Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7869af58-6c33-4c75-b681-437193597b32.roa
File:                     7869af58-6c33-4c75-b681-437193597b32.roa (raw, json)
Hash identifier:          lFn89sV0nxEUrgJsF7TCJDyDGBxZ2JpCI/ac0z8bntA=
Subject key identifier:   42:CF:A0:0A:A3:FB:BC:F0:D7:D7:96:96:B4:53:40:D2:94:36:C0:04
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       09B681900FA05F3600B5F904878EED177D476E10
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7869af58-6c33-4c75-b681-437193597b32.roa
Signing time:             Mon 06 Mar 2023 00:00:00 +0000
ROA not before:           Mon 06 Mar 2023 00:00:00 +0000
ROA not after:            Thu 09 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b6:81:90:0f:a0:5f:36:00:b5:f9:04:87:8e:ed:17:7d:47:6e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  6 00:00:00 2023 GMT
            Not After : Mar  9 23:59:59 2023 GMT
        Subject: serialNumber=d4593bfb72ae4d93b07fb7a2a2662d05741e05bc2c39ec04b38226dbe5346478, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:71:e2:34:a8:83:9b:cd:37:5b:1d:e8:26:
                    52:b6:08:6f:74:c0:c4:92:8b:d7:c8:04:dc:ef:bf:
                    73:55:b2:39:d6:1b:de:51:aa:65:85:1c:0d:2f:53:
                    29:93:8a:7d:b3:aa:c9:4a:08:4b:15:e6:07:bf:03:
                    e9:c0:2b:93:99:fe:9b:4b:68:90:fe:f8:f6:52:23:
                    30:e6:8d:26:bd:5e:4b:98:33:cc:08:d3:d9:df:50:
                    96:e4:ee:ad:0e:59:da:e1:63:db:43:61:10:93:09:
                    25:b3:0e:44:d5:af:ae:87:18:6f:65:69:e3:43:15:
                    1f:e2:d4:12:ab:1e:ba:a5:09:5d:ae:12:23:cd:f6:
                    58:eb:a6:3e:10:fa:f0:28:b6:80:a8:40:41:38:d0:
                    bc:4f:86:a9:57:cb:87:28:bc:1d:e6:52:45:0d:7b:
                    e2:c5:3c:e4:8e:a0:45:41:04:dc:66:7f:09:e9:28:
                    05:f4:e5:2b:d3:9f:a0:b0:ad:9f:b8:31:6e:9c:3d:
                    38:f3:8a:57:37:b6:27:2b:db:a9:31:ea:10:c8:77:
                    dc:fb:d3:1a:9d:e3:7c:52:90:b3:82:18:c1:e4:b9:
                    0d:81:e7:f3:46:1a:38:bd:fd:9c:6c:f4:af:2f:a1:
                    58:74:b1:7e:dc:45:f4:3b:39:db:52:e8:7c:f9:20:
                    28:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CF:A0:0A:A3:FB:BC:F0:D7:D7:96:96:B4:53:40:D2:94:36:C0:04
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7869af58-6c33-4c75-b681-437193597b32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:ed:3a:cd:ea:fe:47:79:01:57:f7:6a:6f:72:1f:2a:65:ef:
         9a:25:af:84:a6:35:2a:fe:1a:9b:1e:50:35:4a:12:84:52:43:
         c4:b7:93:c9:49:e1:d8:29:e0:16:16:dc:04:11:ce:3a:a4:0a:
         2f:86:5e:62:f3:94:15:79:52:81:1a:27:cc:72:63:26:3a:12:
         a0:fa:4b:c0:de:80:a8:2a:ee:8f:d3:7b:54:2a:d8:1f:ad:6b:
         ef:bd:3b:f7:a6:88:9b:1e:fb:60:48:6e:5b:89:d7:e8:be:d8:
         d5:56:b5:22:1d:99:61:4a:ad:4d:ef:61:a0:f1:a0:67:ce:1f:
         2b:56:cb:d9:4c:a8:43:c4:c1:45:19:dd:a1:bd:48:b8:9d:62:
         e4:6c:98:3a:3f:0d:7e:12:8b:21:6f:15:52:af:ba:fc:2f:e0:
         dd:77:58:ed:48:c1:c9:03:ae:8e:21:5f:a8:cf:5e:f1:14:06:
         13:66:91:5b:1d:34:9b:2f:95:ef:c3:0a:5a:0b:23:b3:97:81:
         dc:17:4c:c3:8e:72:b9:b2:81:32:08:29:4a:00:1f:d8:6c:9a:
         d3:81:bd:d3:c6:0c:07:76:61:9a:d6:23:b6:f8:3f:ed:3f:7a:
         d8:cb:bd:fe:f2:19:f3:c8:17:1d:41:1f:5f:ac:61:0b:43:41:
         11:50:c2:0e
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUCbaBkA+gXzYAtfkEh47tF31HbhAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzA2MDAwMDAwWhcNMjMwMzA5MjM1OTU5
WjCBpTFJMEcGA1UEBRNAZDQ1OTNiZmI3MmFlNGQ5M2IwN2ZiN2EyYTI2NjJkMDU3
NDFlMDViYzJjMzllYzA0YjM4MjI2ZGJlNTM0NjQ3ODEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKoVceI0qIObzTdbHegmUrYIb3TAxJKL18gE3O+/c1WyOdYb3lGq
ZYUcDS9TKZOKfbOqyUoISxXmB78D6cArk5n+m0tokP749lIjMOaNJr1eS5gzzAjT
2d9QluTurQ5Z2uFj20NhEJMJJbMORNWvrocYb2Vp40MVH+LUEqseuqUJXa4SI832
WOumPhD68Ci2gKhAQTjQvE+GqVfLhyi8HeZSRQ174sU85I6gRUEE3GZ/CekoBfTl
K9OfoLCtn7gxbpw9OPOKVze2JyvbqTHqEMh33PvTGp3jfFKQs4IYweS5DYHn80Ya
OL39nGz0ry+hWHSxftxF9Ds521LofPkgKNsCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRCz6AKo/u88NfXlpa0U0DSlDbABDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNzg2OWFmNTgtNmMzMy00Yzc1LWI2ODEtNDM3MTkzNTk3YjMyLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGztOs3q/kd5AVf3
am9yHypl75olr4SmNSr+GpseUDVKEoRSQ8S3k8lJ4dgp4BYW3AQRzjqkCi+GXmLz
lBV5UoEaJ8xyYyY6EqD6S8DegKgq7o/Te1Qq2B+ta++9O/emiJse+2BIbluJ1+i+
2NVWtSIdmWFKrU3vYaDxoGfOHytWy9lMqEPEwUUZ3aG9SLidYuRsmDo/DX4SiyFv
FVKvuvwv4N13WO1IwckDro4hX6jPXvEUBhNmkVsdNJsvle/DCloLI7OXgdwXTMOO
crmygTIIKUoAH9hsmtOBvdPGDAd2YZrWI7b4P+0/etjLvf7yGfPIFx1BH1+sYQtD
QRFQwg4=
-----END CERTIFICATE-----