Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/79972e84-5e3f-49dc-a771-a9ce4a106d77.roa
File:                     79972e84-5e3f-49dc-a771-a9ce4a106d77.roa (raw, json)
Hash identifier:          t1pcsTzT+TXMWtI1MtaIgsKLzx16V71I3BXem/MAKQ8=
Subject key identifier:   6B:70:6E:89:78:EA:80:71:5E:99:A6:70:F4:B3:85:07:25:4C:0A:A2
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       48CD860CFF49E3AE8AECD4432D4622E151B5FAE5
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/79972e84-5e3f-49dc-a771-a9ce4a106d77.roa
Signing time:             Sat 03 Dec 2022 00:00:00 +0000
ROA not before:           Sat 03 Dec 2022 00:00:00 +0000
ROA not after:            Tue 06 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:cd:86:0c:ff:49:e3:ae:8a:ec:d4:43:2d:46:22:e1:51:b5:fa:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  3 00:00:00 2022 GMT
            Not After : Dec  6 23:59:59 2022 GMT
        Subject: serialNumber=4f452db73e9171f8535fe92c22ac544b4f9d332a9360b577d67d846ff67d27a3, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:33:7e:44:9e:45:79:da:ae:27:1e:1b:a0:c1:
                    b6:5f:5d:af:1a:10:bb:a9:05:59:73:c5:9c:d4:08:
                    fa:f2:84:d4:26:04:77:21:1e:68:ca:54:f7:5f:ca:
                    77:6d:a3:d5:1b:c2:80:77:7e:16:38:a6:f0:8c:08:
                    05:59:bd:6c:37:bf:3a:91:35:50:89:4d:a6:fb:13:
                    16:75:69:c3:03:79:65:4f:d3:36:c5:fd:d6:c1:71:
                    51:ef:63:51:61:35:3b:bd:fd:a9:5a:9b:7a:12:ba:
                    ad:0f:f3:6b:ad:be:6f:ab:ea:bc:95:1d:75:fb:6e:
                    4e:c6:a2:82:78:dd:b3:74:5f:f8:7e:f6:50:84:8c:
                    cb:37:73:9f:a8:96:7a:64:9b:e7:a5:ae:65:99:11:
                    81:cb:e5:f5:0b:a6:db:25:07:28:a1:db:12:c7:a0:
                    aa:56:90:8f:c1:ba:ec:b8:e1:96:b4:3e:4b:77:9b:
                    7a:bf:6f:6d:0a:30:e4:02:ba:9a:e0:53:91:7b:e6:
                    27:81:ec:7d:d7:9d:7e:fd:cc:ec:6c:37:f0:11:17:
                    4e:4b:18:55:d0:a9:b7:14:21:dd:97:83:71:e9:fb:
                    26:4f:45:e3:a7:2f:68:f0:24:a8:30:1e:6a:91:40:
                    ed:ca:f5:6d:2b:ec:03:71:c0:63:82:e6:43:e1:ae:
                    d4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:70:6E:89:78:EA:80:71:5E:99:A6:70:F4:B3:85:07:25:4C:0A:A2
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/79972e84-5e3f-49dc-a771-a9ce4a106d77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:9e:75:dc:ce:a3:95:2f:5e:7a:29:f3:f0:ce:f0:b5:80:19:
         8b:2d:c6:b4:25:4b:a7:56:0f:cf:be:0c:36:c8:2f:33:a1:ba:
         49:73:df:c0:c3:ec:ac:ba:62:86:f2:3d:49:05:a7:7f:bb:c2:
         5d:49:14:9c:a4:94:3d:82:e6:38:51:01:53:37:df:b3:e7:b8:
         b2:fc:89:c6:a4:00:14:28:b0:a1:a3:bc:b6:82:5c:42:3c:64:
         6f:b9:e4:fe:fa:f8:e2:68:54:83:79:26:73:53:9c:47:d5:29:
         65:96:88:20:ff:35:4b:93:49:7b:4e:f3:b4:75:e1:19:00:8b:
         c0:b8:5e:8f:0c:14:c8:29:78:98:30:42:d2:26:ac:61:cd:3e:
         e0:77:35:69:fa:49:c7:12:23:e6:c3:65:2a:59:12:00:00:d0:
         cd:b0:da:2f:9f:c9:5c:34:5b:fe:ee:29:54:0a:fa:74:87:5f:
         23:73:12:03:af:d0:87:25:c9:d5:f0:d0:40:4d:bc:39:92:4a:
         f1:0c:8f:e8:fc:5c:27:32:55:8a:9c:3c:49:c4:4d:81:46:7f:
         63:44:21:67:18:15:15:3d:ac:a2:d6:ff:3e:3d:c1:16:75:12:
         f2:7c:a8:72:16:22:aa:95:a3:16:ab:03:86:12:13:f7:05:db:
         87:f3:2b:eb
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUSM2GDP9J466K7NRDLUYi4VG1+uUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMjAzMDAwMDAwWhcNMjIxMjA2MjM1OTU5
WjCBpTFJMEcGA1UEBRNANGY0NTJkYjczZTkxNzFmODUzNWZlOTJjMjJhYzU0NGI0
ZjlkMzMyYTkzNjBiNTc3ZDY3ZDg0NmZmNjdkMjdhMzEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOwzfkSeRXnariceG6DBtl9drxoQu6kFWXPFnNQI+vKE1CYEdyEe
aMpU91/Kd22j1RvCgHd+Fjim8IwIBVm9bDe/OpE1UIlNpvsTFnVpwwN5ZU/TNsX9
1sFxUe9jUWE1O739qVqbehK6rQ/za62+b6vqvJUddftuTsaignjds3Rf+H72UISM
yzdzn6iWemSb56WuZZkRgcvl9Qum2yUHKKHbEsegqlaQj8G67LjhlrQ+S3eber9v
bQow5AK6muBTkXvmJ4Hsfdedfv3M7Gw38BEXTksYVdCptxQh3ZeDcen7Jk9F46cv
aPAkqDAeapFA7cr1bSvsA3HAY4LmQ+Gu1HUCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRrcG6JeOqAcV6ZpnD0s4UHJUwKojAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNzk5NzJlODQtNWUzZi00OWRjLWE3NzEtYTljZTRhMTA2ZDc3LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALGeddzOo5UvXnop
8/DO8LWAGYstxrQlS6dWD8++DDbILzOhuklz38DD7Ky6YobyPUkFp3+7wl1JFJyk
lD2C5jhRAVM337PnuLL8icakABQosKGjvLaCXEI8ZG+55P76+OJoVIN5JnNTnEfV
KWWWiCD/NUuTSXtO87R14RkAi8C4Xo8MFMgpeJgwQtImrGHNPuB3NWn6SccSI+bD
ZSpZEgAA0M2w2i+fyVw0W/7uKVQK+nSHXyNzEgOv0IclydXw0EBNvDmSSvEMj+j8
XCcyVYqcPEnETYFGf2NEIWcYFRU9rKLW/z49wRZ1EvJ8qHIWIqqVoxarA4YSE/cF
24fzK+s=
-----END CERTIFICATE-----