Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/649b8175-7d2c-429b-a4c8-fad80d798b73.roa
File:                     649b8175-7d2c-429b-a4c8-fad80d798b73.roa (raw, json)
Hash identifier:          Xy3Ty48ai/JJ5X803GV5UY6wXCma59x6YBCN6jGR56g=
Subject key identifier:   10:2C:CB:E2:B9:C9:36:99:50:E9:A0:34:85:68:81:FE:7C:27:B5:08
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6A18E9A7A101EA384E8C76173972665ED088447B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/649b8175-7d2c-429b-a4c8-fad80d798b73.roa
Signing time:             Tue 15 Nov 2022 00:00:00 +0000
ROA not before:           Tue 15 Nov 2022 00:00:00 +0000
ROA not after:            Fri 18 Nov 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:18:e9:a7:a1:01:ea:38:4e:8c:76:17:39:72:66:5e:d0:88:44:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Nov 15 00:00:00 2022 GMT
            Not After : Nov 18 23:59:59 2022 GMT
        Subject: serialNumber=53974b5a626bf09dfa21c4759bd5950f4ef1157203034b927a418794a683ded8, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1e:fa:62:38:25:ed:c2:35:b4:84:9f:da:d7:
                    a9:46:65:c4:df:59:03:81:90:b8:85:d3:98:e3:85:
                    e9:e1:ad:d1:3a:6e:9a:78:1c:9d:af:a2:ac:f9:5d:
                    a7:98:23:eb:c6:a4:11:d9:87:32:e5:1b:f2:a5:9b:
                    ec:02:4d:a4:5a:f1:78:da:7d:c9:95:72:51:6f:d3:
                    63:9c:53:b2:25:1d:7b:aa:6b:e7:d2:55:b0:19:2d:
                    e8:39:40:9f:c0:fd:9f:72:3d:f1:87:61:33:46:91:
                    d6:bb:18:2b:ae:95:7f:cc:38:07:a5:ea:19:ef:df:
                    36:22:a3:02:6b:b3:37:08:99:87:32:9c:64:df:b4:
                    1d:63:9c:cb:5e:6e:5d:fd:26:bf:36:d4:97:a3:ef:
                    b7:30:f6:e7:73:a1:d8:ff:d1:51:7e:ae:38:2b:ed:
                    c5:d1:3d:00:5b:1c:6d:52:02:e1:47:6e:1b:1e:ac:
                    08:47:47:db:e3:f7:86:5e:ef:be:d5:29:16:01:4f:
                    ad:f3:70:5f:53:3f:4a:fe:fe:b4:73:78:ff:22:63:
                    63:88:5c:c1:34:36:e4:d2:05:49:90:c1:22:8e:39:
                    b9:9e:62:d2:ed:e6:cb:d8:42:59:f8:a2:3c:d2:94:
                    00:dd:e1:57:ab:d5:d2:b8:ae:92:0d:8d:b4:9f:f3:
                    22:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2C:CB:E2:B9:C9:36:99:50:E9:A0:34:85:68:81:FE:7C:27:B5:08
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/649b8175-7d2c-429b-a4c8-fad80d798b73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:20:d5:62:d1:bb:ee:dd:66:bc:4d:9b:85:23:76:e1:14:30:
         89:69:0b:db:a5:e1:00:f7:4e:03:00:3a:37:62:8c:8e:b3:84:
         b6:5f:2b:de:24:68:8d:b8:92:f6:6c:54:83:bd:40:61:59:ad:
         33:89:dc:50:60:6f:e9:36:92:30:a7:cb:8c:7b:52:d1:5d:ca:
         71:df:f0:65:86:fe:a5:5b:91:27:92:ed:ec:7f:8e:f5:03:c8:
         37:76:38:46:c7:45:d2:ec:3a:a2:05:31:06:50:e1:04:28:a3:
         13:c3:ca:fd:ea:8e:84:22:41:c2:0f:dc:2c:b1:0e:a1:ce:8a:
         08:2b:37:39:e7:f8:33:e8:bf:1e:9d:70:ea:3b:74:5a:65:f2:
         0f:54:44:72:54:2b:ef:a9:d3:dd:6a:a7:09:dd:8d:f9:df:be:
         39:69:88:6c:72:96:8f:22:33:56:08:79:76:5c:cc:ef:4a:d7:
         73:e7:48:1c:17:34:43:f5:55:bc:ce:eb:a0:53:b9:3c:aa:db:
         b1:80:50:ac:b1:b1:03:7a:d7:d5:57:a4:e7:d2:4e:0e:12:da:
         f5:ee:e9:b4:33:d8:c6:fe:f5:93:8f:ac:98:2e:01:5b:17:75:
         e2:7e:e5:5e:1a:b2:af:13:f9:ce:ba:93:32:f9:35:d8:7a:df:
         98:68:3f:89
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUahjpp6EB6jhOjHYXOXJmXtCIRHswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMTE1MDAwMDAwWhcNMjIxMTE4MjM1OTU5
WjCBpTFJMEcGA1UEBRNANTM5NzRiNWE2MjZiZjA5ZGZhMjFjNDc1OWJkNTk1MGY0
ZWYxMTU3MjAzMDM0YjkyN2E0MTg3OTRhNjgzZGVkODEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL4e+mI4Je3CNbSEn9rXqUZlxN9ZA4GQuIXTmOOF6eGt0Tpumngc
na+irPldp5gj68akEdmHMuUb8qWb7AJNpFrxeNp9yZVyUW/TY5xTsiUde6pr59JV
sBkt6DlAn8D9n3I98YdhM0aR1rsYK66Vf8w4B6XqGe/fNiKjAmuzNwiZhzKcZN+0
HWOcy15uXf0mvzbUl6PvtzD253Oh2P/RUX6uOCvtxdE9AFscbVIC4UduGx6sCEdH
2+P3hl7vvtUpFgFPrfNwX1M/Sv7+tHN4/yJjY4hcwTQ25NIFSZDBIo45uZ5i0u3m
y9hCWfiiPNKUAN3hV6vV0riukg2NtJ/zIvUCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQQLMviuck2mVDpoDSFaIH+fCe1CDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNjQ5YjgxNzUtN2QyYy00MjliLWE0YzgtZmFkODBkNzk4YjczLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAMcg1WLRu+7dZrxN
m4UjduEUMIlpC9ul4QD3TgMAOjdijI6zhLZfK94kaI24kvZsVIO9QGFZrTOJ3FBg
b+k2kjCny4x7UtFdynHf8GWG/qVbkSeS7ex/jvUDyDd2OEbHRdLsOqIFMQZQ4QQo
oxPDyv3qjoQiQcIP3CyxDqHOiggrNznn+DPovx6dcOo7dFpl8g9URHJUK++p091q
pwndjfnfvjlpiGxylo8iM1YIeXZczO9K13PnSBwXNEP1VbzO66BTuTyq27GAUKyx
sQN619VXpOfSTg4S2vXu6bQz2Mb+9ZOPrJguAVsXdeJ+5V4asq8T+c66kzL5Ndh6
35hoP4k=
-----END CERTIFICATE-----