Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8cc51e95-4528-47e3-8ae2-1ae5a2fc03ac.roa
File:                     8cc51e95-4528-47e3-8ae2-1ae5a2fc03ac.roa (raw, json)
Hash identifier:          0pgmR1RvoyhHJ0TgVetiw9LHsacpe3PMzbB6f0+OWog=
Subject key identifier:   04:DD:D5:5A:F7:3D:20:AC:E6:88:1F:DC:30:65:15:61:1E:35:8C:D0
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3CE3FA9F1589A152251676C79B4BA12DFDE0A6F3
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8cc51e95-4528-47e3-8ae2-1ae5a2fc03ac.roa
Signing time:             Sat 13 May 2023 00:00:00 +0000
ROA not before:           Sat 13 May 2023 00:00:00 +0000
ROA not after:            Tue 16 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e3:fa:9f:15:89:a1:52:25:16:76:c7:9b:4b:a1:2d:fd:e0:a6:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 13 00:00:00 2023 GMT
            Not After : May 16 23:59:59 2023 GMT
        Subject: serialNumber=bf509b86c90b12068ec1234dfd703f43f09e99b7087529a3cd00bc1d6f6aba4f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:0b:2c:71:29:4d:c5:6e:51:bf:bd:5a:1a:
                    c1:dc:c7:04:1e:02:2c:50:3a:95:b7:41:da:6e:c3:
                    17:09:ca:1d:3d:89:74:7b:61:a7:ea:a0:2b:78:ff:
                    58:eb:17:0b:d3:37:74:89:55:b1:0e:c8:19:b6:f6:
                    18:51:3d:92:53:18:39:e5:2b:31:d5:9b:12:1a:37:
                    6a:f6:f4:80:13:5e:6f:c7:cc:eb:a3:af:32:61:20:
                    09:26:b4:ac:62:59:51:08:ae:2d:a3:f9:29:40:56:
                    3a:23:b3:42:a7:eb:29:93:ff:ed:55:c9:44:70:92:
                    50:99:d8:5e:43:0c:81:f1:04:b7:35:93:4a:cf:9f:
                    f7:4e:8a:5e:03:22:bf:ab:c3:fd:ff:ef:99:61:e1:
                    87:47:bc:9d:ec:d9:2e:4a:ea:52:10:ce:a5:1f:5d:
                    0d:70:72:ff:18:88:02:df:5b:54:f2:d0:e7:4d:ed:
                    81:1b:88:e7:85:05:f9:10:f7:b0:82:6c:18:8d:08:
                    0d:2b:1a:ea:61:22:7d:ce:eb:d8:62:40:88:be:45:
                    8a:aa:bd:8f:e7:83:5e:31:19:32:f3:3d:8d:24:a7:
                    e1:f0:cc:d0:f2:0b:a2:92:32:30:5b:33:3d:a3:28:
                    c6:1d:2c:cf:80:b0:86:7d:46:61:41:b6:96:7a:22:
                    6b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DD:D5:5A:F7:3D:20:AC:E6:88:1F:DC:30:65:15:61:1E:35:8C:D0
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8cc51e95-4528-47e3-8ae2-1ae5a2fc03ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:e0:73:6a:4b:48:45:12:e3:b9:bc:91:78:35:74:4e:d3:e2:
         f0:ad:38:67:31:de:97:6d:ee:7c:26:83:fc:e5:22:51:25:63:
         e2:2a:1b:ea:5f:8e:d7:b9:d4:61:2d:2d:87:50:b5:34:f6:bd:
         ba:89:cd:f9:33:b7:a4:ef:18:91:15:82:4e:2e:23:98:ed:de:
         a5:1e:48:09:3f:cb:94:4a:38:6d:e9:30:7c:8b:9c:19:15:56:
         bf:fc:b2:27:82:d0:a4:d2:77:59:c9:37:93:aa:e5:56:7c:78:
         3e:26:36:08:1d:85:12:b2:3d:63:22:ca:37:fd:ea:db:5c:1e:
         52:39:4d:fc:f0:63:32:5d:99:b5:45:32:d6:b2:28:b5:0b:7e:
         8b:5b:38:d3:9a:6e:e3:ad:23:af:b1:94:0d:04:0f:9c:27:b7:
         71:a2:d5:0e:8c:a0:ed:96:4e:bb:45:df:b2:f9:17:f6:24:37:
         df:91:7a:4a:b6:d1:56:cb:34:48:f9:33:83:a2:e2:17:8e:71:
         e8:60:ef:49:41:ca:f9:ea:bf:ef:17:03:25:97:ff:40:77:22:
         79:10:53:c2:b8:4b:9a:52:78:d3:83:11:1d:75:7d:03:07:ac:
         00:76:95:d5:cd:f2:85:07:8c:35:96:3e:84:b7:e8:52:a7:fe:
         57:87:22:a1
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUPOP6nxWJoVIlFnbHm0uhLf3gpvMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNTEzMDAwMDAwWhcNMjMwNTE2MjM1OTU5
WjCBpTFJMEcGA1UEBRNAYmY1MDliODZjOTBiMTIwNjhlYzEyMzRkZmQ3MDNmNDNm
MDllOTliNzA4NzUyOWEzY2QwMGJjMWQ2ZjZhYmE0ZjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKxtCyxxKU3FblG/vVoawdzHBB4CLFA6lbdB2m7DFwnKHT2JdHth
p+qgK3j/WOsXC9M3dIlVsQ7IGbb2GFE9klMYOeUrMdWbEho3avb0gBNeb8fM66Ov
MmEgCSa0rGJZUQiuLaP5KUBWOiOzQqfrKZP/7VXJRHCSUJnYXkMMgfEEtzWTSs+f
906KXgMiv6vD/f/vmWHhh0e8nezZLkrqUhDOpR9dDXBy/xiIAt9bVPLQ503tgRuI
54UF+RD3sIJsGI0IDSsa6mEifc7r2GJAiL5Fiqq9j+eDXjEZMvM9jSSn4fDM0PIL
opIyMFszPaMoxh0sz4Cwhn1GYUG2lnoia7MCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQE3dVa9z0grOaIH9wwZRVhHjWM0DAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvOGNjNTFlOTUtNDUyOC00N2UzLThhZTItMWFlNWEyZmMwM2FjLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAMngc2pLSEUS47m8
kXg1dE7T4vCtOGcx3pdt7nwmg/zlIlElY+IqG+pfjte51GEtLYdQtTT2vbqJzfkz
t6TvGJEVgk4uI5jt3qUeSAk/y5RKOG3pMHyLnBkVVr/8sieC0KTSd1nJN5Oq5VZ8
eD4mNggdhRKyPWMiyjf96ttcHlI5TfzwYzJdmbVFMtayKLULfotbONOabuOtI6+x
lA0ED5wnt3Gi1Q6MoO2WTrtF37L5F/YkN9+Rekq20VbLNEj5M4Oi4heOcehg70lB
yvnqv+8XAyWX/0B3InkQU8K4S5pSeNODER11fQMHrAB2ldXN8oUHjDWWPoS36FKn
/leHIqE=
-----END CERTIFICATE-----