs/fxe+2QQ8BNLPodFJbtZfJ+bBNTMtFyuCcZdfDmQQdb1zaN0luvHPIsgoxI8
DlbfReYcx75OVDiqVltc8dW5DoPaMmglcz9yQs5Lg/72kORvrKaQzUPj4kscY26l
GK9YAhuEX4OVwlX//zdtE+Fzwt5Dojt0QD2+7e8Cf71VYpKV6Gy5e5ys2hvyqZNe
JwQmr8kshM+d9/eAED5u+0bdAaUpJVD+RLsoabeDbFhTF7+G8X1L+1jD71VjPFX9
D5rjLV8=
-----END CERTIFICATE-----