Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/96062dad-3b92-4d19-8c68-ef5f01ace6e3.roa
File:                     96062dad-3b92-4d19-8c68-ef5f01ace6e3.roa (raw, json)
Hash identifier:          +ZfIoc7jdzHwYvxkS1eeSYxu7lyKzbiTo8c3z4nVQoA=
Subject key identifier:   4F:04:D0:22:D9:27:92:26:C2:42:03:D9:64:75:3E:B3:20:2A:B4:5A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7793C1BA0A01C1F38EB9C46C1B1C1C707CE74A67
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/96062dad-3b92-4d19-8c68-ef5f01ace6e3.roa
Signing time:             Fri 24 Jun 2022 00:00:00 +0000
ROA not before:           Fri 24 Jun 2022 00:00:00 +0000
ROA not after:            Mon 27 Jun 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:93:c1:ba:0a:01:c1:f3:8e:b9:c4:6c:1b:1c:1c:70:7c:e7:4a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 24 00:00:00 2022 GMT
            Not After : Jun 27 23:59:59 2022 GMT
        Subject: serialNumber=68b703c634824a96e3f8a335791eaee0121f74ec33778902f8d3fdd5ae1815ca, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:61:6f:a8:e5:1d:1d:1a:5a:93:17:0e:6f:3a:
                    f1:3e:41:bd:15:99:94:a5:50:bb:03:77:22:bc:d9:
                    6e:a3:f7:d0:74:9f:9e:51:35:6d:c1:fe:cf:f1:83:
                    f8:1c:85:79:22:3f:81:90:be:b9:c4:1a:2c:4a:5e:
                    56:25:ab:54:61:da:73:e6:60:86:3b:d2:7d:a4:6a:
                    36:f7:a4:d4:d0:76:65:02:02:2f:45:1e:78:72:50:
                    a5:f9:40:b2:2d:7a:bb:e9:a2:87:cb:91:6f:b8:c8:
                    a3:b4:44:63:48:ef:fd:b6:1e:71:7a:43:ab:a4:0a:
                    c3:85:fb:09:7d:73:a5:24:c5:6a:79:a9:89:69:40:
                    9d:ce:52:5e:ea:70:82:dc:7e:2b:9d:57:74:fb:50:
                    4b:20:5a:f1:3c:27:3c:40:48:96:10:6c:a6:9e:39:
                    2d:3b:25:e3:d5:f6:20:9a:1f:1e:4d:15:f6:97:9a:
                    74:33:64:d1:69:35:58:2b:25:7e:d5:6e:9b:fb:a9:
                    6f:85:21:d5:c6:34:89:d3:d2:20:e5:f7:14:ac:4f:
                    22:db:79:5a:35:00:0e:52:24:d0:ea:f0:f0:6e:5d:
                    89:6f:1b:68:9e:31:7e:f8:6b:5a:fa:69:3b:62:71:
                    15:20:b9:33:a2:68:39:e9:e6:ad:b6:14:65:88:cc:
                    d1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:04:D0:22:D9:27:92:26:C2:42:03:D9:64:75:3E:B3:20:2A:B4:5A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/96062dad-3b92-4d19-8c68-ef5f01ace6e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:c2:12:05:af:11:f8:48:4b:49:53:26:11:ae:43:99:0d:a8:
         f2:02:19:97:af:d4:38:2c:39:b7:0c:91:b6:da:66:16:67:35:
         82:07:65:80:ff:18:ae:39:f7:a2:2f:15:5a:87:08:e7:65:cb:
         51:7c:8e:31:83:7f:2c:b3:dc:62:c2:b7:f6:1d:b1:e7:74:92:
         bb:80:21:a9:dc:e8:41:1a:9f:9e:61:66:7a:01:49:18:26:00:
         43:81:23:1b:37:e2:11:d5:bf:2d:a0:d7:e7:b5:2f:55:88:38:
         b8:86:05:e3:d3:bf:09:19:d6:65:bb:89:40:2b:e4:83:cc:fa:
         87:03:3c:02:51:bf:2d:5a:8e:5c:d8:ff:87:dc:ee:58:89:f8:
         31:43:11:af:3b:97:9a:43:74:8f:06:d3:21:0a:72:ca:2a:eb:
         f6:da:76:35:02:22:bd:5a:82:e6:b0:b9:0b:df:c4:38:a5:44:
         96:84:e4:b9:40:8c:14:65:3e:59:ba:a4:ed:cd:6d:ab:73:ec:
         73:52:aa:8a:78:93:67:f9:a4:aa:b6:34:e5:29:f5:00:e0:25:
         69:b4:a4:ee:36:cb:0d:6a:5e:a9:72:0f:4a:d7:cd:69:04:e1:
         f7:fc:23:f5:1c:ea:30:85:a9:ec:b7:9f:85:3b:e6:26:56:cd:
         76:bd:9d:be
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUd5PBugoBwfOOucRsGxwccHznSmcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIwNjI0MDAwMDAwWhcNMjIwNjI3MjM1OTU5
WjCBpTFJMEcGA1UEBRNANjhiNzAzYzYzNDgyNGE5NmUzZjhhMzM1NzkxZWFlZTAx
MjFmNzRlYzMzNzc4OTAyZjhkM2ZkZDVhZTE4MTVjYTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPFhb6jlHR0aWpMXDm868T5BvRWZlKVQuwN3IrzZbqP30HSfnlE1
bcH+z/GD+ByFeSI/gZC+ucQaLEpeViWrVGHac+ZghjvSfaRqNvek1NB2ZQICL0Ue
eHJQpflAsi16u+mih8uRb7jIo7REY0jv/bYecXpDq6QKw4X7CX1zpSTFanmpiWlA
nc5SXupwgtx+K51XdPtQSyBa8TwnPEBIlhBspp45LTsl49X2IJofHk0V9peadDNk
0Wk1WCslftVum/upb4Uh1cY0idPSIOX3FKxPItt5WjUADlIk0Orw8G5diW8baJ4x
fvhrWvppO2JxFSC5M6JoOenmrbYUZYjM0dcCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRPBNAi2SeSJsJCA9lkdT6zICq0WjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvOTYwNjJkYWQtM2I5Mi00ZDE5LThjNjgtZWY1ZjAxYWNlNmUzLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKbCEgWvEfhIS0lT
JhGuQ5kNqPICGZev1DgsObcMkbbaZhZnNYIHZYD/GK4596IvFVqHCOdly1F8jjGD
fyyz3GLCt/Ydsed0kruAIanc6EEan55hZnoBSRgmAEOBIxs34hHVvy2g1+e1L1WI
OLiGBePTvwkZ1mW7iUAr5IPM+ocDPAJRvy1ajlzY/4fc7liJ+DFDEa87l5pDdI8G
0yEKcsoq6/badjUCIr1aguawuQvfxDilRJaE5LlAjBRlPlm6pO3Nbatz7HNSqop4
k2f5pKq2NOUp9QDgJWm0pO42yw1qXqlyD0rXzWkE4ff8I/Uc6jCFqey3n4U75iZW
zXa9nb4=
-----END CERTIFICATE-----