Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/63920a84-a1f6-47cb-bdf8-aad11884c4b3.roa
File:                     63920a84-a1f6-47cb-bdf8-aad11884c4b3.roa (raw, json)
Hash identifier:          Da+DXssVH3o1RCT8GNqS+bufODSjNs/oyZ0+Y/6mUZI=
Subject key identifier:   0F:B7:D9:AB:4B:D7:47:93:2F:AA:43:9F:6B:9F:DC:9A:2C:36:4A:E1
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7F924725EBD62DB1AD92D465B65CCD4E38D291E9
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/63920a84-a1f6-47cb-bdf8-aad11884c4b3.roa
Signing time:             Sun 26 Feb 2023 00:00:00 +0000
ROA not before:           Sun 26 Feb 2023 00:00:00 +0000
ROA not after:            Wed 01 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:92:47:25:eb:d6:2d:b1:ad:92:d4:65:b6:5c:cd:4e:38:d2:91:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 26 00:00:00 2023 GMT
            Not After : Mar  1 23:59:59 2023 GMT
        Subject: serialNumber=7e02166eb0444e21278dfdaa0df42652f54757064185e818a4b659eab564c9e5, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3d:52:0a:ff:28:6a:ff:6f:68:64:72:92:94:
                    4a:61:d5:c6:ce:1a:c7:f5:06:75:47:a1:cf:e6:24:
                    23:04:02:ff:f7:9b:c7:0a:0b:2e:fe:d1:3a:6f:c5:
                    69:d3:1a:1f:fe:42:34:a7:de:1a:18:d2:cd:c9:70:
                    30:f2:71:10:4f:60:ef:a4:4f:f0:18:cd:ba:d7:2f:
                    70:e8:63:e3:a6:5f:35:00:dc:40:08:51:c1:f3:c5:
                    35:3f:8f:ce:96:76:e3:19:60:94:21:f1:cf:66:81:
                    2e:65:5c:57:fd:a9:fa:9d:71:b6:4c:5a:9d:05:ec:
                    4f:e4:fd:33:a8:11:1b:38:93:36:bb:75:16:0e:6f:
                    34:36:4f:6a:f6:7b:48:0f:d7:15:fe:16:a9:fe:e2:
                    ad:d7:67:6f:4f:ae:9c:63:ce:56:c5:45:fc:11:ba:
                    4e:b4:41:05:2e:8d:68:0e:24:6f:17:19:f6:92:d3:
                    f6:b2:14:e3:78:e9:fb:e2:2c:96:9c:b7:c5:f1:05:
                    50:9c:e6:77:d2:b0:5e:2e:cc:d5:18:5a:9e:9a:00:
                    81:64:1d:d2:15:e4:5e:ae:a6:35:01:89:f6:76:46:
                    a6:a4:82:59:ae:a1:08:54:e8:0d:cc:e3:b2:ea:25:
                    c6:2b:1a:87:ec:75:7b:f6:f8:87:ec:75:51:a8:ef:
                    31:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B7:D9:AB:4B:D7:47:93:2F:AA:43:9F:6B:9F:DC:9A:2C:36:4A:E1
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/63920a84-a1f6-47cb-bdf8-aad11884c4b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:dc:01:b5:50:67:a3:ce:e8:3a:6b:ac:f0:1f:c4:24:36:79:
         4d:d7:97:38:45:36:5f:22:02:ec:c8:67:8b:8c:da:fd:51:00:
         dc:bd:0b:38:73:99:b6:85:6e:80:ca:2d:c3:1a:3b:36:c7:80:
         08:25:0f:4d:09:1f:5f:fc:44:c3:fb:f9:51:29:89:50:da:e0:
         02:8f:3b:ef:97:90:b4:59:c8:bd:54:c8:a3:2b:0f:9d:1c:3b:
         66:95:6b:cf:8c:35:9b:9f:77:80:2b:be:70:ce:79:ce:60:98:
         a4:f6:4d:0d:8b:ee:ee:8e:ce:b9:b2:66:8c:62:79:a0:c9:f2:
         f2:cb:24:ad:2c:08:a0:65:53:51:03:e9:d2:6a:60:c4:75:23:
         de:80:50:6d:e5:44:cd:87:1a:7d:3d:2c:60:83:d9:18:c1:15:
         6c:c7:78:53:11:17:f8:e5:4c:20:d7:ad:99:69:0a:e4:de:58:
         f3:44:99:ad:c5:ab:c1:da:0a:4e:13:b2:eb:46:8d:cc:be:36:
         c5:95:ff:44:dd:d0:36:de:a8:2c:59:d0:43:8c:80:e9:d9:d4:
         4f:85:8b:76:6d:42:c5:d3:55:6d:03:32:f4:ac:31:8e:00:62:
         be:9e:b2:6b:67:ee:b6:95:d6:97:00:8f:e8:78:59:88:24:67:
         ce:f0:d9:8b
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUf5JHJevWLbGtktRltlzNTjjSkekwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMjI2MDAwMDAwWhcNMjMwMzAxMjM1OTU5
WjCBpTFJMEcGA1UEBRNAN2UwMjE2NmViMDQ0NGUyMTI3OGRmZGFhMGRmNDI2NTJm
NTQ3NTcwNjQxODVlODE4YTRiNjU5ZWFiNTY0YzllNTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM09Ugr/KGr/b2hkcpKUSmHVxs4ax/UGdUehz+YkIwQC//ebxwoL
Lv7ROm/FadMaH/5CNKfeGhjSzclwMPJxEE9g76RP8BjNutcvcOhj46ZfNQDcQAhR
wfPFNT+PzpZ24xlglCHxz2aBLmVcV/2p+p1xtkxanQXsT+T9M6gRGziTNrt1Fg5v
NDZPavZ7SA/XFf4Wqf7irddnb0+unGPOVsVF/BG6TrRBBS6NaA4kbxcZ9pLT9rIU
43jp++Islpy3xfEFUJzmd9KwXi7M1RhanpoAgWQd0hXkXq6mNQGJ9nZGpqSCWa6h
CFToDczjsuolxisah+x1e/b4h+x1UajvMSECAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQPt9mrS9dHky+qQ59rn9yaLDZK4TAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNjM5MjBhODQtYTFmNi00N2NiLWJkZjgtYWFkMTE4ODRjNGIzLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAC3cAbVQZ6PO6Dpr
rPAfxCQ2eU3XlzhFNl8iAuzIZ4uM2v1RANy9CzhzmbaFboDKLcMaOzbHgAglD00J
H1/8RMP7+VEpiVDa4AKPO++XkLRZyL1UyKMrD50cO2aVa8+MNZufd4ArvnDOec5g
mKT2TQ2L7u6OzrmyZoxieaDJ8vLLJK0sCKBlU1ED6dJqYMR1I96AUG3lRM2HGn09
LGCD2RjBFWzHeFMRF/jlTCDXrZlpCuTeWPNEma3Fq8HaCk4TsutGjcy+NsWV/0Td
0DbeqCxZ0EOMgOnZ1E+Fi3ZtQsXTVW0DMvSsMY4AYr6esmtn7raV1pcAj+h4WYgk
Z87w2Ys=
-----END CERTIFICATE-----