Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/50a4eddf-325b-4b0a-82fa-37abb5dd4d9a.roa
File:                     50a4eddf-325b-4b0a-82fa-37abb5dd4d9a.roa (raw, json)
Hash identifier:          /XOzglUbiRXKUARvR4+74qGtqrGmZvkgrhdIzCSGDj4=
Subject key identifier:   AD:49:A1:8E:30:4E:83:94:E1:88:79:3B:DD:FA:11:F5:D1:8D:2C:D5
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3D58DCA082D83A31B8B2685FEDC0248935444C85
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/50a4eddf-325b-4b0a-82fa-37abb5dd4d9a.roa
Signing time:             Fri 21 Oct 2022 00:00:00 +0000
ROA not before:           Fri 21 Oct 2022 00:00:00 +0000
ROA not after:            Mon 24 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:58:dc:a0:82:d8:3a:31:b8:b2:68:5f:ed:c0:24:89:35:44:4c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 21 00:00:00 2022 GMT
            Not After : Oct 24 23:59:59 2022 GMT
        Subject: serialNumber=631ea8402ebc23b22c3c926d2446a6bc522c499f3ee281edd71e19d426eb34d5, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f3:9a:87:94:86:c4:c6:6a:a5:b2:1e:a2:25:
                    b4:dd:d7:46:a6:20:b4:14:0e:e0:40:b8:91:c2:66:
                    18:a8:1a:0d:7e:45:a6:90:f1:c6:80:e3:c8:f7:ae:
                    00:0f:17:e7:82:35:31:f1:06:54:d3:bc:39:14:bc:
                    27:ae:6a:4e:d9:d7:e1:13:ab:4e:ff:51:f0:30:19:
                    41:0f:16:0a:e9:69:60:fe:46:25:21:25:8d:60:33:
                    19:36:be:bf:7b:a4:69:44:9d:bb:f0:17:c0:42:fa:
                    b9:68:34:bf:c2:43:2b:a3:03:9b:95:78:7d:12:55:
                    57:15:ca:37:38:0d:bb:d0:9e:4a:8b:b4:bf:51:5d:
                    4d:2b:10:b8:41:58:67:68:69:5d:64:21:90:16:b6:
                    d4:16:8b:f4:0d:3c:f1:0a:30:62:51:a0:12:5c:08:
                    74:96:43:46:9b:f0:7b:d9:9c:53:c0:c5:73:f5:6e:
                    0b:6c:0f:d9:8f:c7:de:f7:e5:96:19:0f:2e:ec:ee:
                    23:64:48:1d:46:02:f7:05:cf:74:ef:f1:0d:cc:0c:
                    6d:d5:db:61:88:a9:89:68:12:b1:d5:c0:7d:05:43:
                    05:cf:04:1a:9d:08:bb:c1:43:35:e4:85:d6:72:7f:
                    99:68:1f:a3:e1:1d:9c:6d:10:b8:3e:8e:0f:c5:6c:
                    dc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:49:A1:8E:30:4E:83:94:E1:88:79:3B:DD:FA:11:F5:D1:8D:2C:D5
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/50a4eddf-325b-4b0a-82fa-37abb5dd4d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:71:66:1f:fe:be:ac:ba:9c:57:de:3d:13:94:a6:69:89:e1:
         f8:6e:52:c1:b4:72:7c:69:b6:d0:06:20:19:48:61:31:f0:d2:
         3a:9b:ad:b6:4c:e9:07:04:26:50:8a:b3:b6:75:7f:4c:d2:07:
         2f:d9:94:69:55:86:70:4b:90:b4:f7:f1:bb:80:e5:77:ad:6e:
         d8:e1:ce:c5:4e:fc:5e:57:7d:38:9c:50:9c:ca:bb:0e:0f:01:
         d6:cc:de:eb:90:64:25:c6:f7:98:2d:51:25:1f:22:07:08:97:
         c7:d8:46:28:93:12:e6:7a:a9:77:84:6d:0e:c5:78:13:b8:54:
         01:be:bd:8e:b7:4f:24:fe:f8:54:b9:0f:4d:e0:35:52:01:b0:
         a9:40:09:5c:68:63:88:cc:d8:47:81:ce:ca:2e:bf:b5:0d:46:
         fe:a9:a9:23:a5:ea:ad:7c:84:5f:7a:38:e6:67:db:22:82:32:
         c3:1a:28:3c:4d:d5:0e:a1:2a:22:fe:eb:09:b3:61:da:52:57:
         bd:99:29:9f:90:fc:5b:17:8a:bd:dd:74:3d:ed:8e:de:29:fb:
         8a:2c:00:77:ea:cd:13:b0:87:57:71:05:7e:ab:86:60:73:28:
         6c:da:65:2d:7b:f7:29:2e:69:54:82:ad:fc:9e:13:9c:bc:c6:
         66:00:97:35
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUPVjcoILYOjG4smhf7cAkiTVETIUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMDIxMDAwMDAwWhcNMjIxMDI0MjM1OTU5
WjCBpTFJMEcGA1UEBRNANjMxZWE4NDAyZWJjMjNiMjJjM2M5MjZkMjQ0NmE2YmM1
MjJjNDk5ZjNlZTI4MWVkZDcxZTE5ZDQyNmViMzRkNTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKnzmoeUhsTGaqWyHqIltN3XRqYgtBQO4EC4kcJmGKgaDX5FppDx
xoDjyPeuAA8X54I1MfEGVNO8ORS8J65qTtnX4ROrTv9R8DAZQQ8WCulpYP5GJSEl
jWAzGTa+v3ukaUSdu/AXwEL6uWg0v8JDK6MDm5V4fRJVVxXKNzgNu9CeSou0v1Fd
TSsQuEFYZ2hpXWQhkBa21BaL9A088QowYlGgElwIdJZDRpvwe9mcU8DFc/VuC2wP
2Y/H3vfllhkPLuzuI2RIHUYC9wXPdO/xDcwMbdXbYYipiWgSsdXAfQVDBc8EGp0I
u8FDNeSF1nJ/mWgfo+EdnG0QuD6OD8Vs3MUCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBStSaGOME6DlOGIeTvd+hH10Y0s1TAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNTBhNGVkZGYtMzI1Yi00YjBhLTgyZmEtMzdhYmI1ZGQ0ZDlhLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABZxZh/+vqy6nFfe
PROUpmmJ4fhuUsG0cnxpttAGIBlIYTHw0jqbrbZM6QcEJlCKs7Z1f0zSBy/ZlGlV
hnBLkLT38buA5XetbtjhzsVO/F5XfTicUJzKuw4PAdbM3uuQZCXG95gtUSUfIgcI
l8fYRiiTEuZ6qXeEbQ7FeBO4VAG+vY63TyT++FS5D03gNVIBsKlACVxoY4jM2EeB
zsouv7UNRv6pqSOl6q18hF96OOZn2yKCMsMaKDxN1Q6hKiL+6wmzYdpSV72ZKZ+Q
/FsXir3ddD3tjt4p+4osAHfqzROwh1dxBX6rhmBzKGzaZS179ykuaVSCrfyeE5y8
xmYAlzU=
-----END CERTIFICATE-----