Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6cdf79e4-019e-46e3-9d61-05c39a64c878.roa
File:                     6cdf79e4-019e-46e3-9d61-05c39a64c878.roa (raw, json)
Hash identifier:          3QcZK+GTN/be7GkacNOe9w6YdCmVu4wGPDUOs69gBcg=
Subject key identifier:   BC:68:F4:2B:57:1D:CF:27:69:43:3E:8D:68:66:EF:14:E0:D3:4C:95
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5E10BE823302970E18C800CCEFD478E2F3350120
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6cdf79e4-019e-46e3-9d61-05c39a64c878.roa
Signing time:             Mon 10 Apr 2023 00:00:00 +0000
ROA not before:           Mon 10 Apr 2023 00:00:00 +0000
ROA not after:            Thu 13 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:10:be:82:33:02:97:0e:18:c8:00:cc:ef:d4:78:e2:f3:35:01:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 10 00:00:00 2023 GMT
            Not After : Apr 13 23:59:59 2023 GMT
        Subject: serialNumber=dfb9e8c3c9abad3108139a85c8055d4a517427c4172715592f15c64344937c77, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:87:28:88:7e:1f:6e:06:a8:34:f3:8a:00:dd:
                    3c:38:e5:fb:4f:3d:46:be:79:a8:d6:44:67:6b:86:
                    c6:c4:f5:12:24:47:42:7a:89:37:90:27:ed:1b:34:
                    f5:e6:7c:e9:5b:96:a8:82:98:4e:3e:7d:85:a1:90:
                    4f:c5:bd:83:14:fb:13:39:37:d1:d2:e2:d8:95:65:
                    e9:9b:c6:ff:6e:64:15:78:91:f3:61:fa:1f:79:aa:
                    4b:25:f5:ab:4d:d9:1f:cf:03:3b:70:6e:63:73:6c:
                    c0:26:e5:c1:9e:45:f7:23:9e:80:22:63:57:e4:91:
                    1b:e4:03:40:e3:17:55:6c:84:bd:73:9a:74:fa:8d:
                    19:0d:5c:43:e3:8e:59:34:e4:6a:68:3b:3e:4c:c2:
                    56:9c:a0:18:8c:a4:c1:4e:0c:34:05:c5:00:11:db:
                    fb:c2:4b:e0:65:ce:7c:2b:28:57:24:a8:51:82:c9:
                    8a:ae:53:d1:d4:96:27:12:76:fe:b7:b7:cd:6b:b6:
                    08:1c:15:4d:3f:4f:b6:b9:8c:b2:62:89:d3:3b:cb:
                    47:a3:43:4d:a4:ac:d3:7c:ad:0b:f1:92:bc:ec:15:
                    c7:85:53:f8:e8:f3:ea:26:41:a7:e7:83:8b:1e:33:
                    08:82:ab:4a:44:62:6a:ea:c2:bf:6b:a4:7d:42:bb:
                    e4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:68:F4:2B:57:1D:CF:27:69:43:3E:8D:68:66:EF:14:E0:D3:4C:95
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6cdf79e4-019e-46e3-9d61-05c39a64c878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:0d:9f:f0:93:48:e7:c7:d0:17:52:02:0b:a4:b7:dc:56:f5:
         12:06:15:4a:20:1c:6c:2c:69:34:01:47:78:ab:ee:5e:41:f9:
         96:ca:55:0f:68:c9:39:cc:17:3c:cf:40:15:6b:1b:3e:3c:8a:
         39:cb:15:42:e0:6d:07:13:6e:de:d3:ae:7b:d0:14:c6:55:17:
         37:33:0b:57:a8:2c:9c:8b:ba:cc:4c:d2:db:ec:21:f8:21:da:
         82:ac:8b:92:6a:b1:ac:ab:6a:16:9a:8f:fd:94:7a:47:d4:05:
         ae:de:a4:69:3f:5f:f1:06:30:c7:a7:33:22:0f:05:05:71:6b:
         4b:7c:ed:72:9c:38:87:da:13:63:81:ae:a4:91:84:f1:3b:e0:
         f6:3d:2d:96:f3:ce:bb:93:50:cf:e9:58:d1:df:1c:e5:b6:cb:
         ac:d3:df:d4:93:47:9e:55:d6:4b:87:c5:7f:d0:18:5c:21:a4:
         f7:6d:b2:6f:7f:69:9b:b8:bd:c1:ce:b1:05:7f:aa:84:f0:c4:
         c0:f5:d9:e3:8d:aa:30:25:6b:64:3a:09:5a:20:5a:06:a5:c9:
         e0:9a:8b:ac:29:20:6c:7d:58:7d:06:72:4b:3b:7f:2d:f5:96:
         6d:13:30:c9:0b:26:fb:8a:07:ef:6c:ba:24:dc:8e:93:b8:94:
         c8:52:fe:07
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUXhC+gjMClw4YyADM79R44vM1ASAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNDEwMDAwMDAwWhcNMjMwNDEzMjM1OTU5
WjCBpTFJMEcGA1UEBRNAZGZiOWU4YzNjOWFiYWQzMTA4MTM5YTg1YzgwNTVkNGE1
MTc0MjdjNDE3MjcxNTU5MmYxNWM2NDM0NDkzN2M3NzEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAI+HKIh+H24GqDTzigDdPDjl+089Rr55qNZEZ2uGxsT1EiRHQnqJ
N5An7Rs09eZ86VuWqIKYTj59haGQT8W9gxT7Ezk30dLi2JVl6ZvG/25kFXiR82H6
H3mqSyX1q03ZH88DO3BuY3NswCblwZ5F9yOegCJjV+SRG+QDQOMXVWyEvXOadPqN
GQ1cQ+OOWTTkamg7PkzCVpygGIykwU4MNAXFABHb+8JL4GXOfCsoVySoUYLJiq5T
0dSWJxJ2/re3zWu2CBwVTT9PtrmMsmKJ0zvLR6NDTaSs03ytC/GSvOwVx4VT+Ojz
6iZBp+eDix4zCIKrSkRiaurCv2ukfUK75H8CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBS8aPQrVx3PJ2lDPo1oZu8U4NNMlTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNmNkZjc5ZTQtMDE5ZS00NmUzLTlkNjEtMDVjMzlhNjRjODc4LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEANn/CTSOfH0BdS
Agukt9xW9RIGFUogHGwsaTQBR3ir7l5B+ZbKVQ9oyTnMFzzPQBVrGz48ijnLFULg
bQcTbt7TrnvQFMZVFzczC1eoLJyLusxM0tvsIfgh2oKsi5Jqsayrahaaj/2UekfU
Ba7epGk/X/EGMMenMyIPBQVxa0t87XKcOIfaE2OBrqSRhPE74PY9LZbzzruTUM/p
WNHfHOW2y6zT39STR55V1kuHxX/QGFwhpPdtsm9/aZu4vcHOsQV/qoTwxMD12eON
qjAla2Q6CVogWgalyeCai6wpIGx9WH0Gcks7fy31lm0TMMkLJvuKB+9suiTcjpO4
lMhS/gc=
-----END CERTIFICATE-----