Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/79c1bbe8-7135-4b5b-8d13-7eb62163310c.roa
File:                     79c1bbe8-7135-4b5b-8d13-7eb62163310c.roa (raw, json)
Hash identifier:          OqibsRlFLzUobXxHURPfnOuWXyq0nqMMaFMyLG/kCBQ=
Subject key identifier:   06:4F:21:D5:E3:CC:11:C0:04:C4:DF:63:10:3A:24:08:53:DA:47:54
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       15D518B9EBBCD78E8F570E3E562305B99F85461C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/79c1bbe8-7135-4b5b-8d13-7eb62163310c.roa
Signing time:             Wed 26 Oct 2022 00:00:00 +0000
ROA not before:           Wed 26 Oct 2022 00:00:00 +0000
ROA not after:            Sat 29 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d5:18:b9:eb:bc:d7:8e:8f:57:0e:3e:56:23:05:b9:9f:85:46:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 26 00:00:00 2022 GMT
            Not After : Oct 29 23:59:59 2022 GMT
        Subject: serialNumber=93541b828ec0d6bf796e96bef70dd2d2be24ba40080f22d0285160c7724a9f73, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:cc:52:1c:7c:65:42:94:b6:ba:0d:da:ef:
                    75:f7:ea:f0:c1:c5:26:5b:75:0f:ec:b0:e7:3c:66:
                    07:a8:0a:f8:a9:7d:7e:87:6e:70:38:02:05:44:55:
                    25:69:5f:33:d0:81:5a:bb:b3:7b:b9:dd:40:c2:5c:
                    8f:75:23:7d:23:6b:65:3f:c7:6d:9d:0d:9e:73:9a:
                    4a:e5:5f:69:0a:54:b3:33:de:56:e0:48:84:17:4e:
                    0e:e8:ea:33:67:26:5c:79:2d:b0:e1:43:ba:d5:ec:
                    69:7f:96:50:70:56:aa:c6:85:df:9f:ce:21:78:35:
                    fa:71:da:c0:e3:e4:90:0a:8c:66:ce:22:ff:7e:8b:
                    02:d4:22:fd:3b:1b:89:d8:49:75:71:31:71:79:a4:
                    3d:57:48:69:6f:8c:df:aa:bc:a1:be:18:4b:01:ca:
                    97:0d:f0:36:b6:18:82:22:65:6e:a8:3d:f9:d1:5a:
                    82:1f:4a:c5:e7:bb:ac:0c:55:5d:88:74:dd:af:2b:
                    4b:21:51:ae:2f:aa:94:87:c1:12:3e:ba:b0:dc:f8:
                    96:61:96:e8:04:69:4b:9f:67:f5:20:bd:ec:83:d7:
                    08:5e:dd:56:bc:a5:c7:6e:e7:49:86:98:54:a2:90:
                    77:11:7c:d4:8a:7c:4b:e4:49:76:f0:37:25:20:78:
                    59:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4F:21:D5:E3:CC:11:C0:04:C4:DF:63:10:3A:24:08:53:DA:47:54
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/79c1bbe8-7135-4b5b-8d13-7eb62163310c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:fb:5f:dd:09:70:3b:b0:0e:90:93:cf:20:ce:e7:ae:19:93:
         d5:39:25:c9:8f:0f:4b:28:14:8e:31:45:86:20:d5:44:97:15:
         7e:9f:5a:5d:87:97:9e:ee:39:1f:98:85:0d:85:cf:19:e2:3c:
         24:a2:b6:29:1c:84:d2:07:a7:8a:7b:26:9b:51:af:9e:03:40:
         5b:af:e1:15:d4:76:3f:e6:42:af:89:b8:82:25:dd:98:e4:3e:
         dd:82:42:00:3e:da:0b:af:9c:21:a7:1e:f5:8b:9a:3c:5f:72:
         ac:fb:40:2a:f9:5d:14:a3:5d:57:35:2f:a0:13:51:f1:c1:db:
         aa:c8:b0:01:98:c7:e6:b3:a7:85:b7:46:cd:57:26:77:88:ac:
         15:cb:c9:42:7b:8f:63:92:36:38:f0:08:8b:0f:42:29:9f:96:
         b1:7b:ec:e2:cd:c1:76:c5:0e:ff:77:44:f7:55:6a:43:35:0b:
         26:4c:ef:bc:eb:fe:9f:d5:d8:9c:35:48:5c:b2:ce:b8:57:a5:
         a0:f5:8d:b5:ed:8a:0e:ba:3b:03:3e:b3:5f:d4:03:c3:e2:82:
         f0:1b:24:8a:b0:bb:e4:6a:ea:19:3e:d4:90:b7:de:84:66:57:
         95:b5:24:3e:32:5e:5a:6c:a1:b5:2e:fd:fb:8f:3b:0e:68:91:
         95:31:88:19
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUFdUYueu8146PVw4+ViMFuZ+FRhwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMDI2MDAwMDAwWhcNMjIxMDI5MjM1OTU5
WjCBpTFJMEcGA1UEBRNAOTM1NDFiODI4ZWMwZDZiZjc5NmU5NmJlZjcwZGQyZDJi
ZTI0YmE0MDA4MGYyMmQwMjg1MTYwYzc3MjRhOWY3MzEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALKhzFIcfGVClLa6Ddrvdffq8MHFJlt1D+yw5zxmB6gK+Kl9fodu
cDgCBURVJWlfM9CBWruze7ndQMJcj3UjfSNrZT/HbZ0NnnOaSuVfaQpUszPeVuBI
hBdODujqM2cmXHktsOFDutXsaX+WUHBWqsaF35/OIXg1+nHawOPkkAqMZs4i/36L
AtQi/TsbidhJdXExcXmkPVdIaW+M36q8ob4YSwHKlw3wNrYYgiJlbqg9+dFagh9K
xee7rAxVXYh03a8rSyFRri+qlIfBEj66sNz4lmGW6ARpS59n9SC97IPXCF7dVryl
x27nSYaYVKKQdxF81Ip8S+RJdvA3JSB4WdkCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQGTyHV48wRwATE32MQOiQIU9pHVDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNzljMWJiZTgtNzEzNS00YjViLThkMTMtN2ViNjIxNjMzMTBjLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFv7X90JcDuwDpCT
zyDO564Zk9U5JcmPD0soFI4xRYYg1USXFX6fWl2Hl57uOR+YhQ2FzxniPCSitikc
hNIHp4p7JptRr54DQFuv4RXUdj/mQq+JuIIl3ZjkPt2CQgA+2guvnCGnHvWLmjxf
cqz7QCr5XRSjXVc1L6ATUfHB26rIsAGYx+azp4W3Rs1XJneIrBXLyUJ7j2OSNjjw
CIsPQimflrF77OLNwXbFDv93RPdVakM1CyZM77zr/p/V2Jw1SFyyzrhXpaD1jbXt
ig66OwM+s1/UA8PigvAbJIqwu+Rq6hk+1JC33oRmV5W1JD4yXlpsobUu/fuPOw5o
kZUxiBk=
-----END CERTIFICATE-----